dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x932, 0x0) [ 1703.995420][T14098] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 20:58:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x54}}, 0x0) [ 1704.255648][T14108] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1704.524788][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1704.537719][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1704.546506][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.547493][T13476] Call Trace: [ 1704.547493][T13476] dump_stack+0x1c9/0x220 [ 1704.547493][T13476] dump_header+0x1e7/0xd00 [ 1704.547493][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1704.574266][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1704.574266][T13476] ? ___ratelimit+0x542/0x720 [ 1704.583831][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1704.583831][T13476] oom_kill_process+0x216/0x580 [ 1704.583831][T13476] out_of_memory+0x181e/0x1cc0 [ 1704.583831][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1704.603868][T13476] alloc_pages_current+0x67d/0x990 [ 1704.603868][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1704.613804][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1704.613804][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1704.613804][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1704.613804][T13476] ion_ioctl+0x79d/0x1fc0 [ 1704.613804][T13476] ? debug_shrink_set+0x220/0x220 [ 1704.613804][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1704.613804][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1704.613804][T13476] do_syscall_64+0xb8/0x160 [ 1704.613804][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1704.613804][T13476] RIP: 0033:0x45ca29 [ 1704.613804][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1704.669067][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1704.669067][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1704.669067][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1704.669067][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1704.669067][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1704.730020][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1704.739753][T13476] Mem-Info: [ 1704.743129][T13476] active_anon:142104 inactive_anon:7191 isolated_anon:0 [ 1704.743129][T13476] active_file:1795 inactive_file:3389 isolated_file:0 [ 1704.743129][T13476] unevictable:0 dirty:69 writeback:0 unstable:0 [ 1704.743129][T13476] slab_reclaimable:5948 slab_unreclaimable:40721 [ 1704.743129][T13476] mapped:56317 shmem:13126 pagetables:10415 bounce:0 [ 1704.743129][T13476] free:210012 free_pcp:341 free_cma:0 [ 1704.782327][T13476] Node 0 active_anon:506548kB inactive_anon:22072kB active_file:116kB inactive_file:384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210604kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 389120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1704.811526][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1704.841119][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1704.846941][T13476] Node 0 DMA32 free:39320kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:481828kB inactive_anon:2844kB active_file:8kB inactive_file:360kB unevictable:0kB writepending:4kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3468kB pagetables:19440kB bounce:0kB free_pcp:684kB local_pcp:420kB free_cma:0kB [ 1704.879735][T13476] lowmem_reserve[]: 0 0 228 228 [ 1704.884818][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24720kB inactive_anon:19228kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4352kB pagetables:9252kB bounce:0kB free_pcp:680kB local_pcp:320kB free_cma:0kB [ 1704.918518][T13476] lowmem_reserve[]: 0 0 0 0 [ 1704.923110][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1704.935258][T13476] Node 0 DMA32: 898*4kB (UME) 574*8kB (UME) 364*16kB (UME) 247*32kB (UM) 102*64kB (UM) 49*128kB (UM) 18*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39320kB [ 1704.952301][T13476] Node 0 Normal: 758*4kB (UME) 294*8kB (UME) 113*16kB (ME) 46*32kB (UM) 16*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1704.967406][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.977301][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1704.986843][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.996725][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1705.006218][T13476] 18344 total pagecache pages [ 1705.011897][T13476] 0 pages in swap cache [ 1705.016348][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1705.022462][T13476] Free swap = 0kB 20:58:27 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="45e9aed12f060000000000002025d86800278dcff47d010000805acf4f8f4e460234432479aed75d492b41082c3e110ef1ce3657012c0a23ea5bcee00a06dc9d8e99adaf81f5fc00000000000000000000000000000068e9d3a6c9a50a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c4fbeaffc8e63e5b1f745323bc5c5c48524974", 0xa4}], 0x4, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 20:58:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xa6f0}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 20:58:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x54}}, 0x0) 20:58:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff", 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1705.027878][T13476] Total swap = 0kB [ 1705.031645][T13476] 1965979 pages RAM [ 1705.035669][T13476] 0 pages HighMem/MovableOnly [ 1705.040389][T13476] 1423249 pages reserved [ 1705.044822][T13476] 0 pages cma reserved [ 1705.049510][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=16712,uid=0 [ 1705.064492][T13476] Out of memory: Killed process 16712 (syz-executor.5) total-vm:75108kB, anon-rss:4272kB, file-rss:34840kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1705.083302][ T1820] oom_reaper: reaped process 16712 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1705.149756][T14112] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1705.261749][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:58:27 executing program 1: socket$kcm(0x10, 0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 20:58:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000200000000000000000000ffe900"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) [ 1705.604451][ T1097] tipc: TX() has been purged, node left! 20:58:29 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="45e9aed12f060000000000002025d86800278dcff47d010000805acf4f8f4e460234432479aed75d492b41082c3e110ef1ce3657012c0a23ea5bcee00a06dc9d8e99adaf81f5fc00000000000000000000000000000068e9d3a6c9a50a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c4fbeaffc8e63e5b1f745323bc5c5c48524974", 0xa4}], 0x4, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 20:58:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 20:58:29 executing program 1: socket$kcm(0x10, 0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 20:58:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000200000000000000000000ffe900"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 20:58:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff", 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1707.087809][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:58:29 executing program 1: socket$kcm(0x10, 0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) [ 1707.939204][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1707.952347][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1707.961232][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.962200][T13476] Call Trace: [ 1707.962200][T13476] dump_stack+0x1c9/0x220 [ 1707.962200][T13476] dump_header+0x1e7/0xd00 [ 1707.962200][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1707.985585][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1707.985585][T13476] ? ___ratelimit+0x542/0x720 [ 1707.985585][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1707.985585][T13476] oom_kill_process+0x216/0x580 [ 1707.985585][T13476] out_of_memory+0x181e/0x1cc0 [ 1707.985585][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1707.985585][T13476] alloc_pages_current+0x67d/0x990 [ 1707.985585][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1707.985585][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1707.985585][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1707.985585][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1707.985585][T13476] ion_ioctl+0x79d/0x1fc0 [ 1707.985585][T13476] ? debug_shrink_set+0x220/0x220 [ 1707.985585][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1707.985585][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1707.985585][T13476] do_syscall_64+0xb8/0x160 [ 1707.985585][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1707.985585][T13476] RIP: 0033:0x45ca29 [ 1707.985585][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1707.985585][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.985585][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1707.985585][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1707.985585][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1707.985585][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1707.985585][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1708.154708][T13476] Mem-Info: [ 1708.158078][T13476] active_anon:141500 inactive_anon:7191 isolated_anon:0 [ 1708.158078][T13476] active_file:1803 inactive_file:3413 isolated_file:0 [ 1708.158078][T13476] unevictable:0 dirty:56 writeback:0 unstable:0 [ 1708.158078][T13476] slab_reclaimable:5948 slab_unreclaimable:40631 [ 1708.158078][T13476] mapped:56293 shmem:13126 pagetables:10338 bounce:0 [ 1708.158078][T13476] free:209909 free_pcp:337 free_cma:0 [ 1708.197533][T13476] Node 0 active_anon:504376kB inactive_anon:22072kB active_file:64kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210608kB dirty:28kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 387072kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1708.229257][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1708.258620][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1708.264177][T13476] Node 0 DMA32 free:39480kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:479776kB inactive_anon:2844kB active_file:20kB inactive_file:424kB unevictable:0kB writepending:12kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3468kB pagetables:19440kB bounce:0kB free_pcp:684kB local_pcp:304kB free_cma:0kB [ 1708.296403][T13476] lowmem_reserve[]: 0 0 228 228 [ 1708.301351][T13476] Node 0 Normal free:9668kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24600kB inactive_anon:19228kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:16kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4336kB pagetables:9140kB bounce:0kB free_pcp:664kB local_pcp:316kB free_cma:0kB [ 1708.333487][T13476] lowmem_reserve[]: 0 0 0 0 [ 1708.338161][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1708.350263][T13476] Node 0 DMA32: 892*4kB (UME) 569*8kB (UME) 360*16kB (ME) 236*32kB (UM) 100*64kB (UM) 45*128kB (M) 17*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 41528kB [ 1708.367723][T13476] Node 0 Normal: 761*4kB (UME) 304*8kB (UME) 114*16kB (UME) 42*32kB (M) 16*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9668kB [ 1708.382913][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.392733][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.402533][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.412334][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.421847][T13476] 18348 total pagecache pages [ 1708.426701][T13476] 0 pages in swap cache [ 1708.430902][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1708.437166][T13476] Free swap = 0kB [ 1708.440924][T13476] Total swap = 0kB [ 1708.444865][T13476] 1965979 pages RAM [ 1708.448701][T13476] 0 pages HighMem/MovableOnly [ 1708.453425][T13476] 1423249 pages reserved [ 1708.457947][T13476] 0 pages cma reserved [ 1708.462120][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=12874,uid=0 20:58:30 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="45e9aed12f060000000000002025d86800278dcff47d010000805acf4f8f4e460234432479aed75d492b41082c3e110ef1ce3657012c0a23ea5bcee00a06dc9d8e99adaf81f5fc00000000000000000000000000000068e9d3a6c9a50a6638d827e6b924fa38cb0ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11ef386a6345c4fbeaffc8e63e5b1f745323bc5c5c48524974", 0xa4}], 0x4, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) 20:58:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000200000000000000000000ffe900"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 20:58:30 executing program 0: unshare(0x4000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000340)) 20:58:30 executing program 1: socket$kcm(0x10, 0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 20:58:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff", 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1708.477549][T13476] Out of memory: Killed process 12874 (syz-executor.4) total-vm:74976kB, anon-rss:4252kB, file-rss:34840kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1708.534465][ T1820] oom_reaper: reaped process 12874 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 20:58:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "000200000000000000000000ffe900"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) [ 1708.650633][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1709.805168][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1709.818051][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1709.826769][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.827900][T13476] Call Trace: [ 1709.827900][T13476] dump_stack+0x1c9/0x220 [ 1709.827900][T13476] dump_header+0x1e7/0xd00 [ 1709.827900][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1709.827900][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1709.827900][T13476] ? ___ratelimit+0x542/0x720 [ 1709.827900][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1709.827900][T13476] oom_kill_process+0x216/0x580 [ 1709.827900][T13476] out_of_memory+0x181e/0x1cc0 [ 1709.827900][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1709.827900][T13476] alloc_pages_current+0x67d/0x990 [ 1709.827900][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1709.827900][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1709.827900][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1709.827900][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1709.827900][T13476] ion_ioctl+0x79d/0x1fc0 [ 1709.827900][T13476] ? debug_shrink_set+0x220/0x220 [ 1709.827900][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1709.827900][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1709.827900][T13476] do_syscall_64+0xb8/0x160 [ 1709.827900][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1709.827900][T13476] RIP: 0033:0x45ca29 [ 1709.827900][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1709.827900][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.827900][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1709.827900][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1709.827900][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1709.827900][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1710.003194][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1710.018457][T13476] Mem-Info: [ 1710.021808][T13476] active_anon:139921 inactive_anon:7191 isolated_anon:0 [ 1710.021808][T13476] active_file:1802 inactive_file:3420 isolated_file:0 [ 1710.021808][T13476] unevictable:0 dirty:63 writeback:0 unstable:0 [ 1710.021808][T13476] slab_reclaimable:5948 slab_unreclaimable:40625 [ 1710.021808][T13476] mapped:56314 shmem:13126 pagetables:10288 bounce:0 [ 1710.021808][T13476] free:210043 free_pcp:360 free_cma:0 [ 1710.061332][T13476] Node 0 active_anon:498104kB inactive_anon:22072kB active_file:60kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210608kB dirty:28kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1710.090390][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1710.119546][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1710.124979][T13476] Node 0 DMA32 free:39388kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:473504kB inactive_anon:2844kB active_file:16kB inactive_file:420kB unevictable:0kB writepending:12kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3452kB pagetables:19328kB bounce:0kB free_pcp:776kB local_pcp:376kB free_cma:0kB [ 1710.157243][T13476] lowmem_reserve[]: 0 0 228 228 [ 1710.162166][T13476] Node 0 Normal free:9668kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24600kB inactive_anon:19228kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:16kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4336kB pagetables:9140kB bounce:0kB free_pcp:664kB local_pcp:316kB free_cma:0kB [ 1710.194249][T13476] lowmem_reserve[]: 0 0 0 0 [ 1710.198835][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1710.211034][T13476] Node 0 DMA32: 891*4kB (ME) 568*8kB (ME) 361*16kB (UME) 235*32kB (M) 99*64kB (M) 45*128kB (M) 17*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 39388kB [ 1710.227751][T13476] Node 0 Normal: 761*4kB (UME) 304*8kB (UME) 114*16kB (UME) 42*32kB (M) 16*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9668kB [ 1710.242904][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1710.252832][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1710.262661][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1710.272465][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1710.282752][T13476] 18358 total pagecache pages [ 1710.287674][T13476] 0 pages in swap cache [ 1710.291921][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1710.298836][T13476] Free swap = 0kB [ 1710.302612][T13476] Total swap = 0kB [ 1710.306521][T13476] 1965979 pages RAM [ 1710.310360][T13476] 0 pages HighMem/MovableOnly [ 1710.315383][T13476] 1423249 pages reserved [ 1710.319660][T13476] 0 pages cma reserved [ 1710.324104][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=16888,uid=0 [ 1710.339090][T13476] Out of memory: Killed process 16888 (syz-executor.5) total-vm:74844kB, anon-rss:4256kB, file-rss:34840kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 20:58:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 20:58:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060806fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 20:58:32 executing program 0: unshare(0x4000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000340)) 20:58:32 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000002d000b05000000ef1b1ea6c9d6ff63a5", @ANYRES32, @ANYBLOB="00000014f1ffffffffffffff0800010073"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:58:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff", 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1710.358041][ T1820] oom_reaper: reaped process 16888 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1710.447430][T14164] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.498806][T14171] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1710.516020][T14172] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.525797][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:58:32 executing program 0: unshare(0x4000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000340)) [ 1710.744523][ T24] tipc: TX() has been purged, node left! [ 1711.294949][T14180] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 20:58:34 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 20:58:34 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 20:58:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060806fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 20:58:34 executing program 5: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) 20:58:34 executing program 0: unshare(0x4000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000340)) [ 1712.011650][T14190] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.1'. 20:58:34 executing program 0: socket$bt_cmtp(0x1f, 0x3, 0x5) 20:58:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x43) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x9, 0x1, 0x0, 0x0, 0x40}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060806fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 20:58:34 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) write(r0, &(0x7f0000002000)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='macvlan1\x00') [ 1712.559479][T14206] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.1'. 20:58:35 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000002d000b05000000ef1b1ea6c9d6ff63a5", @ANYRES32, @ANYBLOB="00000014f1ffffffffffffff0800010073"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:58:35 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f0000000040), 0x4) 20:58:35 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 20:58:35 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) write(r0, &(0x7f0000002000)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='macvlan1\x00') 20:58:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060806fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1713.261787][T14223] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1713.328003][T14225] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 20:58:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x43) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x9, 0x1, 0x0, 0x0, 0x40}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:35 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f0000000040), 0x4) 20:58:35 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) write(r0, &(0x7f0000002000)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='macvlan1\x00') 20:58:36 executing program 1: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) 20:58:36 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) write(r0, &(0x7f0000002000)='.', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='macvlan1\x00') 20:58:36 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f0000000040), 0x4) 20:58:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 20:58:37 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000002d000b05000000ef1b1ea6c9d6ff63a5", @ANYRES32, @ANYBLOB="00000014f1ffffffffffffff0800010073"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:58:37 executing program 1: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) 20:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x43) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x9, 0x1, 0x0, 0x0, 0x40}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:37 executing program 5: unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x4020940d, &(0x7f0000000000)) 20:58:37 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, &(0x7f0000000040), 0x4) [ 1715.023342][T14264] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 20:58:37 executing program 1: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) 20:58:37 executing program 5: unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x4020940d, &(0x7f0000000000)) 20:58:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x7b) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 20:58:37 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x10000}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 20:58:37 executing program 5: unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x4020940d, &(0x7f0000000000)) 20:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x43) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0xff, 0x0, 0x9, 0x1, 0x0, 0x0, 0x40}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:38 executing program 1: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) 20:58:38 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000002d000b05000000ef1b1ea6c9d6ff63a5", @ANYRES32, @ANYBLOB="00000014f1ffffffffffffff0800010073"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:58:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x7b) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 20:58:38 executing program 5: unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x4020940d, &(0x7f0000000000)) 20:58:38 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x18, 0x110, 0xa, 'i'}], 0x28}}], 0x2, 0x0) 20:58:38 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0xa801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:58:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) [ 1716.871383][T14343] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 20:58:39 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v3') 20:58:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0xa801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:58:39 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x18, 0x110, 0xa, 'i'}], 0x28}}], 0x2, 0x0) 20:58:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x7b) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 20:58:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) 20:58:39 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v3') 20:58:40 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0xa801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:58:40 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x18, 0x110, 0xa, 'i'}], 0x28}}], 0x2, 0x0) 20:58:40 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v3') 20:58:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x7b) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 20:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) 20:58:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:58:40 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x18, 0x110, 0xa, 'i'}], 0x28}}], 0x2, 0x0) 20:58:40 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0xa801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:58:40 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v3') 20:58:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4100, 0x1004}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 20:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) 20:58:40 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:58:40 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e10e", 0x3cd}], 0x1, &(0x7f0000002a00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/254, 0xfe, 0x0, 0x0, 0x0) 20:58:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x2, 0x0) 20:58:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x1000c}) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) splice(r2, 0x0, r4, 0x0, 0x10003, 0x0) 20:58:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:58:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4100, 0x1004}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 20:58:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 20:58:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4100, 0x1004}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 20:58:41 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:58:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4100, 0x1004}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 20:58:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3c, &(0x7f00000003c0)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a14c67dbe3ec9eebdf28067783f0dc3bc4dfd726aa9ac6c2a3b818b0000000009eb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:58:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x201}, 0xfe99}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 20:58:41 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e10e", 0x3cd}], 0x1, &(0x7f0000002a00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/254, 0xfe, 0x0, 0x0, 0x0) 20:58:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 20:58:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x1000c}) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) splice(r2, 0x0, r4, 0x0, 0x10003, 0x0) 20:58:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 20:58:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x201}, 0xfe99}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 20:58:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) 20:58:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x201}, 0xfe99}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}}) [ 1720.932568][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1720.946407][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1720.955241][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.963726][T13476] Call Trace: [ 1720.967508][T13476] dump_stack+0x1c9/0x220 [ 1720.972765][T13476] dump_header+0x1e7/0xd00 [ 1720.976767][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1720.984451][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1720.990365][T13476] ? ___ratelimit+0x542/0x720 [ 1720.995812][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1721.001114][T13476] oom_kill_process+0x216/0x580 [ 1721.002408][T13476] out_of_memory+0x181e/0x1cc0 [ 1721.010042][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1721.016721][T13476] alloc_pages_current+0x67d/0x990 [ 1721.021867][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1721.023771][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1721.032465][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1721.037887][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1721.043714][T13476] ion_ioctl+0x79d/0x1fc0 [ 1721.048726][T13476] ? debug_shrink_set+0x220/0x220 [ 1721.054113][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1721.057960][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1721.063062][T13476] do_syscall_64+0xb8/0x160 [ 1721.067482][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1721.074114][T13476] RIP: 0033:0x45ca29 [ 1721.077976][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1721.097029][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.103832][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1721.113781][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1721.122204][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1721.130391][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1721.138100][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1721.147384][T13476] Mem-Info: [ 1721.150675][T13476] active_anon:138864 inactive_anon:7191 isolated_anon:0 [ 1721.150675][T13476] active_file:1873 inactive_file:3272 isolated_file:0 [ 1721.150675][T13476] unevictable:0 dirty:50 writeback:0 unstable:0 [ 1721.150675][T13476] slab_reclaimable:5942 slab_unreclaimable:40639 [ 1721.150675][T13476] mapped:56348 shmem:13126 pagetables:10257 bounce:0 [ 1721.150675][T13476] free:209602 free_pcp:77 free_cma:0 [ 1721.189457][T13476] Node 0 active_anon:493892kB inactive_anon:22072kB active_file:4kB inactive_file:424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210604kB dirty:16kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 376832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1721.219137][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.248660][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1721.254102][T13476] Node 0 DMA32 free:39276kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:469408kB inactive_anon:2844kB active_file:0kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3452kB pagetables:19328kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1721.286178][T13476] lowmem_reserve[]: 0 0 228 228 [ 1721.292341][T13476] Node 0 Normal free:9196kB min:11756kB low:14180kB high:16604kB reserved_highatomic:0KB active_anon:24484kB inactive_anon:19228kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4320kB pagetables:9032kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1721.324003][T13476] lowmem_reserve[]: 0 0 0 0 [ 1721.328593][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1721.340680][T13476] Node 0 DMA32: 923*4kB (ME) 572*8kB (UME) 362*16kB (ME) 238*32kB (UME) 99*64kB (M) 46*128kB (M) 17*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39276kB [ 1721.357775][T13476] Node 0 Normal: 773*4kB (UME) 289*8kB (UME) 97*16kB (UME) 40*32kB (UM) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9196kB [ 1721.372848][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.384263][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1721.393734][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1721.403343][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1721.412829][T13476] 18293 total pagecache pages [ 1721.417707][T13476] 0 pages in swap cache [ 1721.421919][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1721.428365][T13476] Free swap = 0kB [ 1721.432128][T13476] Total swap = 0kB [ 1721.436091][T13476] 1965979 pages RAM [ 1721.439933][T13476] 0 pages HighMem/MovableOnly [ 1721.444766][T13476] 1423249 pages reserved [ 1721.449300][T13476] 0 pages cma reserved [ 1721.453412][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=16839,uid=0 [ 1721.469135][T13476] Out of memory: Killed process 16839 (syz-executor.5) total-vm:74844kB, anon-rss:4256kB, file-rss:34840kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1721.491153][ T1820] oom_reaper: reaped process 16839 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1721.784114][ T9686] tipc: TX() has been purged, node left! 20:58:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3c, &(0x7f00000003c0)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a14c67dbe3ec9eebdf28067783f0dc3bc4dfd726aa9ac6c2a3b818b0000000009eb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:58:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 20:58:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x201}, 0xfe99}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:44 executing program 0: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x2, 0x4, 0x6, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x40) r0 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') 20:58:44 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e10e", 0x3cd}], 0x1, &(0x7f0000002a00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141426ac1414e7000000003800000000000000000000070000009428000000940400002d440c0003ffffffff00000000831300ac142700ac1414bbac14e6d70a82e839ce07fa14000000000000d3eec3840c33c74ed56fe782c43a99c963a91a595ff0878382402837f0404c5b8dc52d1c40ef1f7ba4aca40d9c398a03bbf50635694a3a9c35febf4e2733ddde67340beedf157458e2123fcc3ffe500b765949caf54c83e417535339ab1c33fd23df03d22bbf3c1d3ebb3b71cda404e2ed6823d90e0914936ec134808fe4d7ca6725d3953f246521ed9a9507cde4dcf95734c3c784b6becee1e659533e12107657abaa537a0d2b1856ee0ce0db79fd8c4e95d83530c2a3d0cb0b4e8d6e8d961eec86ff757b80e9cb072d53964581305ca051a45efa34f8adb68e8b1f86162a8afa8700000bfca3ad6d3cf8023d38abbd61ce22ad9db97c50ec4519fe61e882bdfcb0568d350bcee5063f3b87919499a12c3b0186bb6b5c6b07f86808b93ee404ca3ffafe3f6e53ebfc20d6fc780cf7ea072021aad3b75d297d4187dc6bd63aaccb30856445126497b23a3cdc9901589db8c4e5feef69cb8fd8b41a5c2b8efda2b807d91b2be6953608eb7d12ea947f303e37de7a35da9c13342a601faf05d8885a9f6a97a15f0b09cfeafe60a8f0c186192429524ab4c465a5f06f293741424b61112eb7a459d5e31674f1ec5489ed7fc297ddcadb9771af81f9fefc294873dd0000000198f20544ecefb41830f6b2ba0000422862000000000000000000"], 0x58}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/254, 0xfe, 0x0, 0x0, 0x0) 20:58:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x1000c}) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) splice(r2, 0x0, r4, 0x0, 0x10003, 0x0) 20:58:44 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x29, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:45 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) 20:58:45 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x29, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 1723.177148][T14568] IPVS: ftp: loaded support on port[0] = 21 20:58:45 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x29, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) [ 1724.933874][ T9686] tipc: TX() has been purged, node left! [ 1725.721817][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1725.734633][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1725.743368][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.744398][T13476] Call Trace: [ 1725.744398][T13476] dump_stack+0x1c9/0x220 [ 1725.744398][T13476] dump_header+0x1e7/0xd00 [ 1725.744398][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1725.744398][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1725.744398][T13476] ? ___ratelimit+0x542/0x720 [ 1725.744398][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1725.744398][T13476] oom_kill_process+0x216/0x580 [ 1725.744398][T13476] out_of_memory+0x181e/0x1cc0 [ 1725.798160][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1725.798160][T13476] alloc_pages_current+0x67d/0x990 [ 1725.798160][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1725.798160][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1725.798160][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1725.798160][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1725.833701][T13476] ion_ioctl+0x79d/0x1fc0 [ 1725.833701][T13476] ? debug_shrink_set+0x220/0x220 [ 1725.833701][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1725.833701][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1725.833701][T13476] do_syscall_64+0xb8/0x160 [ 1725.833701][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1725.833701][T13476] RIP: 0033:0x45ca29 [ 1725.833701][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1725.833701][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.833701][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1725.833701][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1725.833701][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 20:58:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3c, &(0x7f00000003c0)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a14c67dbe3ec9eebdf28067783f0dc3bc4dfd726aa9ac6c2a3b818b0000000009eb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:58:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x29, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:48 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e10e", 0x3cd}], 0x1, &(0x7f0000002a00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/254, 0xfe, 0x0, 0x0, 0x0) 20:58:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4a5, 0x1000c}) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x7, 0x4) splice(r2, 0x0, r4, 0x0, 0x10003, 0x0) 20:58:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800000}) close(r0) socket$rxrpc(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 20:58:48 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) [ 1725.833701][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1725.833701][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1725.939928][T13476] Mem-Info: [ 1725.943196][T13476] active_anon:137876 inactive_anon:7191 isolated_anon:0 [ 1725.943196][T13476] active_file:1898 inactive_file:3152 isolated_file:0 [ 1725.943196][T13476] unevictable:0 dirty:61 writeback:0 unstable:0 [ 1725.943196][T13476] slab_reclaimable:5938 slab_unreclaimable:40574 [ 1725.943196][T13476] mapped:56367 shmem:13132 pagetables:10283 bounce:0 [ 1725.943196][T13476] free:210024 free_pcp:19 free_cma:0 [ 1725.982101][T13476] Node 0 active_anon:489660kB inactive_anon:22072kB active_file:40kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210604kB dirty:20kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1726.011846][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1726.040952][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1726.047306][T13476] Node 0 DMA32 free:39620kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:465304kB inactive_anon:2844kB active_file:0kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3452kB pagetables:19328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1726.079124][T13476] lowmem_reserve[]: 0 0 228 228 [ 1726.084159][T13476] Node 0 Normal free:9360kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24356kB inactive_anon:19228kB active_file:36kB inactive_file:4kB unevictable:0kB writepending:12kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4304kB pagetables:8924kB bounce:0kB free_pcp:76kB local_pcp:56kB free_cma:0kB [ 1726.116858][T13476] lowmem_reserve[]: 0 0 0 0 [ 1726.121666][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1726.133704][T13476] Node 0 DMA32: 936*4kB (UME) 572*8kB (UME) 363*16kB (UME) 236*32kB (UME) 99*64kB (M) 47*128kB (UM) 16*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 39664kB [ 1726.152094][T13476] Node 0 Normal: 760*4kB (UME) 274*8kB (ME) 98*16kB (UME) 46*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9360kB [ 1726.167067][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1726.176875][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1726.186360][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1726.196072][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1726.205527][T13476] 18208 total pagecache pages [ 1726.210244][T13476] 0 pages in swap cache [ 1726.214572][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1726.220682][T13476] Free swap = 0kB [ 1726.224555][T13476] Total swap = 0kB [ 1726.228316][T13476] 1965979 pages RAM [ 1726.232158][T13476] 0 pages HighMem/MovableOnly [ 1726.236970][T13476] 1423249 pages reserved [ 1726.241249][T13476] 0 pages cma reserved [ 1726.245506][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=17279,uid=0 20:58:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 1726.260548][T13476] Out of memory: Killed process 17279 (syz-executor.4) total-vm:74836kB, anon-rss:3420kB, file-rss:34640kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1726.350101][ T1820] oom_reaper: reaped process 17279 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1726.369304][T14613] IPVS: ftp: loaded support on port[0] = 21 20:58:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x1, [{}]}) 20:58:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x40000}, 0x0) 20:58:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x88}}, {{@in6=@private2}, 0x0, @in6=@private1}}, 0xe8) [ 1727.118841][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1727.180920][T14649] team0: Port device veth99 added 20:58:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1727.338032][T14651] team0: Port device veth99 removed 20:58:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x1, [{}]}) [ 1728.574789][ T1045] tipc: TX() has been purged, node left! [ 1729.440666][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1729.453517][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1729.462248][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.463375][T13476] Call Trace: [ 1729.463375][T13476] dump_stack+0x1c9/0x220 [ 1729.463375][T13476] dump_header+0x1e7/0xd00 [ 1729.463375][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1729.463375][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1729.463375][T13476] ? ___ratelimit+0x542/0x720 [ 1729.463375][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1729.463375][T13476] oom_kill_process+0x216/0x580 [ 1729.463375][T13476] out_of_memory+0x181e/0x1cc0 [ 1729.463375][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1729.463375][T13476] alloc_pages_current+0x67d/0x990 [ 1729.463375][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1729.463375][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1729.463375][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1729.463375][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1729.463375][T13476] ion_ioctl+0x79d/0x1fc0 [ 1729.463375][T13476] ? debug_shrink_set+0x220/0x220 [ 1729.463375][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1729.463375][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1729.463375][T13476] do_syscall_64+0xb8/0x160 [ 1729.463375][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1729.463375][T13476] RIP: 0033:0x45ca29 [ 1729.463375][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1729.463375][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.463375][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1729.463375][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.621956][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 20:58:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3c, &(0x7f00000003c0)="f71559c80aa4cefd3b79e76a039acbd61caef13ff7703cc78e402a14c67dbe3ec9eebdf28067783f0dc3bc4dfd726aa9ac6c2a3b818b0000000009eb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:58:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x88}}, {{@in6=@private2}, 0x0, @in6=@private1}}, 0xe8) 20:58:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x40000}, 0x0) 20:58:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x41045508, &(0x7f0000000000)={0x0, 0x1, [{}]}) 20:58:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:51 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) [ 1729.621956][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1729.621956][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1729.652844][T13476] Mem-Info: [ 1729.656226][T13476] active_anon:137058 inactive_anon:7191 isolated_anon:0 [ 1729.656226][T13476] active_file:1901 inactive_file:3212 isolated_file:0 [ 1729.656226][T13476] unevictable:0 dirty:76 writeback:0 unstable:0 [ 1729.656226][T13476] slab_reclaimable:5936 slab_unreclaimable:40539 [ 1729.656226][T13476] mapped:56379 shmem:13126 pagetables:10282 bounce:0 [ 1729.656226][T13476] free:210488 free_pcp:62 free_cma:0 [ 1729.694488][T13476] Node 0 active_anon:488336kB inactive_anon:22072kB active_file:52kB inactive_file:432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210604kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.723692][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.753056][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1729.758492][T13476] Node 0 DMA32 free:39460kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:464048kB inactive_anon:2844kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:4kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3436kB pagetables:19220kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1729.790967][T13476] lowmem_reserve[]: 0 0 228 228 [ 1729.796028][T13476] Node 0 Normal free:9516kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24288kB inactive_anon:19228kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:8kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4304kB pagetables:8924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.827589][T13476] lowmem_reserve[]: 0 0 0 0 [ 1729.832166][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1729.844332][T13476] Node 0 DMA32: 941*4kB (ME) 578*8kB (ME) 366*16kB (ME) 245*32kB (UME) 102*64kB (M) 49*128kB (M) 18*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39492kB [ 1729.860838][T13476] Node 0 Normal: 775*4kB (UME) 280*8kB (UME) 101*16kB (UME) 46*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9516kB [ 1729.876129][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1729.886515][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1729.896081][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1729.906001][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1729.915539][T13476] 18252 total pagecache pages [ 1729.920264][T13476] 0 pages in swap cache [ 1729.924748][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1729.930865][T13476] Free swap = 0kB [ 1729.934844][T13476] Total swap = 0kB [ 1729.938699][T13476] 1965979 pages RAM [ 1729.942660][T13476] 0 pages HighMem/MovableOnly [ 1729.947595][T13476] 1423249 pages reserved [ 1729.951880][T13476] 0 pages cma reserved [ 1729.956220][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=17199,uid=0 [ 1729.971322][T13476] Out of memory: Killed process 17199 (syz-executor.4) total-vm:74836kB, anon-rss:3420kB, file-rss:34640kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 20:58:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1730.003221][ T1820] oom_reaper: reaped process 17199 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1730.132755][T14689] IPVS: ftp: loaded support on port[0] = 21 [ 1730.167305][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:58:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x88}}, {{@in6=@private2}, 0x0, @in6=@private1}}, 0xe8) [ 1730.284084][T14704] team0: Port device veth99 added [ 1730.365913][T14704] team0: Port device veth99 removed 20:58:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x40000}, 0x0) 20:58:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x88}}, {{@in6=@private2}, 0x0, @in6=@private1}}, 0xe8) [ 1730.851798][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1730.928469][T14742] team0: Port device veth99 added 20:58:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1731.036210][T14744] team0: Port device veth99 removed 20:58:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1732.069179][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1732.083259][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1732.091998][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.092748][T13476] Call Trace: [ 1732.092748][T13476] dump_stack+0x1c9/0x220 [ 1732.092748][T13476] dump_header+0x1e7/0xd00 [ 1732.092748][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1732.092748][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1732.092748][T13476] ? ___ratelimit+0x542/0x720 [ 1732.092748][T13476] ? task_will_free_mem+0x14c/0x830 [ 1732.092748][T13476] oom_kill_process+0x216/0x580 [ 1732.092748][T13476] out_of_memory+0x181e/0x1cc0 [ 1732.092748][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1732.092748][T13476] alloc_pages_current+0x67d/0x990 [ 1732.092748][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1732.092748][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1732.092748][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1732.173797][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1732.173797][T13476] ion_ioctl+0x79d/0x1fc0 [ 1732.173797][T13476] ? debug_shrink_set+0x220/0x220 [ 1732.173797][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1732.191135][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1732.191135][T13476] do_syscall_64+0xb8/0x160 [ 1732.203708][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1732.203708][T13476] RIP: 0033:0x45ca29 [ 1732.203708][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1732.203708][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.203708][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1732.203708][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.203708][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1732.203708][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1732.274659][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1732.284105][T13476] Mem-Info: [ 1732.287388][T13476] active_anon:136302 inactive_anon:10062 isolated_anon:0 [ 1732.287388][T13476] active_file:1909 inactive_file:3197 isolated_file:0 [ 1732.287388][T13476] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1732.287388][T13476] slab_reclaimable:5942 slab_unreclaimable:40568 [ 1732.287388][T13476] mapped:59379 shmem:15990 pagetables:10364 bounce:0 [ 1732.287388][T13476] free:207241 free_pcp:453 free_cma:0 [ 1732.325854][T13476] Node 0 active_anon:484968kB inactive_anon:22072kB active_file:52kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210604kB dirty:20kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.354886][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.385194][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1732.390560][T13476] Node 0 DMA32 free:41036kB min:40716kB low:50380kB high:60044kB reserved_highatomic:0KB active_anon:460784kB inactive_anon:2844kB active_file:8kB inactive_file:348kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3436kB pagetables:19148kB bounce:0kB free_pcp:1596kB local_pcp:88kB free_cma:0kB [ 1732.423636][T13476] lowmem_reserve[]: 0 0 228 228 [ 1732.428571][T13476] Node 0 Normal free:9516kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24184kB inactive_anon:19228kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:12kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4288kB pagetables:8888kB bounce:0kB free_pcp:216kB local_pcp:80kB free_cma:0kB [ 1732.460305][T13476] lowmem_reserve[]: 0 0 0 0 [ 1732.465021][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1732.477182][T13476] Node 0 DMA32: 943*4kB (ME) 578*8kB (ME) 368*16kB (UME) 246*32kB (UME) 103*64kB (M) 50*128kB (M) 17*256kB (M) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 41036kB [ 1732.494058][T13476] Node 0 Normal: 775*4kB (UME) 280*8kB (UME) 101*16kB (UME) 46*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9516kB [ 1732.509266][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.519061][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.528579][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.538383][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.547849][T13476] 21119 total pagecache pages [ 1732.552576][T13476] 0 pages in swap cache [ 1732.556918][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1732.563021][T13476] Free swap = 0kB [ 1732.567035][T13476] Total swap = 0kB [ 1732.570793][T13476] 1965979 pages RAM [ 1732.574783][T13476] 0 pages HighMem/MovableOnly [ 1732.579563][T13476] 1423249 pages reserved [ 1732.583978][T13476] 0 pages cma reserved [ 1732.588095][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=14683,uid=0 [ 1732.666618][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1732.679488][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1732.688228][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.689289][T13476] Call Trace: [ 1732.689289][T13476] dump_stack+0x1c9/0x220 [ 1732.689289][T13476] dump_header+0x1e7/0xd00 [ 1732.689289][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1732.689289][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1732.689289][T13476] ? ___ratelimit+0x542/0x720 [ 1732.689289][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1732.689289][T13476] oom_kill_process+0x216/0x580 [ 1732.689289][T13476] out_of_memory+0x181e/0x1cc0 [ 1732.689289][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1732.689289][T13476] alloc_pages_current+0x67d/0x990 [ 1732.689289][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1732.689289][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1732.689289][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1732.689289][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1732.689289][T13476] ion_ioctl+0x79d/0x1fc0 [ 1732.689289][T13476] ? debug_shrink_set+0x220/0x220 [ 1732.689289][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1732.689289][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1732.689289][T13476] do_syscall_64+0xb8/0x160 [ 1732.689289][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1732.689289][T13476] RIP: 0033:0x45ca29 [ 1732.689289][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1732.689289][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.689289][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1732.689289][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.689289][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1732.689289][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1732.689289][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1732.879537][T13476] Mem-Info: [ 1732.882814][T13476] active_anon:139107 inactive_anon:7206 isolated_anon:0 [ 1732.882814][T13476] active_file:1909 inactive_file:3199 isolated_file:0 [ 1732.882814][T13476] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1732.882814][T13476] slab_reclaimable:5942 slab_unreclaimable:40568 [ 1732.882814][T13476] mapped:56404 shmem:15990 pagetables:10289 bounce:0 [ 1732.882814][T13476] free:207383 free_pcp:453 free_cma:0 [ 1732.921182][T13476] Node 0 active_anon:484968kB inactive_anon:22072kB active_file:52kB inactive_file:380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210604kB dirty:20kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.950487][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.979828][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1732.985308][T13476] Node 0 DMA32 free:41036kB min:40716kB low:50380kB high:60044kB reserved_highatomic:0KB active_anon:460784kB inactive_anon:2844kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3436kB pagetables:19148kB bounce:0kB free_pcp:1596kB local_pcp:88kB free_cma:0kB [ 1733.017443][T13476] lowmem_reserve[]: 0 0 228 228 [ 1733.022379][T13476] Node 0 Normal free:9516kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24184kB inactive_anon:19228kB active_file:36kB inactive_file:8kB unevictable:0kB writepending:12kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4288kB pagetables:8888kB bounce:0kB free_pcp:216kB local_pcp:80kB free_cma:0kB [ 1733.054244][T13476] lowmem_reserve[]: 0 0 0 0 [ 1733.058832][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1733.071305][T13476] Node 0 DMA32: 943*4kB (ME) 578*8kB (ME) 368*16kB (UME) 246*32kB (UME) 103*64kB (M) 50*128kB (M) 17*256kB (M) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 41036kB [ 1733.088126][T13476] Node 0 Normal: 775*4kB (UME) 280*8kB (UME) 101*16kB (UME) 46*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9516kB [ 1733.104045][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.113835][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.123359][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.133151][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.142700][T13476] 21134 total pagecache pages [ 1733.147609][T13476] 0 pages in swap cache [ 1733.151892][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.158303][T13476] Free swap = 0kB [ 1733.162066][T13476] Total swap = 0kB 20:58:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1733.168542][T13476] 1965979 pages RAM [ 1733.172422][T13476] 0 pages HighMem/MovableOnly [ 1733.177465][T13476] 1423249 pages reserved [ 1733.181773][T13476] 0 pages cma reserved [ 1733.186054][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=17180,uid=0 [ 1733.201358][T13476] Out of memory: Killed process 17180 (syz-executor.4) total-vm:74836kB, anon-rss:3420kB, file-rss:34640kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 20:58:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$FITHAW(r0, 0xc0045878) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)={0x401, 0xc, 0x4, 0x4000000, 0x8, {0x77359400}, {0x4, 0x2, 0x2, 0x0, 0x7, 0x1, "25efe78e"}, 0x0, 0x3, @planes=&(0x7f0000001400)={0x8001, 0x8, @userptr=0x4, 0x394}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000001600)={0x46, 0x4, 0x7fb}) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000140)="2a8cdc658ee9430a", 0x8}, {&(0x7f0000000440)="ca952160cd9b9029381b6c33fcd5deefe68f2e5c109fb734cfb4c6532558f168a7047129d70a1484067f5215336cefa4096347d9d5fb972e59ccf166d055523530913464ac17fcc76e1ab181e490ef8ddb6622c4c9959407834918d75d5718ae71f63627d7bb5149283953058202466a7433ce5711616a6ff0027bc01fb934c7f4ac70a02c94d7e3b975e6264ea10d739094d56c6b7ba63bfda6d20322aab668f901febc9413d7c0763ad3bd5739545064c286a7da8a644f1aa41987a6ec230279", 0xc1}, {&(0x7f0000000540)="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", 0xae6}, {&(0x7f00000000c0)="e4d6fb907ac5ddb9f34fd88a39dea5f14733b201c15d0bf75468f9", 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002780)="89", 0x1}], 0x1}}], 0x2, 0x4004150) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x4240a543) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000001440)={0x0, {0xff, 0x9}}) 20:58:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00f0000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x6c, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x40000}, 0x0) 20:58:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1528}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, [0x159, 0xc68, 0xee9, 0x515]}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:55 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1dde, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1733.292726][ T1820] oom_reaper: reaped process 17180 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1733.377508][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1733.441253][T14783] team0: Port device veth99 added [ 1733.524558][ T1045] tipc: TX() has been purged, node left! [ 1733.565699][T14786] team0: Port device veth99 removed [ 1733.721892][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1733.741545][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1733.754428][T14784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1733.767097][T14784] device bridge_slave_0 left promiscuous mode [ 1733.774569][T14784] bridge0: port 1(bridge_slave_0) entered disabled state 20:58:56 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) [ 1734.090238][T14796] IPVS: ftp: loaded support on port[0] = 21 [ 1734.254056][T14784] device bridge_slave_1 left promiscuous mode [ 1734.260803][T14784] bridge0: port 2(bridge_slave_1) entered disabled state 20:58:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) [ 1734.426358][T14784] bond0: (slave bond_slave_0): Releasing backup interface 20:58:56 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x87, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) 20:58:57 executing program 1: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x3ff, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1734.879681][T14784] bond0: (slave bond_slave_1): Releasing backup interface 20:58:57 executing program 1: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x3ff, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 20:58:57 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') 20:58:58 executing program 1: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x3ff, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1736.149761][T14784] team0: Port device team_slave_0 removed [ 1736.250658][T14826] xt_helper: cannot load conntrack support for proto=7 [ 1736.476326][T14784] team0: Port device team_slave_1 removed [ 1736.485309][T14784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.493238][T14784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.592787][T14784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.601042][T14784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.678428][T14784] batman_adv: batadv0: Removing interface: gretap1 [ 1736.730288][T14784] batman_adv: batadv0: Removing interface: gretap2 [ 1736.742090][T14784] batman_adv: batadv0: Removing interface: gretap3 [ 1736.756881][T14784] batman_adv: batadv0: Removing interface: gretap4 [ 1736.778817][T14784] bond1: (slave veth29): Releasing backup interface [ 1736.785766][T14784] bond1: (slave veth29): the permanent HWaddr of slave - 1a:ef:ea:94:5f:7e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1736.964193][T14784] bond1: (slave veth31): Releasing backup interface [ 1737.050889][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1737.063908][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1737.072634][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.073582][T13476] Call Trace: [ 1737.073582][T13476] dump_stack+0x1c9/0x220 [ 1737.073582][T13476] dump_header+0x1e7/0xd00 [ 1737.073582][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1737.073582][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1737.073582][T13476] ? ___ratelimit+0x542/0x720 [ 1737.073582][T13476] ? task_will_free_mem+0x176/0x830 [ 1737.073582][T13476] oom_kill_process+0x216/0x580 [ 1737.073582][T13476] out_of_memory+0x181e/0x1cc0 [ 1737.073582][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1737.073582][T13476] alloc_pages_current+0x67d/0x990 [ 1737.073582][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1737.073582][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1737.073582][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1737.073582][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1737.073582][T13476] ion_ioctl+0x79d/0x1fc0 [ 1737.073582][T13476] ? debug_shrink_set+0x220/0x220 [ 1737.073582][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1737.073582][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1737.073582][T13476] do_syscall_64+0xb8/0x160 [ 1737.073582][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1737.073582][T13476] RIP: 0033:0x45ca29 [ 1737.073582][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1737.073582][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.073582][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1737.073582][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1737.073582][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1737.073582][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1737.073582][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1737.265403][T13476] Mem-Info: [ 1737.268663][T13476] active_anon:135771 inactive_anon:10046 isolated_anon:0 [ 1737.268663][T13476] active_file:1909 inactive_file:3199 isolated_file:0 [ 1737.268663][T13476] unevictable:0 dirty:15 writeback:14 unstable:0 [ 1737.268663][T13476] slab_reclaimable:5940 slab_unreclaimable:40557 [ 1737.268663][T13476] mapped:59273 shmem:15991 pagetables:10312 bounce:0 [ 1737.268663][T13476] free:207158 free_pcp:76 free_cma:0 [ 1737.307464][T13476] Node 0 active_anon:482828kB inactive_anon:22072kB active_file:12kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:28kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.336641][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.365916][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1737.371201][T13476] Node 0 DMA32 free:39128kB min:40716kB low:50380kB high:60044kB reserved_highatomic:0KB active_anon:458728kB inactive_anon:2844kB active_file:4kB inactive_file:408kB unevictable:0kB writepending:12kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3436kB pagetables:19148kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1737.404543][T13476] lowmem_reserve[]: 0 0 228 228 [ 1737.409464][T13476] Node 0 Normal free:9228kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:16kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1737.441716][T13476] lowmem_reserve[]: 0 0 0 0 [ 1737.446776][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1737.459117][T13476] Node 0 DMA32: 942*4kB (UME) 580*8kB (UME) 366*16kB (UME) 243*32kB (UME) 102*64kB (UM) 49*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39192kB [ 1737.475761][T13476] Node 0 Normal: 778*4kB (ME) 281*8kB (ME) 91*16kB (UME) 42*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9248kB [ 1737.491032][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1737.500890][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1737.510430][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1737.520250][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1737.529972][T13476] 21131 total pagecache pages [ 1737.534933][T13476] 0 pages in swap cache [ 1737.539141][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1737.545441][T13476] Free swap = 0kB [ 1737.549195][T13476] Total swap = 0kB [ 1737.553296][T13476] 1965979 pages RAM [ 1737.557358][T13476] 0 pages HighMem/MovableOnly [ 1737.562063][T13476] 1423249 pages reserved [ 1737.568243][T13476] 0 pages cma reserved [ 1737.572378][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=14795,uid=0 [ 1737.587372][T13476] Out of memory: Killed process 14796 (syz-executor.4) total-vm:75108kB, anon-rss:172kB, file-rss:35864kB, shmem-rss:11348kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 1737.605711][T14784] bond2: (slave veth33): Releasing backup interface [ 1737.610977][ T1820] oom_reaper: reaped process 14796 (syz-executor.4), now anon-rss:0kB, file-rss:34848kB, shmem-rss:11348kB [ 1737.612483][T14784] bond2: (slave veth33): the permanent HWaddr of slave - ca:f3:82:2c:66:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1737.671665][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1737.684712][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1737.693440][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.694271][T13476] Call Trace: [ 1737.694271][T13476] dump_stack+0x1c9/0x220 [ 1737.694271][T13476] dump_header+0x1e7/0xd00 [ 1737.694271][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1737.694271][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1737.694271][T13476] ? ___ratelimit+0x542/0x720 [ 1737.694271][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1737.694271][T13476] oom_kill_process+0x216/0x580 [ 1737.694271][T13476] out_of_memory+0x181e/0x1cc0 [ 1737.694271][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1737.694271][T13476] alloc_pages_current+0x67d/0x990 [ 1737.694271][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1737.694271][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1737.694271][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1737.694271][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1737.694271][T13476] ion_ioctl+0x79d/0x1fc0 [ 1737.694271][T13476] ? debug_shrink_set+0x220/0x220 [ 1737.694271][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1737.694271][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1737.694271][T13476] do_syscall_64+0xb8/0x160 [ 1737.694271][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1737.694271][T13476] RIP: 0033:0x45ca29 [ 1737.694271][T13476] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1737.694271][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.694271][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1737.694271][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1737.694271][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1737.694271][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1737.694271][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1737.886763][T13476] Mem-Info: [ 1737.890031][T13476] active_anon:135754 inactive_anon:10046 isolated_anon:0 [ 1737.890031][T13476] active_file:1909 inactive_file:3199 isolated_file:0 [ 1737.890031][T13476] unevictable:0 dirty:15 writeback:14 unstable:0 [ 1737.890031][T13476] slab_reclaimable:5940 slab_unreclaimable:40557 [ 1737.890031][T13476] mapped:59273 shmem:15991 pagetables:10312 bounce:0 [ 1737.890031][T13476] free:206973 free_pcp:76 free_cma:0 [ 1737.928443][T13476] Node 0 active_anon:482828kB inactive_anon:22072kB active_file:20kB inactive_file:424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210600kB dirty:4kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.958745][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.987977][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1737.993262][T13476] Node 0 DMA32 free:39192kB min:40716kB low:50380kB high:60044kB reserved_highatomic:0KB active_anon:458728kB inactive_anon:2844kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:0kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3436kB pagetables:19148kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1738.025324][T13476] lowmem_reserve[]: 0 0 228 228 [ 1738.030344][T13476] Node 0 Normal free:9248kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:16kB inactive_file:8kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1738.062094][T13476] lowmem_reserve[]: 0 0 0 0 [ 1738.066792][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1738.078856][T13476] Node 0 DMA32: 942*4kB (UME) 580*8kB (UME) 366*16kB (UME) 243*32kB (UME) 102*64kB (UM) 49*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39192kB [ 1738.095387][T13476] Node 0 Normal: 778*4kB (ME) 281*8kB (ME) 91*16kB (UME) 42*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9248kB [ 1738.110365][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.120154][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.129688][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.139633][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.149171][T13476] 21143 total pagecache pages [ 1738.154043][T13476] 0 pages in swap cache [ 1738.158243][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1738.164504][T13476] Free swap = 0kB [ 1738.168254][T13476] Total swap = 0kB [ 1738.172004][T13476] 1965979 pages RAM [ 1738.176016][T13476] 0 pages HighMem/MovableOnly [ 1738.180756][T13476] 1423249 pages reserved [ 1738.185225][T13476] 0 pages cma reserved [ 1738.189339][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=2648,uid=0 [ 1738.204242][T13476] Out of memory: Killed process 2648 (syz-executor.4) total-vm:75108kB, anon-rss:2220kB, file-rss:34840kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1738.317439][T14784] bond2: (slave veth35): Releasing backup interface [ 1738.516978][T14784] bond3: (slave veth37): Releasing backup interface 20:59:01 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x87, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:59:01 executing program 1: r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009000)={0x3ff, 0x23, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000009040)={0x60002001}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 20:59:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$FITHAW(r0, 0xc0045878) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)={0x401, 0xc, 0x4, 0x4000000, 0x8, {0x77359400}, {0x4, 0x2, 0x2, 0x0, 0x7, 0x1, "25efe78e"}, 0x0, 0x3, @planes=&(0x7f0000001400)={0x8001, 0x8, @userptr=0x4, 0x394}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000001600)={0x46, 0x4, 0x7fb}) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000140)="2a8cdc658ee9430a", 0x8}, {&(0x7f0000000440)="ca952160cd9b9029381b6c33fcd5deefe68f2e5c109fb734cfb4c6532558f168a7047129d70a1484067f5215336cefa4096347d9d5fb972e59ccf166d055523530913464ac17fcc76e1ab181e490ef8ddb6622c4c9959407834918d75d5718ae71f63627d7bb5149283953058202466a7433ce5711616a6ff0027bc01fb934c7f4ac70a02c94d7e3b975e6264ea10d739094d56c6b7ba63bfda6d20322aab668f901febc9413d7c0763ad3bd5739545064c286a7da8a644f1aa41987a6ec230279", 0xc1}, {&(0x7f0000000540)="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", 0xae6}, {&(0x7f00000000c0)="e4d6fb907ac5ddb9f34fd88a39dea5f14733b201c15d0bf75468f9", 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002780)="89", 0x1}], 0x1}}], 0x2, 0x4004150) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x4240a543) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000001440)={0x0, {0xff, 0x9}}) 20:59:01 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') [ 1739.031562][T14853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1739.211312][T14844] xt_helper: cannot load conntrack support for proto=7 20:59:02 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000002c0)=""/253, 0xfd, 0x12100, &(0x7f00000000c0)={0x23, 0x9, 0x0, 0x1}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x8}}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x50}}, 0x80) write$binfmt_misc(r2, &(0x7f0000001100)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa1c83d594616631686ec9cbb32a14b175dd106736d173f0fc7e36e265600000000490e05442fffd9e3fb5635af85fb60dfb69c5c953148c6801d2c0945c08ba8c552fc99a742200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9899b8cc58e0a78c61bdbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c000000000000cbd0a608778672bc2dbb7a1a143e397378f0e9dab40e7f99efb2203283ea8bb1c2ab4ac40f264581f7ee9abb44ee0cff4ad375a3c040b819fd6070bc4112efbfdbbc7e7451d6d7195b24719397703113ceca282147a884630702af301a673dca9d8b21a3676a8cae1396a87e7fd68694b5664f7668c6acfb27d8a548185e616c751411"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8041}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f00000006c0)="16e906bebf476698295db6acf67f1f30261b27de219dcc9db629f717d2dea16b033df50b8c4f8f2554b0e6e4aec54204c9d6c9015daa2cf2941c5183696021ec1644", 0x42}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3a2cbf9d74a83a864984f06b035616e89f615a26db886d84c36c4bdfe6cd27c33defc5bc884d7500b065ed28e116d2221a079bd1ff4e876eb9b3a37dec35dda8b7a8d46df3e2c6d820eb690f1421bc55233737f74bb360ea2c9b8b8a2f845e17e398b6596cfbce2d896d5a37dcc2e1296e39c80e5c4c21b", 0xf2}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f9b5e61374973", 0xc7}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca0", 0x24}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a55a8b66", 0xb4}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00003fccf78000010000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="24e7a1730811da1fefcecb2c2ffdf2000000f79d01ffeba7be74010000004dba32ccae0ae6e6edb2a6608e85b7b0f371324d4df7f71781e3ef1b28571f1bed1bae32c00a0f546a2fac7cfa0e8c2420502ffe3b21ec7815406db6bdb1289df11e869886055300"/112, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000dba7ee9da925f9797850051441cb70bb11c00000000000200f50000000000aa4fef6e5e12b049fc54f29598a0bb05ea5acbb7da2aa9c2f24543f567b180218494391314876d6acc2ea1d5fbb754ca359840f784441fcaa15e41df7a725c08d9d5dfb4e608bb3a03971ac85092991940f901210dadaaf7790febfece1938a044e02a99188902cd094777a616728476ed5225e570372860c305d6f060204fd5ed2851f105f0a6d6a1c307f7e8205a163ef2508b4fdfbde71be8b9d27e643c04be81a50d6d3d61589b9ee15e8255deffb3444bcbc67aba598937519c056ab9c454337974d18ba37e04d072806caf93ec39c1a8c7a19ab91549b0d6473707f9464c1c65dcaa328d8c2aff48b292c65f03e6a442c9015c72a0515f8a22a160e547504f50d67a69f67b9ffa22c2a7ffbc76d0f584d6e8feeb34", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180000000000", @ANYRES32, @ANYRES32], 0xb8, 0x28000}], 0x2, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000100)={0xc}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 20:59:02 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') 20:59:02 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000004000000000000000000000000000000000000000000000000ffffffff0200000009000000000000000000697036746e6c3000000000000000000073797a6b616c6c6572300000000000006970646470300000000000000000000076657468315f746f5f7465616d0000000000000000000060000000000180c2000000000000000000000070000000a8000000d80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000dfffffff0000000041554449540000000000000000000000000000000000000000000000000000000800000000000043000000000000008105000000000000000000626f6e645f733421b122193a4897000073797a6b616c6c6572300000000000007465617d5f736c6176655f310000000065727370616e01790000000000004000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000c0000000c00000000801000068656c70657200000000000000000004ef0000000000000000000000000000002800000000000000000000025241530000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000050000000000000000200000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0300000000000000000000000002000000ffffffff010000000900000000000000000064756d6d793000000000000000000000697036677265746170300000000000006272696467653000000000000000000076657468500000000000000000000000ffffffffffff000000000000aae794049dd0f63a12000000000070000000c00000001001000049444c4554494d4552ebff00000000000000000000000063f20000000000000028000000000000000000000073797a31001b00000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000008a00000000000028000000000033790000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff01000000110000000000000000006966627de6000000000000000000000076657468305f746f5f626f6e64000000766c616e300000000500eaffffff0000627269646765300000000000000000000180c2000000f40000000000aaaaaaaaaabb00000000000001007000000070000000a0000000434f4e4e5345434d41524b00000000001108000000000000001000000000000008000100000000000000000000000018"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') 20:59:02 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x87, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:59:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$FITHAW(r0, 0xc0045878) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)={0x401, 0xc, 0x4, 0x4000000, 0x8, {0x77359400}, {0x4, 0x2, 0x2, 0x0, 0x7, 0x1, "25efe78e"}, 0x0, 0x3, @planes=&(0x7f0000001400)={0x8001, 0x8, @userptr=0x4, 0x394}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000001600)={0x46, 0x4, 0x7fb}) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000140)="2a8cdc658ee9430a", 0x8}, {&(0x7f0000000440)="ca952160cd9b9029381b6c33fcd5deefe68f2e5c109fb734cfb4c6532558f168a7047129d70a1484067f5215336cefa4096347d9d5fb972e59ccf166d055523530913464ac17fcc76e1ab181e490ef8ddb6622c4c9959407834918d75d5718ae71f63627d7bb5149283953058202466a7433ce5711616a6ff0027bc01fb934c7f4ac70a02c94d7e3b975e6264ea10d739094d56c6b7ba63bfda6d20322aab668f901febc9413d7c0763ad3bd5739545064c286a7da8a644f1aa41987a6ec230279", 0xc1}, {&(0x7f0000000540)="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", 0xae6}, {&(0x7f00000000c0)="e4d6fb907ac5ddb9f34fd88a39dea5f14733b201c15d0bf75468f9", 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002780)="89", 0x1}], 0x1}}], 0x2, 0x4004150) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x4240a543) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000001440)={0x0, {0xff, 0x9}}) [ 1740.252283][ C0] sd 0:0:1:0: [sg0] tag#3970 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1740.262955][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB: Test Unit Ready [ 1740.269808][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.279681][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.289553][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.299427][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.309327][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.319297][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.329166][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.339397][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.349353][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.359224][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.369096][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.378967][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1740.388857][ C0] sd 0:0:1:0: [sg0] tag#3970 CDB[c0]: 00 00 00 00 00 00 00 00 20:59:02 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) [ 1740.429797][T14862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1740.464207][T14867] xt_helper: cannot load conntrack support for proto=7 [ 1740.514168][ T1045] tipc: TX() has been purged, node left! 20:59:02 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000004000000000000000000000000000000000000000000000000ffffffff0200000009000000000000000000697036746e6c3000000000000000000073797a6b616c6c6572300000000000006970646470300000000000000000000076657468315f746f5f7465616d0000000000000000000060000000000180c2000000000000000000000070000000a8000000d80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000dfffffff0000000041554449540000000000000000000000000000000000000000000000000000000800000000000043000000000000008105000000000000000000626f6e645f733421b122193a4897000073797a6b616c6c6572300000000000007465617d5f736c6176655f310000000065727370616e01790000000000004000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000c0000000c00000000801000068656c70657200000000000000000004ef0000000000000000000000000000002800000000000000000000025241530000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000050000000000000000200000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0300000000000000000000000002000000ffffffff010000000900000000000000000064756d6d793000000000000000000000697036677265746170300000000000006272696467653000000000000000000076657468500000000000000000000000ffffffffffff000000000000aae794049dd0f63a12000000000070000000c00000001001000049444c4554494d4552ebff00000000000000000000000063f20000000000000028000000000000000000000073797a31001b00000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000008a00000000000028000000000033790000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff01000000110000000000000000006966627de6000000000000000000000076657468305f746f5f626f6e64000000766c616e300000000500eaffffff0000627269646765300000000000000000000180c2000000f40000000000aaaaaaaaaabb00000000000001007000000070000000a0000000434f4e4e5345434d41524b00000000001108000000000000001000000000000008000100000000000000000000000018"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') 20:59:02 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') 20:59:03 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) [ 1741.065529][ C0] sd 0:0:1:0: [sg0] tag#3980 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1741.076196][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB: Test Unit Ready [ 1741.082819][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.093182][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.103092][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.112970][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.122849][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.132728][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.142783][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.152677][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.162557][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.172422][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.182667][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.192793][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.202649][ C0] sd 0:0:1:0: [sg0] tag#3980 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1741.241009][T14887] xt_helper: cannot load conntrack support for proto=7 20:59:03 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x87, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:59:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$FITHAW(r0, 0xc0045878) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x30}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)={0x401, 0xc, 0x4, 0x4000000, 0x8, {0x77359400}, {0x4, 0x2, 0x2, 0x0, 0x7, 0x1, "25efe78e"}, 0x0, 0x3, @planes=&(0x7f0000001400)={0x8001, 0x8, @userptr=0x4, 0x394}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000001600)={0x46, 0x4, 0x7fb}) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000040)) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000240)="41fc8f01bf3d1e5ebe927f1d723e4ded59673bbb3797dce30d4c94cf0699f962c85698ff61a4bc1a1551f12a4952830aff347094d371f6dc2efb36bf0b58b8c3258d762c78004c35d88e4546a337bb34df8718446d0e77b85853c0ba3bb028309d3c3c0c39188166ba2ae1893deb72574e06b521905ece84e7a84ca0c8228edf25c79d3ebd00d2a27abef719ae8d10ad9ba8f5b5d3279329762d74887df475274b7fee8546861ed721fec69ae315cc71869db2d80d02ce66814783cd4ae84d235e329be0e664f555690158e156c2e44a5dcae8e3e6ce60c86cc2701de0174c5ba111d508d10b4867bf1394d67e477e3a17afe3eb7335a2eae64f49", 0xfb}, {&(0x7f0000000140)="2a8cdc658ee9430a", 0x8}, {&(0x7f0000000440)="ca952160cd9b9029381b6c33fcd5deefe68f2e5c109fb734cfb4c6532558f168a7047129d70a1484067f5215336cefa4096347d9d5fb972e59ccf166d055523530913464ac17fcc76e1ab181e490ef8ddb6622c4c9959407834918d75d5718ae71f63627d7bb5149283953058202466a7433ce5711616a6ff0027bc01fb934c7f4ac70a02c94d7e3b975e6264ea10d739094d56c6b7ba63bfda6d20322aab668f901febc9413d7c0763ad3bd5739545064c286a7da8a644f1aa41987a6ec230279", 0xc1}, {&(0x7f0000000540)="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", 0xae6}, {&(0x7f00000000c0)="e4d6fb907ac5ddb9f34fd88a39dea5f14733b201c15d0bf75468f9", 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002780)="89", 0x1}], 0x1}}], 0x2, 0x4004150) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x4240a543) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000001440)={0x0, {0xff, 0x9}}) 20:59:03 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) 20:59:03 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000002c0)=""/253, 0xfd, 0x12100, &(0x7f00000000c0)={0x23, 0x9, 0x0, 0x1}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x8}}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x50}}, 0x80) write$binfmt_misc(r2, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8041}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f00000006c0)="16e906bebf476698295db6acf67f1f30261b27de219dcc9db629f717d2dea16b033df50b8c4f8f2554b0e6e4aec54204c9d6c9015daa2cf2941c5183696021ec1644", 0x42}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3a2cbf9d74a83a864984f06b035616e89f615a26db886d84c36c4bdfe6cd27c33defc5bc884d7500b065ed28e116d2221a079bd1ff4e876eb9b3a37dec35dda8b7a8d46df3e2c6d820eb690f1421bc55233737f74bb360ea2c9b8b8a2f845e17e398b6596cfbce2d896d5a37dcc2e1296e39c80e5c4c21b", 0xf2}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f9b5e61374973", 0xc7}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca0", 0x24}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a55a8b66", 0xb4}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00003fccf78000010000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="24e7a1730811da1fefcecb2c2ffdf2000000f79d01ffeba7be74010000004dba32ccae0ae6e6edb2a6608e85b7b0f371324d4df7f71781e3ef1b28571f1bed1bae32c00a0f546a2fac7cfa0e8c2420502ffe3b21ec7815406db6bdb1289df11e869886055300"/112, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180000000000", @ANYRES32, @ANYRES32], 0xb8, 0x28000}], 0x2, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000100)={0xc}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) [ 1741.411651][T14889] xt_helper: cannot load conntrack support for proto=7 20:59:03 executing program 5: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r2 = memfd_create(&(0x7f0000000200)='sy~\xcc*mem0md5!\xa2s\xff\x03\x00\xfd\x1b\xad\xa2\xcb,w\xb5\xa1\x9fe\xf9<\xfe\xb7l\x1b\xbfi\xb8\xbc\xc7w\a\xaf7\xf3\x7f\x84!2\xf4\x17k\b\x00\x00\x00\xb2\x9b\xf7K1\xd4\xd1)\xac\xb63\xbd\x9d\xe3\xb5\x05\x886U\xa8\x84\xbf\x17\x9c\xf8\x1a\xf7\f,\xd0R\xc1_\xb7tK63~\xf3\xbb\xf7\x9e\xd0\xac\xaa\x90\xc7\xc1\x0e\xe9\x92\x1fD\xf7\xd3\x16t\x11\x96=4eDhi\xc4\xaa\x89\x82,\xc7\xa7ay0\nP\xfe7\x0e\xcb\b\xc4\xcb{\x86]]\xa3\xa9|\xb0\xf9\xa7\x06\xfd\xedi\x9d\x05_\xf6\x9e\xde\xaf\\\x8f\x0e\xbc\x9d\x8d\b\x91\xec\xd9\xc4\'\x8e\x93\x82Se\x802\xf54', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='sessionid\x00') [ 1741.682358][ C1] sd 0:0:1:0: [sg0] tag#3989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1741.693074][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB: Test Unit Ready [ 1741.699847][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.711557][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.721462][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.731418][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.741609][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.751563][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.761471][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.771383][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.781296][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.791232][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.801731][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.811656][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1741.821586][ C1] sd 0:0:1:0: [sg0] tag#3989 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1741.882148][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1741.901957][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1741.911212][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:59:04 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:04 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xad) 20:59:04 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:04 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:04 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000002c0)=""/253, 0xfd, 0x12100, &(0x7f00000000c0)={0x23, 0x9, 0x0, 0x1}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x8}}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x50}}, 0x80) write$binfmt_misc(r2, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8041}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f00000006c0)="16e906bebf476698295db6acf67f1f30261b27de219dcc9db629f717d2dea16b033df50b8c4f8f2554b0e6e4aec54204c9d6c9015daa2cf2941c5183696021ec1644", 0x42}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3a2cbf9d74a83a864984f06b035616e89f615a26db886d84c36c4bdfe6cd27c33defc5bc884d7500b065ed28e116d2221a079bd1ff4e876eb9b3a37dec35dda8b7a8d46df3e2c6d820eb690f1421bc55233737f74bb360ea2c9b8b8a2f845e17e398b6596cfbce2d896d5a37dcc2e1296e39c80e5c4c21b", 0xf2}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f9b5e61374973", 0xc7}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca0", 0x24}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a55a8b66", 0xb4}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00003fccf78000010000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="24e7a1730811da1fefcecb2c2ffdf2000000f79d01ffeba7be74010000004dba32ccae0ae6e6edb2a6608e85b7b0f371324d4df7f71781e3ef1b28571f1bed1bae32c00a0f546a2fac7cfa0e8c2420502ffe3b21ec7815406db6bdb1289df11e869886055300"/112, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180000000000", @ANYRES32, @ANYRES32], 0xb8, 0x28000}], 0x2, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000100)={0xc}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 20:59:04 executing program 0: msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) [ 1742.888631][ C1] sd 0:0:1:0: [sg0] tag#3995 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1742.899331][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB: Test Unit Ready [ 1742.906118][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.916052][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.925944][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.935896][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.945805][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.955692][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.965665][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.976083][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.986000][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1742.995920][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1743.005809][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1743.015767][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1743.017870][T14915] xt_helper: cannot load conntrack support for proto=7 [ 1743.025857][ C1] sd 0:0:1:0: [sg0] tag#3995 CDB[c0]: 00 00 00 00 00 00 00 00 20:59:05 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:05 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:05 executing program 0: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, 0x73) 20:59:05 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:05 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget$private(0x0, 0x207, 0x0) semop(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)) 20:59:05 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r0, 0x8004500f, 0x73b000) 20:59:05 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:59:06 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000002c0)=""/253, 0xfd, 0x12100, &(0x7f00000000c0)={0x23, 0x9, 0x0, 0x1}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x8}}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x50}}, 0x80) write$binfmt_misc(r2, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8041}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)}, {&(0x7f00000006c0)="16e906bebf476698295db6acf67f1f30261b27de219dcc9db629f717d2dea16b033df50b8c4f8f2554b0e6e4aec54204c9d6c9015daa2cf2941c5183696021ec1644", 0x42}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3a2cbf9d74a83a864984f06b035616e89f615a26db886d84c36c4bdfe6cd27c33defc5bc884d7500b065ed28e116d2221a079bd1ff4e876eb9b3a37dec35dda8b7a8d46df3e2c6d820eb690f1421bc55233737f74bb360ea2c9b8b8a2f845e17e398b6596cfbce2d896d5a37dcc2e1296e39c80e5c4c21b", 0xf2}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f9b5e61374973", 0xc7}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca0", 0x24}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a55a8b66", 0xb4}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00003fccf78000010000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="24e7a1730811da1fefcecb2c2ffdf2000000f79d01ffeba7be74010000004dba32ccae0ae6e6edb2a6608e85b7b0f371324d4df7f71781e3ef1b28571f1bed1bae32c00a0f546a2fac7cfa0e8c2420502ffe3b21ec7815406db6bdb1289df11e869886055300"/112, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180000000000", @ANYRES32, @ANYRES32], 0xb8, 0x28000}], 0x2, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000100)={0xc}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 20:59:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) [ 1744.014653][ C1] sd 0:0:1:0: [sg0] tag#4001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1744.025306][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB: Test Unit Ready [ 1744.032016][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.042023][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.051969][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.061923][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.071810][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.081710][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.091593][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.101491][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:59:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="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", 0xae}, {&(0x7f0000000140)="0272f8e661d82e2f7a19243ccd5cef7165de1e59931f71baa88f3f", 0xd9}, {&(0x7f0000000200)}, {&(0x7f0000002900)="c9", 0x1}], 0x4, 0x0, 0x0, 0x24080010}], 0x500, 0x4805) [ 1744.111407][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.121346][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.131270][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.141199][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1744.151189][ C1] sd 0:0:1:0: [sg0] tag#4001 CDB[c0]: 00 00 00 00 00 00 00 00 20:59:06 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:59:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)) 20:59:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 20:59:06 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:59:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="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", 0xae}, {&(0x7f0000000140)="0272f8e661d82e2f7a19243ccd5cef7165de1e59931f71baa88f3f", 0xd9}, {&(0x7f0000000200)}, {&(0x7f0000002900)="c9", 0x1}], 0x4, 0x0, 0x0, 0x24080010}], 0x500, 0x4805) 20:59:06 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 20:59:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 20:59:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r0, 0x8004500f, 0x73b000) 20:59:07 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x0) 20:59:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x1b7, 0x0, 0x172}}], 0x2f4, 0x0, 0x0) shutdown(r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) 20:59:07 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:59:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 20:59:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x3a3603, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:59:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="25560a00beb3de2dfa5ea3aedfd7a5e882465d3b032ba6cf1df009baf1cc9993a1b9abe2deabe75574aa3fb75aa83d96e65699710c2c2d78606afd5af06835f83cc64d196a284e9c2234cf0f9401903183fdba22583eb75c4f6c6cc86a1448ad084733f5eb331789ab2d89fc960ec0906b3795f3276ddd7632d851d4135447348c6cd06320394ae354b6ea9135f313ac85f1ebda22b531669121fb157c159fb0880b969799803cb612bba18703a3a89cbb64fd62224d59db9bdd39124911de8d5aa61a63b86f618a44a483027d0148bc3ccde2b8e075ecc1cf544366eb6405a5f6a2a922b7194115587c08f600fd1a22bd5ce9117387a314356496213ca791f89e6d31049a39cb4eb6627da5842e40768d7566eba94fd99eb50beee1deb7a85b57afc04837caff0103695e0fa2d454312523a1dcb0ca0112d20caa339035b70b4a0bec80a967b758f9defedb6a6bcd9c065dcdea15ebba85e5f26ef3b01dcfdcfa2fbada750fdb545d42d4459cc2484dc70499b3e06c5607ba62cd059dafbe3db091b4928c5b2ecd2b55bd4fbef077d2e5ddc08564d078c8367a643eb6", 0xae}, {&(0x7f0000000140)="0272f8e661d82e2f7a19243ccd5cef7165de1e59931f71baa88f3f", 0xd9}, {&(0x7f0000000200)}, {&(0x7f0000002900)="c9", 0x1}], 0x4, 0x0, 0x0, 0x24080010}], 0x500, 0x4805) 20:59:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r0, 0x8004500f, 0x73b000) 20:59:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c95991604000100030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 20:59:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 20:59:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x1b7, 0x0, 0x172}}], 0x2f4, 0x0, 0x0) shutdown(r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) 20:59:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x3a3603, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:59:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="25560a00beb3de2dfa5ea3aedfd7a5e882465d3b032ba6cf1df009baf1cc9993a1b9abe2deabe75574aa3fb75aa83d96e65699710c2c2d78606afd5af06835f83cc64d196a284e9c2234cf0f9401903183fdba22583eb75c4f6c6cc86a1448ad084733f5eb331789ab2d89fc960ec0906b3795f3276ddd7632d851d4135447348c6cd06320394ae354b6ea9135f313ac85f1ebda22b531669121fb157c159fb0880b969799803cb612bba18703a3a89cbb64fd62224d59db9bdd39124911de8d5aa61a63b86f618a44a483027d0148bc3ccde2b8e075ecc1cf544366eb6405a5f6a2a922b7194115587c08f600fd1a22bd5ce9117387a314356496213ca791f89e6d31049a39cb4eb6627da5842e40768d7566eba94fd99eb50beee1deb7a85b57afc04837caff0103695e0fa2d454312523a1dcb0ca0112d20caa339035b70b4a0bec80a967b758f9defedb6a6bcd9c065dcdea15ebba85e5f26ef3b01dcfdcfa2fbada750fdb545d42d4459cc2484dc70499b3e06c5607ba62cd059dafbe3db091b4928c5b2ecd2b55bd4fbef077d2e5ddc08564d078c8367a643eb6", 0xae}, {&(0x7f0000000140)="0272f8e661d82e2f7a19243ccd5cef7165de1e59931f71baa88f3f", 0xd9}, {&(0x7f0000000200)}, {&(0x7f0000002900)="c9", 0x1}], 0x4, 0x0, 0x0, 0x24080010}], 0x500, 0x4805) 20:59:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c95991604000100030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 20:59:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 20:59:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r0, 0x8004500f, 0x73b000) 20:59:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x1b7, 0x0, 0x172}}], 0x2f4, 0x0, 0x0) shutdown(r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) 20:59:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x3a3603, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:59:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c95991604000100030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 20:59:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x3a3603, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) 20:59:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x0, 0x200, 0x168, 0x0, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 20:59:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001600), 0x1b7, 0x0, 0x172}}], 0x2f4, 0x0, 0x0) shutdown(r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) 20:59:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x6c, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 20:59:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x0, 0x200, 0x168, 0x0, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) [ 1746.712365][T15018] Unknown options in mask 5 [ 1746.822339][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1746.835447][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1746.844183][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.845039][T13476] Call Trace: [ 1746.857214][T13476] dump_stack+0x1c9/0x220 [ 1746.857214][T13476] dump_header+0x1e7/0xd00 [ 1746.857214][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1746.857214][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1746.857214][T13476] ? ___ratelimit+0x542/0x720 [ 1746.857214][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1746.857214][T13476] oom_kill_process+0x216/0x580 [ 1746.857214][T13476] out_of_memory+0x181e/0x1cc0 [ 1746.857214][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1746.857214][T13476] alloc_pages_current+0x67d/0x990 [ 1746.857214][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1746.857214][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1746.857214][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1746.857214][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1746.857214][T13476] ion_ioctl+0x79d/0x1fc0 [ 1746.857214][T13476] ? debug_shrink_set+0x220/0x220 [ 1746.857214][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1746.857214][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1746.857214][T13476] do_syscall_64+0xb8/0x160 [ 1746.857214][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1746.857214][T13476] RIP: 0033:0x45ca29 [ 1746.857214][T13476] Code: Bad RIP value. [ 1746.857214][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.857214][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1746.857214][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1746.857214][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1746.857214][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1746.857214][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1747.019641][T13476] Mem-Info: [ 1747.023443][T13476] active_anon:135202 inactive_anon:7191 isolated_anon:0 [ 1747.023443][T13476] active_file:1957 inactive_file:3249 isolated_file:0 [ 1747.023443][T13476] unevictable:0 dirty:66 writeback:0 unstable:0 [ 1747.023443][T13476] slab_reclaimable:5937 slab_unreclaimable:40501 [ 1747.023443][T13476] mapped:56436 shmem:13126 pagetables:10346 bounce:0 [ 1747.023443][T13476] free:209335 free_pcp:68 free_cma:0 20:59:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c95991604000100030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) [ 1747.061594][T13476] Node 0 active_anon:480644kB inactive_anon:22072kB active_file:16kB inactive_file:424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 370688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1747.091369][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1747.120438][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1747.125883][T13476] Node 0 DMA32 free:39436kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:456544kB inactive_anon:2844kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3420kB pagetables:19036kB bounce:0kB free_pcp:272kB local_pcp:0kB free_cma:0kB [ 1747.157772][T13476] lowmem_reserve[]: 0 0 228 228 [ 1747.162705][T13476] Node 0 Normal free:9396kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1747.193964][T13476] lowmem_reserve[]: 0 0 0 0 [ 1747.198766][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1747.210898][T13476] Node 0 DMA32: 937*4kB (ME) 581*8kB (UME) 364*16kB (UME) 239*32kB (UME) 99*64kB (UM) 48*128kB (UM) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39468kB [ 1747.228260][T13476] Node 0 Normal: 791*4kB (UME) 283*8kB (UME) 90*16kB (ME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9396kB [ 1747.243742][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.253772][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.263119][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.272926][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.282437][T13476] 18354 total pagecache pages [ 1747.287408][T13476] 0 pages in swap cache [ 1747.291616][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1747.298022][T13476] Free swap = 0kB [ 1747.301780][T13476] Total swap = 0kB [ 1747.305864][T13476] 1965979 pages RAM [ 1747.309733][T13476] 0 pages HighMem/MovableOnly [ 1747.315279][T13476] 1423249 pages reserved [ 1747.319607][T13476] 0 pages cma reserved [ 1747.323888][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=12892,uid=0 [ 1747.339102][T13476] Out of memory: Killed process 12892 (syz-executor.1) total-vm:75108kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 20:59:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffffffe300", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 20:59:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xdd931, 0xffffffffffffffff, 0x0) [ 1747.368180][ T1820] oom_reaper: reaped process 12892 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1747.417374][T15036] Unknown options in mask 5 20:59:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x6c, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1747.511218][T15041] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 20:59:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x0, 0x200, 0x168, 0x0, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 20:59:10 executing program 3: unshare(0x2000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x800000000002, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 1747.871727][T15084] Unknown options in mask 5 20:59:10 executing program 1: exit_group(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) [ 1748.171506][T15045] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1748.184371][T15045] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1748.194865][T15045] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1748.211007][T15045] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:59:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @rand_addr=0xfffffaf9}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 20:59:10 executing program 3: unshare(0x2000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x800000000002, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 1748.469143][T15095] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1748.488466][T15096] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1748.501189][T15096] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address 20:59:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x0, 0x200, 0x168, 0x0, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x0, 0x5}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) [ 1748.518768][T15096] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:59:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x6c, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 20:59:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @rand_addr=0xfffffaf9}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 20:59:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xdd931, 0xffffffffffffffff, 0x0) [ 1748.788161][T15111] Unknown options in mask 5 20:59:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffffffe300", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 20:59:11 executing program 3: unshare(0x2000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x800000000002, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 20:59:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101}], {0x14, 0x11, 0x2}}, 0x3c}}, 0x0) 20:59:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @rand_addr=0xfffffaf9}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 20:59:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x6c, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 20:59:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xdd931, 0xffffffffffffffff, 0x0) [ 1749.214125][T15130] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1749.348374][T15134] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1749.361110][T15134] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1749.371650][T15134] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1749.388038][T15134] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:59:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @rand_addr=0xfffffaf9}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 20:59:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101}], {0x14, 0x11, 0x2}}, 0x3c}}, 0x0) 20:59:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001a009d0100000000000000000200"/32], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 20:59:11 executing program 3: unshare(0x2000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) io_setup(0x800000000002, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 20:59:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0xdd931, 0xffffffffffffffff, 0x0) 20:59:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101}], {0x14, 0x11, 0x2}}, 0x3c}}, 0x0) 20:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffffffe300", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 20:59:12 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! '], 0x5) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:59:12 executing program 1: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)="1d", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 20:59:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 20:59:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001a009d0100000000000000000200"/32], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 20:59:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101}], {0x14, 0x11, 0x2}}, 0x3c}}, 0x0) [ 1750.262126][T15196] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 20:59:12 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! '], 0x5) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 1750.404510][T15200] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1750.417022][T15200] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1750.427478][T15200] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1750.443483][T15200] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:59:12 executing program 1: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)="1d", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 20:59:13 executing program 1: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)="1d", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 20:59:13 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! '], 0x5) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:59:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 20:59:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001a009d0100000000000000000200"/32], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 20:59:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffffffe300", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 20:59:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 20:59:13 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! '], 0x5) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:59:13 executing program 1: io_setup(0x9, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)="1d", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 1751.367964][T15258] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 20:59:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) [ 1751.453081][T15291] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1751.465923][T15291] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1751.477108][T15291] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1751.493501][T15291] 8021q: adding VLAN 0 to HW filter on device ipvlan2 20:59:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001a009d0100000000000000000200"/32], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 20:59:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 20:59:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000003108"], 0x80}}, 0x0) 20:59:14 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 20:59:14 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 20:59:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x20000000021) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 20:59:14 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000003108"], 0x80}}, 0x0) 20:59:14 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:14 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 20:59:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000003108"], 0x80}}, 0x0) 20:59:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 20:59:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000003108"], 0x80}}, 0x0) 20:59:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 20:59:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:15 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r5, 0x1a) 20:59:16 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f0000005040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_ttl={{0x14}}], 0x38}}], 0x2, 0x0) 20:59:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000), 0x8) 20:59:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000024000705000000621690b7d5164a0000", @ANYRES32=r0, @ANYBLOB="00000b00ffffffff0000000008000100636273001c0002001c00010000000000070000000500000000feff0000000000000000a2e387d63e72"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(0x0) 20:59:16 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1c5a000) fallocate(r2, 0x100000003, 0x0, 0x1) 20:59:16 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r5, 0x1a) 20:59:16 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f0000005040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_ttl={{0x14}}], 0x38}}], 0x2, 0x0) 20:59:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000), 0x8) [ 1754.453154][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:59:16 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r5, 0x1a) 20:59:16 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f0000005040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_ttl={{0x14}}], 0x38}}], 0x2, 0x0) 20:59:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000), 0x8) 20:59:17 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r5, 0x1a) [ 1754.979510][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:59:17 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f0000005040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_ttl={{0x14}}], 0x38}}], 0x2, 0x0) 20:59:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x3, 0x0, &(0x7f0000000080)) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) exit(0x0) timer_delete(0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 20:59:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) flistxattr(r0, &(0x7f0000000040)=""/13, 0xd) 20:59:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000024000705000000621690b7d5164a0000", @ANYRES32=r0, @ANYBLOB="00000b00ffffffff0000000008000100636273001c0002001c00010000000000070000000500000000feff0000000000000000a2e387d63e72"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(0x0) 20:59:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xb38, 0x10000, 0x57330f9a}) [ 1755.467738][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:59:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002a00)={{0x2, 0x0, 0x80}, "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", "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"}) dup2(r5, r4) 20:59:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) flistxattr(r0, &(0x7f0000000040)=""/13, 0xd) 20:59:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000007ff1028e6c467144d2fa8336f1039f938fea40fde3d2c3887175ed104ffab548940d1756f4decdd88e66c81169f7cc003d86999c29bd7d780bd8792a409c3764a0828a505995b7d2dc356c8b584fdd56750b72d147d00000000e78b240754e90d72abc2dd57434f5b6a1d72fed1785fc80792148d2e425feb7e8a1d7c06"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@gettfilter={0x24, 0x2e, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 20:59:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000), 0x8) 20:59:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000024000705000000621690b7d5164a0000", @ANYRES32=r0, @ANYBLOB="00000b00ffffffff0000000008000100636273001c0002001c00010000000000070000000500000000feff0000000000000000a2e387d63e72"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(0x0) 20:59:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) flistxattr(r0, &(0x7f0000000040)=""/13, 0xd) 20:59:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x3, 0x0, &(0x7f0000000080)) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) exit(0x0) timer_delete(0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 20:59:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000007ff1028e6c467144d2fa8336f1039f938fea40fde3d2c3887175ed104ffab548940d1756f4decdd88e66c81169f7cc003d86999c29bd7d780bd8792a409c3764a0828a505995b7d2dc356c8b584fdd56750b72d147d00000000e78b240754e90d72abc2dd57434f5b6a1d72fed1785fc80792148d2e425feb7e8a1d7c06"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@gettfilter={0x24, 0x2e, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 20:59:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002a00)={{0x2, 0x0, 0x80}, "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", "7bfb423057423b6c54a3b74d9bec86efa596762e8f65792120b68104e5d81c02d33010204293aab0964e7a300e254880b28f4a7306366ce1c265a749f8f165d2d3ec40193cf1c69b423dfe67b0cccc34b93709bab50b1f468c6aa648101b6d3bc6eeac68bdae7dd713d75bc84fd66adda8556275b2caeae2067784f31b80d879a610fe7eb58f3ac362390272a10b09b6ef5a5e9bc749e04b9ee4a938fdda683b86030aaa01486e462c3588f60eb28cb85ce8ae0c80a351344024a59d09cfeb7131f4982fe84b3af7d9f09b4aff7ab0d3bc676c07c42f277156a540c5ed6889210cba6ad2f37907babce12e08317f68ef14a5faaffdfb7c598676d82f329eb34995a93a6070e928064bfb7ae407fb0f6ac98e4479a6a934e082876ebb9a4b4c1b3807bea5bc4e75893dbbd35f759054fa5e7ee196891c29b890eca06a5db9b300962bc92dcd5c0cf4a393baca27d9f642b9ca372ded564971a27344c6b93f7b8a69687b9e113367b909362df45b581dd4812450523e29503915828b384b537402db1905d0ca0890ac91ea8c538fa7ab6394c3bc8f43deb1c29af45f795b8754d8f8ece8b2833b4190aef937ebb616a388b4fdf7808baea8bf4155bc4cf83a9e683c47feaf84b04173d92cdd2d66b7e6fe9d98fe8eea70b1a47fdd1be0fdb8d92904b7c964a37768c5f97b1d0805322c0878f56a49e82683ffb89b5e668631038a1119a4c02d03b022a2a18fbcd93adffe0b5f599b5ae7ba1865cdd4d3d4ca365871bd5b05225b3dd785e127c1b8e4fba14975624baaa9d14985291642cb90f7d216070f4c81886b10871ed71decbf00bfc0463dbdebc241083fc6dd27fb03ae723efcfa8f7028c29d155ac1dfb23f2f2021e0960a038b5488708a3b13cd785bf105924592e6e9d9e7878fb2995e93d42791258c0c0636ea521239338445f57a7e4fd4ddf8810979f400995c0f4628bb0e1001a79ebda281cefb5441470723526a776166b42f0886bb979c1e0b22631747be9fbcb0796f9248eb5e1ff9ad3e308c0e9c17b31e243313de8150bcec076fc983625290ae84c206a9a2b31be36d6db30b83a06c91576daf3540926c1912ea5f72bf2525647f37f147483e988cc5ab10f2a38f42e795de93080018d34e849ef2bfddc51f344acc947cc6a714294106075cb44855c4b2648d2bb43147c2337f0c7710b60d47fde1f2865f4d09bb9f089669faa7ada713c88c04baaae5220a6d77008276a038a409442584155c2bfe5b6828df8553587915924443eab0a32272ba6fe629ceae0fa16ad428fa105212946b525b535969122b8ee5cc045b5e3c3734488702cb4eca7b1c68445f164fc1b325768ba0b8d1255c8a0529499da024f8d48ec7b4a5de80429b3d22d5695f9765f361c36f86b90a1c243278b1afa159a2c54fca2b5a92d0e7ce083efbab4440df68b56c14d6ccef157100e08d6a3286f622b102042b1b3a16ae05f18d8ba6b87a26a7716fa9d5a6f2111d2475a44f73c348a9f03279b2983a5d7123e1158c28aea2a9884268969c0fc60f9acfad4756497efdc6fd307c48b11d29891bb779c5bd90251cd1e411f8208493151c27449b9e13f6c3960295612b2e59d98d7eb05863de345b8799fc767c8f264c45cd4027a0a5de8a2a2ffd2ac29abb5a86b5409bf489c17f32aa561a1f2888ab45e6cf53d154b28f193f1baa1b6a54c3f3ff5e0cae7631431672f411689076292412557fe2d4050d95a44326adcc15403c1615fb15fd66d3599a8eb768ca2af0bb33fd34bef719edd075bda35d2e5d65fcf7a41bd7f1992dc3ad640bc4e767654d41d3004ff0695c0ad2794ebe10c54228948d84f06e8317b73434a1f5ad4a23fdafeebdff38c56322e81968eede6f3c1e23e380ffd2e4c0a4519ee5ac19dec1e0cd1dfcf13204fc19f0ed59a3b968c3b5b21bb50a55029d338f87e9f8e75ebbf634c9632530504b42356349e967ccd1aea9edefab90b685057e9773f5332e71acdc034e4b22bcf97bbce3c80af855ce616f0f472ffd5926e0efe161b7ee4feca248e8bfa76c9a788d7aa8370ca688d6b50186d7e93b4f593dc052e4362025fea81509cb84aff8a7e44f17fd568d148c855011b1e70ab38b61ee1d58b9f10ffff1e03988b685e390a108a92f223df225000e4591a010536c473988e83243fa61c05b33dc5020799cf81177df272c2bc67b9d028625c57b0a15dcf8d6d8c43a0edfc8b986587f3537bc96b5773c33cf208d5c4654b160fc34eadbf2358c205621ebbf7c85454e9d101a362185b3b557d96c250efc64a79f19d3e6e002caa399f62de73812d8bb5806c94ec99e98fed8eb469cec4489cca2bff418db565a068c4176fe1cb0385581e9ffb717d2d1665710873904b1f0f5abfe621259f38e1a93247ca8c559c62dc357565c38937fe0786aa41b0ea650cc886b5c9e72c8bba0bca5fef99c24eadffee65bd2217e128ff9b27d586e6caab80a8040e0c5938d7dd9595ac677b256c595debb5e18e0f3754c96b5317b2d117705163af822c958aae8380bd06217e652a06cac63e3a4538606ed601f67e2528163900fec23e06f9e5650d9d11ce45a2bd311ae5803a5a2ee047625f5c4ce83bf538fd24b4d1d4167248b538b91054bca4ecdaaa77f5063e986531890db5376df7c60be7e42e66c1a1aa51a3f255dedce04aaeb4c349e1390e5c18bbb6b29805bd2103bfef0bf4be322d69b355aec7c4f30c4a70e80c934c943aa64597f1c831d15263a9d9cc3ebb02737dda435f5e4f4f2c5ef506bfcacf7dd48d7975ed0aec8cbf7e7de46307bdd9c6e9e6d7e33d7a017cba1c0e75b3087726b4eebe948b5a1650364f34616b24101a68e80a7b98f66b2863c24a8cf8ce34b3bc8690da6afb0eb75cd9dc0d0ce4262eedf9df12399acf09290e32f2f6fe0809e3992a74b5236abde2cff4819c47885af036aeaeb914a2847df26ea796d842adca0eb8203ee0eb634ffcbb1bc97b2eef5575f7d7a54674ff5977b7b6f5a348c249a981d31159e379506328fb1935d4b47ae4c6c2c74f07c7472355e6a1298e195421dc64b2368d81986e4220d624e9fc58a4441c4a9b6938fa6f0752cf21b03af32e1890b4c79841aa09a430dea8beb2f6ae1dec56b202e305d5c2350794389935ceca1999c830ec5abcf5236a046ed0a3010a9368b06cf9446b17cde2e53c8e30b8ab10800795f0ce37d164162bcc9e8696b9c219d378a64bb7bc5177d095188df933297ae3b641498951737e91f08c7e48ec2d3d4730841d205313fb146ac0609ed4441f022174c3003abebcf2c857e98d6b7922b511c06b04e7d5aa9be2b020871d794a49ccb6927a4ba77f647de84a2189dd9c883ec719318aba431e348a327d28c8ff1597e89edba44d31a436c98f5fcaf0483b60be3f8ead6e2389a4bab66162fbeadd7808b619515ce0869e9bb675e012077f77986728a89c5fb67c4c5ba4e13c583fc4565dbf40db69416a7563bc4e6d5d69a462ec120eaa6f670df04bf453555a5e780ecaf9f42906b93e8a4d2824a8e67a12df912df6e66c6860878c69c392a925e170a923670c7c15029631865762e57303e071b63474b0ba6662e42e9871f3fb35dc502573fb1c7a4412f2d1488178ca00054640392c42ec768df5f425e719c9f6aef201936ac1d4db44b7488211be107edb90d175edb734197d469811f6d34905581f9f765309bab65ba83af2a67fb5622078dd074465b4182a6eeb0bf4c89b4f9ba0f54e87ae694d1274118f6253be2eb0f6c1de9b4b39ae2a62b9c48023a2e9537e240049b5bbd494e165001c109d61f5fb14b0e8352324589a6e962f02e2d2b795223462077e95d1b2438c8682dd2f1dde1566468eb213b41ee58f5fc740d304c6051d17d0442b78d502c71a945215bf3220d0955294c292ac298cd6df640bab4de35ecd1b4654c92bd0860e3e026eebdfa086362e3c4005c45a271c3a7db4adea25e7031d7f7d6d00f21aef23f6de3ba2126a8b8f451379e1bcead259a9a66ac23b739330a1cd298ef0878ea786b33b1a19cf76500e531c0d6259022954114d0362359c1983c2a014005a3bca4bff410fcbf0ee23aed33444db647d9a2606bbb9da5075e6663096635b18493c091f6ccbf409399c0939ada158559e648532f1c121808b8e039197a7de22f7353563546865f9bae5a86c052bfeee5a55dd43f46036bc304ca30b7e8a243c32b741b9fbf91fdc77804c08d84eeb0c8bac1ab5cdf9826297eab58ba303e9e5c78b37ff02937373409174fee1da380ea1f80c6acbd8838db11be12089189c3b9446470c62c3f67fae838792a06e0d1cde3df268cc9b108bff7798a1b3c202c77485eee0a0cfe8c0567a1b6fb9616457653d9c059935963b6134cdcf60a20655c15c6c894788c911e00ba1295983429320b488f76c6e71264b9b52a4949254d54e852d3482f347e6f6568fe6b6ceac725e2700184f7673c70d5867b1c6159d5cdd37aa3b4d0be30693625ce4368a9942221322b8116e5f6ecb0e675de0e6337a13bed350d3c3470f47cfa780d83fc9c4f6303a8d72f3dec903759bf404302ea55e0fc80dbcd1778b21f464dd7a59861904cdf6dd5ae137978ae0cd5e8ce9ce4d6039cadbac8fc81dadd198dffe5cd87a097a748b7d26a3bd28fc7619d046ea541f3f5a0255e0997bb2e44039cae7bebb4e87290ea194f858872d295954e3fa839fbb5d1046d1f1570aa19b4cc0a941628eb558e3a6a5dd00a09a958444cc288eebc7535b37ba063b8e0607607b8a3eed35355817d72ad7962d36506a552a0940c1331374c70ce4a75477eb6868eec9710fcc49cb2eb8ea5af475c3ecf7b8e98ba644f53bca51d0ff46427be19382f07fb686de04fd788f8637452f7673271227e9b8c66dc23b2dd5bec961736b434f459367d020643608e328cb824794d899f59f422f8b8d4ee4bceca258d038dfa4ac3f840673b79721fd6188250b40d561df450ded53995efa7123942a7b0fe53f6ca1e57cbcacce10539bb1632087cc8fcfaf4eddd8e3d3206ea2c1587b45df2534b9ec835e729cacc9c865efbeb3ef23e17280312507b1717fe8d335f1984ff0763faa611b09c9349931c02d3e50ba8f18fdc6a46b872a292da22599776e7ccada86f8322f23cb37c7576f26807907c5d3338c41caebcdaa8619b4d8f0d85246e78ec39bd00fe798e42eed299f2a7ba63df6feacea9b077930d50fd57d4e6c005ec9425a9e61609d42340401dc83a9d8c1cc2310259db69a7f81d87e7909b5ca42dc72a032cc43517961116e0615c0189ddab0ac5323ac1cff39a8b24916315ae82c9f5a7f020105e21554541ee5d63c81d3e9bf538faa9db56fbe6c5b95da1793e267b60ec1f8bdb58f9af20b51335f431b8536407fe3dd581343324b60419185ffe9dc50ccb29c23d43ec56cbb7474834471fa402fea17dece3d336a1849f828af696d8c163f58fc60b621b2db668d50bffa861daad1d6e26adaa01b9b29249883624211822ae7421a184f69ce48c0da19e0fa880fbd46faab97a8f16827c3045a5c9ae35fe42631b3331e2de4c2e5d692ebe3d2a2013e9385ba39ea387bee34f35fd25390681829db6a941a4976faec161c9d9248779c1b483b748d66c2870e07243af740755cc7a5e242c3a313069b75efe7774fb0faa5e15c89d6e4df31285a148bcb1c0e0711650d95b9f1ffcd013d21db24c0d3005c249135f791d645e318b1febccc0f30d50a8f34df82a802014cb8c58849ffce7c7ee11e5d5ea088f2baebb59"}) dup2(r5, r4) [ 1756.563139][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:59:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0100"], 0x20) prctl$PR_SET_PTRACER(0x59616d61, r2) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 20:59:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) flistxattr(r0, &(0x7f0000000040)=""/13, 0xd) 20:59:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000007ff1028e6c467144d2fa8336f1039f938fea40fde3d2c3887175ed104ffab548940d1756f4decdd88e66c81169f7cc003d86999c29bd7d780bd8792a409c3764a0828a505995b7d2dc356c8b584fdd56750b72d147d00000000e78b240754e90d72abc2dd57434f5b6a1d72fed1785fc80792148d2e425feb7e8a1d7c06"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@gettfilter={0x24, 0x2e, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 20:59:19 executing program 2: unshare(0x2040400) r0 = socket$inet6(0x10, 0x3, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) 20:59:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002a00)={{0x2, 0x0, 0x80}, "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", "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"}) dup2(r5, r4) 20:59:19 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x8c150000, 0x279, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x0, {0x160}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 20:59:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000024000705000000621690b7d5164a0000", @ANYRES32=r0, @ANYBLOB="00000b00ffffffff0000000008000100636273001c0002001c00010000000000070000000500000000feff0000000000000000a2e387d63e72"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$SEG6(0x0) 20:59:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x3, 0x0, &(0x7f0000000080)) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) exit(0x0) timer_delete(0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 20:59:19 executing program 2: unshare(0x2040400) r0 = socket$inet6(0x10, 0x3, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) [ 1757.678269][T15477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1757.700803][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:59:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000007ff1028e6c467144d2fa8336f1039f938fea40fde3d2c3887175ed104ffab548940d1756f4decdd88e66c81169f7cc003d86999c29bd7d780bd8792a409c3764a0828a505995b7d2dc356c8b584fdd56750b72d147d00000000e78b240754e90d72abc2dd57434f5b6a1d72fed1785fc80792148d2e425feb7e8a1d7c06"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000400ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@gettfilter={0x24, 0x2e, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 20:59:19 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x8c150000, 0x279, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x0, {0x160}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 1757.731234][T15483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.039085][T15494] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:20 executing program 2: unshare(0x2040400) r0 = socket$inet6(0x10, 0x3, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) 20:59:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x8c150000, 0x279, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x0, {0x160}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 20:59:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002a00)={{0x2, 0x0, 0x80}, "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", "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"}) dup2(r5, r4) [ 1758.300950][T15504] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:20 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @local}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000140)=0x9c) 20:59:20 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)=""/145, &(0x7f0000000340)=0x91) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000008, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:59:20 executing program 2: unshare(0x2040400) r0 = socket$inet6(0x10, 0x3, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) 20:59:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x3, 0x0, &(0x7f0000000080)) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) exit(0x0) timer_delete(0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 20:59:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x8c150000, 0x279, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x0, {0x160}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 1758.821635][T15527] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:21 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @local}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000140)=0x9c) 20:59:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05030e3c3c003e3c00000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 20:59:21 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000180)=0xb0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) dup3(r3, r0, 0x0) 20:59:21 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)=""/145, &(0x7f0000000340)=0x91) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000008, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:59:21 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @local}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000140)=0x9c) 20:59:21 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8}}}}, 0x0) 20:59:21 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 20:59:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000180)=0xb0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) dup3(r3, r0, 0x0) 20:59:22 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8}}}}, 0x0) 20:59:22 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @local}], 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000140)=0x9c) 20:59:22 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 20:59:22 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000180)=0xb0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) dup3(r3, r0, 0x0) 20:59:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05030e3c3c003e3c00000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 20:59:22 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8}}}}, 0x0) 20:59:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x3c, 0x2, [@TCA_RSVP_ACT={0x38, 0x6, [@m_csum={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xa}}}]}, {0x4}}}]}]}}]}, 0x6c}}, 0x0) 20:59:22 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)=""/145, &(0x7f0000000340)=0x91) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000008, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:59:22 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 20:59:23 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000180)=0xb0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) dup3(r3, r0, 0x0) 20:59:23 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 20:59:23 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8}}}}, 0x0) 20:59:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x3c, 0x2, [@TCA_RSVP_ACT={0x38, 0x6, [@m_csum={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xa}}}]}, {0x4}}}]}]}}]}, 0x6c}}, 0x0) 20:59:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05030e3c3c003e3c00000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 20:59:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x98) 20:59:23 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x0, 0x148, 0x148, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 20:59:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) 20:59:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x98) 20:59:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x0, 0x148, 0x148, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) [ 1761.887965][T15613] xt_CT: No such helper "netbios-ns" 20:59:24 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)=""/145, &(0x7f0000000340)=0x91) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000008, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:59:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x3c, 0x2, [@TCA_RSVP_ACT={0x38, 0x6, [@m_csum={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xa}}}]}, {0x4}}}]}]}}]}, 0x6c}}, 0x0) [ 1762.039282][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1762.132502][T15621] xt_CT: No such helper "netbios-ns" 20:59:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x0, 0x148, 0x148, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) [ 1762.227008][T15634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x98) 20:59:24 executing program 3: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x308, 0x0, 0x0, 0x0, 0x148, 0x148, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 20:59:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) [ 1762.660614][T15653] xt_CT: No such helper "netbios-ns" [ 1762.850761][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000200, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05030e3c3c003e3c00000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) 20:59:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20011000000527793c79c5bb4cc81643ccff74c5c153674fee921d2cf424dc63dc73d08a3758fc23ebe94f087804a204dc20416bc3d86af7ffcc5c5df238b9d028a5257678f0898cc716209226eaf32e273cc96ba124c4823092512deb442e3021744828b267146625d7f4b4b4dfaf14729322b4cbaca5638885c66d2ab7ef20d643abd1fb81b8e78853898f98a5bf0cb1f4c0f26cd3734acc50677a4ac515b34958d7c82b72e8a5d3c1243620a5def5925a597229500a61ebe85e03491e45b479816ac245916e558384f72979ba360bd6e440d04e70f5c7d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000288d519c57299b3d155c2570a2d21d6fb57ae343e52f06bc121d32feda1fd535d9367d878679fa565920430032b1cb1c87b8f8377c14bf836f02e676646fa6c0f938699e83937a159463d40f76a02ba92b384c9055976d90aecbfb1456b8009c3e63fee0455b0de7a7f510086ccae0d69f09424cb8b935825599bfdad2d2e3c5cf7aeb9a0cb6b4d69be5319112a020142b5fe8af2be1f682ad7a282b7ec0f2c5d3c79881d9f5544543"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x3c, 0x2, [@TCA_RSVP_ACT={0x38, 0x6, [@m_csum={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xa}}}]}, {0x4}}}]}]}}]}, 0x6c}}, 0x0) 20:59:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0xa, 0x3, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x38d, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000010280)={0x0, 0x0, 0x0}, 0x0) 20:59:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x98) 20:59:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) 20:59:25 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x7, 0x4e1, 0x0, 0x2]}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe, 0x1, 'blackhole\x00'}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 20:59:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$inet(0x2, 0x0, 0x0) r1 = getpid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x8001}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x10000, 0x9, 0x2, 0x3b}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010c00000000000000000700000000000000140012f40000732d6160b3c5db4ca8e4e083e2e300000100"], 0x30}}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r5 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400)="ece16da2cfd7854fa635e2f0b4874923d2466d0da2ca2d3ecec8520e981aefa8f678c68e975365d1dddbaac5cd511b87e1eea2755dde868ee7cb8adc167c7850e871da9135bfca500091dda3a87bdb13475ce40c99d3aae3044775f600d3e8be6369cfedfecdddb63d80214966293a708fef289502595eab6be14ffb3cbb7311efbd8b54e17914052ba74bbc9a26017311707652b5cef7a7ddae2fee12165ff4f703cb4654621915b9480a894426684bc89289ff86989ca428d4e134727459"}, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000240)='mand\x00', &(0x7f0000000280)='./file0\x00', r6) 20:59:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0xa, 0x3, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x38d, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000010280)={0x0, 0x0, 0x0}, 0x0) [ 1763.563337][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:25 executing program 1: socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="5001000010000707ebff002c349bd04040040000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000340)={0x0, "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"}) socket$packet(0x11, 0x0, 0x300) 20:59:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0) [ 1763.849747][T15706] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1763.859602][T15706] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1763.895974][T15706] team0: Port device veth187 added 20:59:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0xa, 0x3, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x38d, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000010280)={0x0, 0x0, 0x0}, 0x0) [ 1764.200307][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:26 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000369000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f00000cb000/0x1000)=nil) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 20:59:26 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x7, 0x4e1, 0x0, 0x2]}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe, 0x1, 'blackhole\x00'}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 20:59:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$kcm(0xa, 0x3, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x38d, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000010280)={0x0, 0x0, 0x0}, 0x0) 20:59:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a342200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab511425475a15b36c4c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a0239221c844e28a6c53a26058375113fdf1bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc019dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47b19b5636505ac7757a520c406912e1ff"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="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", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 20:59:26 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 20:59:27 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 20:59:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x3, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x2, 0x100, 0x0) 20:59:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$inet(0x2, 0x0, 0x0) r1 = getpid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x8001}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x10000, 0x9, 0x2, 0x3b}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010c00000000000000000700000000000000140012f40000732d6160b3c5db4ca8e4e083e2e300000100"], 0x30}}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r5 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400)="ece16da2cfd7854fa635e2f0b4874923d2466d0da2ca2d3ecec8520e981aefa8f678c68e975365d1dddbaac5cd511b87e1eea2755dde868ee7cb8adc167c7850e871da9135bfca500091dda3a87bdb13475ce40c99d3aae3044775f600d3e8be6369cfedfecdddb63d80214966293a708fef289502595eab6be14ffb3cbb7311efbd8b54e17914052ba74bbc9a26017311707652b5cef7a7ddae2fee12165ff4f703cb4654621915b9480a894426684bc89289ff86989ca428d4e134727459"}, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000240)='mand\x00', &(0x7f0000000280)='./file0\x00', r6) 20:59:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="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", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 20:59:28 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x7, 0x4e1, 0x0, 0x2]}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe, 0x1, 'blackhole\x00'}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 20:59:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 20:59:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x3, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x2, 0x100, 0x0) 20:59:29 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000369000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f00000cb000/0x1000)=nil) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 20:59:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x3, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x2, 0x100, 0x0) 20:59:29 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 20:59:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="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", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 20:59:29 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x7, 0x4e1, 0x0, 0x2]}) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe, 0x1, 'blackhole\x00'}, @TCA_STAB={0x4}]}, 0x38}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 20:59:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$inet(0x2, 0x0, 0x0) r1 = getpid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x8001}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x10000, 0x9, 0x2, 0x3b}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010c00000000000000000700000000000000140012f40000732d6160b3c5db4ca8e4e083e2e300000100"], 0x30}}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r5 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400)="ece16da2cfd7854fa635e2f0b4874923d2466d0da2ca2d3ecec8520e981aefa8f678c68e975365d1dddbaac5cd511b87e1eea2755dde868ee7cb8adc167c7850e871da9135bfca500091dda3a87bdb13475ce40c99d3aae3044775f600d3e8be6369cfedfecdddb63d80214966293a708fef289502595eab6be14ffb3cbb7311efbd8b54e17914052ba74bbc9a26017311707652b5cef7a7ddae2fee12165ff4f703cb4654621915b9480a894426684bc89289ff86989ca428d4e134727459"}, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000240)='mand\x00', &(0x7f0000000280)='./file0\x00', r6) [ 1767.301840][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1767.314997][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1767.323759][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.324627][T13476] Call Trace: [ 1767.324627][T13476] dump_stack+0x1c9/0x220 [ 1767.324627][T13476] dump_header+0x1e7/0xd00 [ 1767.324627][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1767.324627][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1767.324627][T13476] ? ___ratelimit+0x542/0x720 [ 1767.324627][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1767.324627][T13476] oom_kill_process+0x216/0x580 [ 1767.324627][T13476] out_of_memory+0x181e/0x1cc0 [ 1767.324627][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1767.324627][T13476] alloc_pages_current+0x67d/0x990 [ 1767.324627][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1767.324627][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1767.324627][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1767.324627][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1767.324627][T13476] ion_ioctl+0x79d/0x1fc0 [ 1767.324627][T13476] ? debug_shrink_set+0x220/0x220 [ 1767.324627][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1767.324627][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1767.324627][T13476] do_syscall_64+0xb8/0x160 [ 1767.324627][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1767.324627][T13476] RIP: 0033:0x45ca29 [ 1767.324627][T13476] Code: Bad RIP value. [ 1767.324627][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.324627][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1767.324627][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1767.324627][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1767.324627][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1767.324627][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1767.499672][T13476] Mem-Info: 20:59:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x3, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x2, 0x100, 0x0) 20:59:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="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", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 1767.502953][T13476] active_anon:134957 inactive_anon:7417 isolated_anon:0 [ 1767.502953][T13476] active_file:1984 inactive_file:3292 isolated_file:0 [ 1767.502953][T13476] unevictable:0 dirty:74 writeback:0 unstable:0 [ 1767.502953][T13476] slab_reclaimable:5941 slab_unreclaimable:40668 [ 1767.502953][T13476] mapped:56759 shmem:13344 pagetables:10516 bounce:0 [ 1767.502953][T13476] free:208283 free_pcp:62 free_cma:0 [ 1767.541480][T13476] Node 0 active_anon:478460kB inactive_anon:22072kB active_file:4kB inactive_file:420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 368640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1767.570375][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.599852][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1767.605300][T13476] Node 0 DMA32 free:39384kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:454360kB inactive_anon:2844kB active_file:4kB inactive_file:416kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3404kB pagetables:18928kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1767.637259][T13476] lowmem_reserve[]: 0 0 228 228 [ 1767.642668][T13476] Node 0 Normal free:9404kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.674323][T13476] lowmem_reserve[]: 0 0 0 0 [ 1767.678938][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1767.691145][T13476] Node 0 DMA32: 952*4kB (UME) 585*8kB (UME) 363*16kB (ME) 234*32kB (ME) 99*64kB (UM) 48*128kB (UM) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39384kB [ 1767.707645][T13476] Node 0 Normal: 791*4kB (UME) 284*8kB (UME) 90*16kB (ME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9404kB [ 1767.722882][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.732727][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.742275][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.752095][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.761733][T13476] 19023 total pagecache pages [ 1767.766623][T13476] 0 pages in swap cache [ 1767.770838][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1767.777129][T13476] Free swap = 0kB [ 1767.780915][T13476] Total swap = 0kB [ 1767.784888][T13476] 1965979 pages RAM [ 1767.788857][T13476] 0 pages HighMem/MovableOnly [ 1767.793740][T13476] 1423249 pages reserved [ 1767.798020][T13476] 0 pages cma reserved [ 1767.802140][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=2271,uid=0 [ 1767.817079][T13476] Out of memory: Killed process 2271 (syz-executor.4) total-vm:75108kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 20:59:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a342200765020000000000000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab511425475a15b36c4c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4e52727007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a0239221c844e28a6c53a26058375113fdf1bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc019dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47b19b5636505ac7757a520c406912e1ff"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="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", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 1767.846933][ T1820] oom_reaper: reaped process 2271 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 20:59:30 executing program 5: socket$inet6(0xa, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000ac0), 0x0}}], 0x58}, 0x0) [ 1768.233043][T15829] atomic_op 00000000bc11de2d conn xmit_atomic 000000002c7e2213 20:59:30 executing program 5: socket$inet6(0xa, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000ac0), 0x0}}], 0x58}, 0x0) [ 1768.304209][ T24] tipc: TX() has been purged, node left! 20:59:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') [ 1769.289327][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1769.302172][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1769.310998][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1769.311942][T13476] Call Trace: [ 1769.311942][T13476] dump_stack+0x1c9/0x220 [ 1769.311942][T13476] dump_header+0x1e7/0xd00 [ 1769.311942][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1769.311942][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1769.311942][T13476] ? ___ratelimit+0x542/0x720 [ 1769.311942][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1769.311942][T13476] oom_kill_process+0x216/0x580 [ 1769.311942][T13476] out_of_memory+0x181e/0x1cc0 [ 1769.311942][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1769.311942][T13476] alloc_pages_current+0x67d/0x990 [ 1769.311942][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1769.311942][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1769.311942][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1769.311942][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1769.311942][T13476] ion_ioctl+0x79d/0x1fc0 [ 1769.311942][T13476] ? debug_shrink_set+0x220/0x220 [ 1769.311942][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1769.311942][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1769.311942][T13476] do_syscall_64+0xb8/0x160 [ 1769.311942][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1769.311942][T13476] RIP: 0033:0x45ca29 [ 1769.311942][T13476] Code: Bad RIP value. [ 1769.311942][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.311942][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1769.311942][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1769.311942][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1769.311942][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1769.311942][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1769.488797][T13476] Mem-Info: [ 1769.492079][T13476] active_anon:134474 inactive_anon:11292 isolated_anon:0 [ 1769.492079][T13476] active_file:1987 inactive_file:3252 isolated_file:0 [ 1769.492079][T13476] unevictable:0 dirty:88 writeback:0 unstable:0 [ 1769.492079][T13476] slab_reclaimable:5939 slab_unreclaimable:40672 [ 1769.492079][T13476] mapped:58936 shmem:17230 pagetables:10523 bounce:0 [ 1769.492079][T13476] free:204230 free_pcp:62 free_cma:0 [ 1769.530522][T13476] Node 0 active_anon:476292kB inactive_anon:22072kB active_file:12kB inactive_file:348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 366592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1769.559523][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1769.588711][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1769.594419][T13476] Node 0 DMA32 free:39020kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:452192kB inactive_anon:2844kB active_file:8kB inactive_file:336kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3388kB pagetables:18820kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1769.626490][T13476] lowmem_reserve[]: 0 0 228 228 [ 1769.631534][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1769.662898][T13476] lowmem_reserve[]: 0 0 0 0 [ 1769.667657][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1769.681817][T13476] Node 0 DMA32: 961*4kB (ME) 589*8kB (ME) 364*16kB (UME) 234*32kB (ME) 98*64kB (M) 47*128kB (M) 17*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39020kB [ 1769.698286][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1769.713756][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.723370][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.732919][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.742917][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.752421][T13476] 22923 total pagecache pages [ 1769.757359][T13476] 0 pages in swap cache [ 1769.761563][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1769.767905][T13476] Free swap = 0kB [ 1769.771647][T13476] Total swap = 0kB [ 1769.775622][T13476] 1965979 pages RAM [ 1769.779464][T13476] 0 pages HighMem/MovableOnly [ 1769.784464][T13476] 1423249 pages reserved [ 1769.788734][T13476] 0 pages cma reserved [ 1769.792872][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=15810,uid=0 20:59:32 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000369000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f00000cb000/0x1000)=nil) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 20:59:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6325fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb3297901571605c05a61ccda462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a55a8b667876dfb48beab6d60346548794deecbcae92801aa8a6db82171899d9e5efd07d69f490e27c6f0b79c69f332f49271932912da56b5c8503210066175263b9fe2cd802d52f9ced4b5b9676ab8cea14a46a3b28d25bbf8fb8a6c253f09e65936e549a02dab6fd2b93e2bc986386b6ed075a6558f414f30e381ece2ba468d64bb725e65ba69acc20ec69bf9aec8f0ea6b6cf98e3ddf17715f4fc8ecd8c7d07ac0b0d7cb7aec52e813b07ff2d3d0c141e1387e4b20a13209cb10286353eed96dd1b32faf0ea09ba3ecef9aae07162f6a5473f6f9306", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 20:59:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:59:32 executing program 5: socket$inet6(0xa, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000ac0), 0x0}}], 0x58}, 0x0) 20:59:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') [ 1770.124885][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1770.137746][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1770.146477][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.147488][T13476] Call Trace: [ 1770.147488][T13476] dump_stack+0x1c9/0x220 [ 1770.147488][T13476] dump_header+0x1e7/0xd00 [ 1770.147488][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1770.147488][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1770.147488][T13476] ? ___ratelimit+0x542/0x720 [ 1770.147488][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1770.147488][T13476] oom_kill_process+0x216/0x580 [ 1770.147488][T13476] out_of_memory+0x181e/0x1cc0 [ 1770.147488][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1770.147488][T13476] alloc_pages_current+0x67d/0x990 [ 1770.147488][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1770.147488][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1770.147488][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1770.147488][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1770.147488][T13476] ion_ioctl+0x79d/0x1fc0 [ 1770.147488][T13476] ? debug_shrink_set+0x220/0x220 [ 1770.147488][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1770.147488][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1770.147488][T13476] do_syscall_64+0xb8/0x160 [ 1770.147488][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1770.147488][T13476] RIP: 0033:0x45ca29 [ 1770.147488][T13476] Code: Bad RIP value. [ 1770.147488][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.147488][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1770.147488][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1770.147488][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1770.147488][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1770.147488][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1770.320872][T13476] Mem-Info: [ 1770.324280][T13476] active_anon:134420 inactive_anon:7215 isolated_anon:0 [ 1770.324280][T13476] active_file:1986 inactive_file:3269 isolated_file:0 [ 1770.324280][T13476] unevictable:0 dirty:94 writeback:0 unstable:0 [ 1770.324280][T13476] slab_reclaimable:5939 slab_unreclaimable:40672 [ 1770.324280][T13476] mapped:56511 shmem:13140 pagetables:10567 bounce:0 [ 1770.324280][T13476] free:208018 free_pcp:62 free_cma:0 [ 1770.364721][T13476] Node 0 active_anon:476292kB inactive_anon:22072kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 366592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1770.393734][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.422898][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1770.428380][T13476] Node 0 DMA32 free:39020kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:452192kB inactive_anon:2844kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3388kB pagetables:18820kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1770.460771][T13476] lowmem_reserve[]: 0 0 228 228 [ 1770.466151][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1770.497502][T13476] lowmem_reserve[]: 0 0 0 0 [ 1770.502078][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1770.514197][T13476] Node 0 DMA32: 961*4kB (ME) 589*8kB (ME) 364*16kB (UME) 234*32kB (ME) 98*64kB (M) 47*128kB (M) 17*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39020kB [ 1770.530588][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1770.545736][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1770.555658][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.565324][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1770.575212][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.584706][T13476] 18407 total pagecache pages [ 1770.589435][T13476] 0 pages in swap cache [ 1770.593820][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1770.599931][T13476] Free swap = 0kB [ 1770.603867][T13476] Total swap = 0kB [ 1770.607625][T13476] 1965979 pages RAM [ 1770.611466][T13476] 0 pages HighMem/MovableOnly [ 1770.616347][T13476] 1423249 pages reserved [ 1770.620617][T13476] 0 pages cma reserved [ 1770.624928][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=1282,uid=0 [ 1770.640735][T13476] Out of memory: Killed process 1282 (syz-executor.5) total-vm:75108kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1770.659255][ T1820] oom_reaper: reaped process 1282 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1770.688763][T15860] debugfs: File 'dropped' in directory 'sg0' already present! [ 1770.696529][T15860] debugfs: File 'msg' in directory 'sg0' already present! [ 1770.704275][T15860] debugfs: File 'trace0' in directory 'sg0' already present! [ 1770.748593][T15862] atomic_op 000000003bf60fb6 conn xmit_atomic 000000002c7e2213 20:59:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$inet(0x2, 0x0, 0x0) r1 = getpid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x8001}, 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000180)={0x3000, 0x10000, 0x9, 0x2, 0x3b}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010c00000000000000000700000000000000140012f40000732d6160b3c5db4ca8e4e083e2e300000100"], 0x30}}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r5 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400)="ece16da2cfd7854fa635e2f0b4874923d2466d0da2ca2d3ecec8520e981aefa8f678c68e975365d1dddbaac5cd511b87e1eea2755dde868ee7cb8adc167c7850e871da9135bfca500091dda3a87bdb13475ce40c99d3aae3044775f600d3e8be6369cfedfecdddb63d80214966293a708fef289502595eab6be14ffb3cbb7311efbd8b54e17914052ba74bbc9a26017311707652b5cef7a7ddae2fee12165ff4f703cb4654621915b9480a894426684bc89289ff86989ca428d4e134727459"}, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000240)='mand\x00', &(0x7f0000000280)='./file0\x00', r6) 20:59:33 executing program 5: socket$inet6(0xa, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000ac0), 0x0}}], 0x58}, 0x0) 20:59:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x3, 0x6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x4, [{0x5, 0x7, 0x9, 0x4, '/dev/sg#\x00'}, {0x4, 0xf88, 0x9, 0x3b7, '/dev/sg#\x00'}]}, 0x60) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x311642, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) setfsgid(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000000, 0x5) write$binfmt_misc(r5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)="fdc0c193f65a612ad90c16c9fff0f06f", 0x10}], 0x1, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd", 0x91}, {&(0x7f0000000740)="efd0bf25fe40ac2ee963d5580eecffb337e212f47cf2602fae610ae0821cf88788dc6ca033", 0x25}, {&(0x7f0000001180)="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", 0x18f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000001d00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001001000a6fe9b2870bcfd357ddaa2f6b957658d521f85ccaef9c9246e51890d9e97b4ac9ccf", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}], 0x2, 0x0) setfsgid(0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001340)=ANY=[@ANYBLOB="080000000000000039030000000000000800000000000000b0020000000000004406000000000000e78200000000000005000001ffffff001000000000000000090000e9ff00000049090000000000000100ff0000000000f00200020000000004000000000000004802004000000000ffff00000000000080060000000000002000000000000000"]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0xd76, [0x20000400, 0x0, 0x0, 0x20000674, 0x200010a8], 0x0, &(0x7f0000000100), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x12, 0x88a2, 'bridge_slave_0\x00', 'vxcan1\x00', 'batadv_slave_1\x00', 'vlan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff], 0xee, 0x126, 0x19e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, 0x0, 0x0, 0x5, 0x8}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x1ff, 0x1, 0x0, "daeb5370ecfe392d925235e55a302aedf530d018a24d221651da061e7a7e6cfc68fecea43be5173e2362c5f6dbfb9d50746c8507ebb06560fa3031c8290ec40b"}}}}, {0x3, 0x20, 0x6006, 'macvlan1\x00', 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'bridge0\x00', @link_local, [0xff, 0xff, 0x0, 0x0, 0x42494c3d39ce5bec], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="f0c1ba8cfad5", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x5, 0xe, 0x88e5, 'tunl0\x00', '\x00', 'gre0\x00', 'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x886, 0x8ee, 0x926, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x401, 0x3}, {0x8, 0x1}, {0x68, 0x1}, {0x3, 0x3}, {0xfc000000}, {0x0, 0x3}, {0x81}, {0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x1}], [{0x2, 0x9}, {0x4, 0x2000}, {0x5, 0xff}, {0x1f}, {0x1, 0xffffffff}, {0x1, 0x101}, {0xffffffff, 0x7}, {0x8000}, {0x2, 0x2}, {0xb5b, 0x3}, {0xfffffffd, 0x1000}], 0x8, 0xa}, {[{0x3}, {0x3, 0x3}, {0xf87, 0x1}, {0x10000}, {0x1f, 0x3}, {0x41, 0x2}, {0x3, 0x3}, {0x3b, 0x1}, {0x7e, 0x2}, {0x5, 0x2}, {0xd18, 0x1}], [{0x7, 0xfd}, {0x3f, 0x2}, {0x81, 0x5}, {0x10001, 0xff}, {0x3ff, 0x5c5}, {0x100, 0x53cdb0dd}, {0x1, 0x9}, {0x7157, 0x56d9}, {0x7d27c2ba, 0x1}, {0x0, 0x4}, {0x7, 0x9}]}, {[{0x80}, {0xa63, 0x3}, {0x200}, {0x101, 0x3}, {0x40, 0x2}, {0x0, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x2}, {0x1800000, 0x1}, {0x1d8, 0x3}], [{0xa080, 0x5}, {0x1f, 0xfffffff8}, {0x4e, 0xffffff91}, {0x5, 0x6}, {0x5}, {0x4, 0x3}, {0x6, 0x20}, {0xcd, 0x2}, {0x9, 0x2}, {0x400, 0x80000001}, {0x6}], 0x4, 0xb}, {[{0x4, 0x2}, {0x20, 0x2}, {0x100, 0x2}, {0x4}, {0x4}, {0x67c0ae0a, 0x2}, {0x2, 0x3}, {0xc389, 0x2}, {0x3, 0x1}, {0x7}, {0x4800}], [{0x9, 0x3}, {0x800, 0x3}, {0xa4, 0x7}, {0xe0, 0x10000}, {0x1, 0x5}, {0x7, 0x1}, {0x940, 0x40}, {0xffff, 0x8}, {0x0, 0x40}, {0x8, 0x2}, {0x5, 0x3}], 0x2, 0x6}, {[{0x7, 0x3}, {0x2, 0x3}, {0x8000, 0x1}, {0x1000, 0xf12dd41ed0310c}, {0x9, 0x2}, {0x0, 0x1}, {0xfc, 0x2}, {0x8, 0x3}, {0x400, 0x2}, {0x20}, {0xfff}], [{0x9, 0x7}, {0x4, 0x6}, {0x800, 0x100}, {0xbe, 0x8001}, {0xf8, 0x8}, {0x0, 0x7ff}, {0x0, 0x4}, {0x200, 0x5}, {0x5, 0x3}, {0x8, 0x2}, {0x6, 0x1f}], 0x1, 0x3}, {[{0x5, 0x3}, {0xd52}, {0x3f, 0x3}, {0xff, 0x2}, {0x7ff, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x10000, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x100, 0x3}], [{0x9, 0x5}, {0x8, 0x80}, {0x80, 0x4}, {0x5, 0x3}, {0x12, 0x1000}, {0x7, 0x3}, {0xc1, 0x4}, {0x1c0000, 0x1}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0xa9a}], 0x8, 0x2}, {[{0xffffffff, 0x1}, {0x101, 0x2}, {0x7}, {0x80, 0x1}, {0x0, 0x3}, {0xffff1a26, 0x3}, {0x5, 0x3}, {0xcf1, 0x1}, {0x1f, 0x1}, {0x7f, 0x2}, {0x101, 0x1}], [{0x900000, 0x9}, {0x1, 0x10000}, {0x2}, {0x80, 0x9}, {0x4bb, 0xfe8}, {0x3f}, {0xe11d, 0x3}, {0x9, 0x6841}, {}, {0x9049, 0xfff}, {0x3cb, 0x10000}], 0x4, 0x5}, {[{0xffffff8f}, {0x5, 0x2}, {0x7}, {0x8000, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x9, 0x2}, {0x9be}, {0x8, 0x3}, {0xa15}], [{0x6, 0x7}, {0xdd69, 0x7f}, {0x10001, 0x6}, {0x40, 0x7f}, {0x7ff0000, 0x3}, {0x2}, {0x6, 0x69e4241e}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7fffffff}, {0x6, 0x7}], 0x3, 0x4}, {[{0x4, 0x2}, {0xff, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x2}, {0x1ff, 0x3}, {0x80}, {0x20d7, 0x1}, {0x863, 0x1}, {0x6, 0x2}, {0x10, 0x3}], [{0x1000, 0x1000}, {0x51e, 0x7fff}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0xffffffff}, {0x3, 0x843a}, {0x9, 0x3}, {0x9, 0x1f}, {0x200, 0x9}, {0xaf5, 0x5}, {0x5, 0x7}], 0x5, 0x4}, {[{0x8001, 0x3}, {0x6, 0x99431be99ee3dcb1}, {0x10001, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x8, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x40, 0x1}, {0xc4, 0x3}, {0xd6e}], [{0x8, 0x5}, {0x1, 0x80000001}, {0x3, 0x3780}, {0x777, 0x5}, {0x6ef1, 0x400}, {0x4, 0x3f}, {0x101, 0xffffffff}, {0xff, 0x2}, {0x3, 0x8}, {0x8000, 0x2}, {0x1, 0x7f}], 0x9, 0x5}, {[{0xff, 0x3}, {0xff, 0x1}, {0x4}, {0x139e, 0x3}, {0xb, 0x2}, {0x0, 0x2}, {0x80}, {0x9, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x2}], [{0x1, 0x237}, {0x1, 0x7}, {0x4, 0xffffbec5}, {0x8, 0xe2d5}, {0x5, 0x660}, {0x9611, 0x6}, {0x81, 0x21d}, {0x3, 0x2}, {0x1, 0xb6}, {0x2, 0x9}, {0x3, 0x2}], 0x2, 0x8}], 0x1, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x14}, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}}, {0x3, 0x2e, 0x88e5, 'vlan0\x00', 'veth0_virt_wifi\x00', 'xfrm0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0x8847, 'ip6_vti0\x00', 'veth0\x00', 'virt_wifi0\x00', 'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xdee) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 20:59:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1771.169493][T15879] atomic_op 0000000047634245 conn xmit_atomic 000000002c7e2213 20:59:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x21, 0xfffffffffffffffe, 0x3) [ 1771.378398][T15890] debugfs: File 'dropped' in directory 'sg0' already present! [ 1771.386437][T15890] debugfs: File 'msg' in directory 'sg0' already present! [ 1771.394285][T15890] debugfs: File 'trace0' in directory 'sg0' already present! 20:59:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:59:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x21, 0xfffffffffffffffe, 0x3) 20:59:35 executing program 1: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000369000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f00000cb000/0x1000)=nil) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 20:59:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x808, 0x0) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="ab", 0x1}], 0x1, 0x0) 20:59:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x21, 0xfffffffffffffffe, 0x3) 20:59:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:59:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') 20:59:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0xc, 0x1, 0x0, r0, 0x0}]) [ 1772.957354][ T32] audit: type=1800 audit(1590526775.144:72): pid=15915 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15750 res=0 [ 1773.033216][ T32] audit: type=1800 audit(1590526775.194:73): pid=15920 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15752 res=0 20:59:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x808, 0x0) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="ab", 0x1}], 0x1, 0x0) 20:59:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x21, 0xfffffffffffffffe, 0x3) 20:59:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0xc, 0x1, 0x0, r0, 0x0}]) 20:59:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x101}, 0x1c) listen(r0, 0x0) 20:59:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x808, 0x0) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="ab", 0x1}], 0x1, 0x0) [ 1773.514120][ T32] audit: type=1800 audit(1590526775.694:74): pid=15933 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15750 res=0 20:59:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xd0, &(0x7f0000000140)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223a22eb6cb5ca768a7a65dc0e1782c845f956da0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479bafa8f2c1e78c8a5f29f680dc88b521f6fafd411d638e0facd7133a69ad7454b2c645a82e"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1774.357810][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1774.370692][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1774.379428][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1774.380391][T13476] Call Trace: [ 1774.380391][T13476] dump_stack+0x1c9/0x220 [ 1774.380391][T13476] dump_header+0x1e7/0xd00 [ 1774.380391][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1774.380391][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1774.413730][T13476] ? ___ratelimit+0x542/0x720 [ 1774.413730][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1774.413730][T13476] oom_kill_process+0x216/0x580 [ 1774.413730][T13476] out_of_memory+0x181e/0x1cc0 [ 1774.413730][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1774.413730][T13476] alloc_pages_current+0x67d/0x990 [ 1774.413730][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1774.413730][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1774.413730][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1774.413730][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1774.413730][T13476] ion_ioctl+0x79d/0x1fc0 [ 1774.413730][T13476] ? debug_shrink_set+0x220/0x220 [ 1774.413730][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1774.413730][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1774.413730][T13476] do_syscall_64+0xb8/0x160 [ 1774.413730][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1774.413730][T13476] RIP: 0033:0x45ca29 [ 1774.413730][T13476] Code: Bad RIP value. [ 1774.413730][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1774.413730][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1774.413730][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1774.528077][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1774.528077][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1774.528077][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1774.558777][T13476] Mem-Info: [ 1774.562051][T13476] active_anon:133961 inactive_anon:9919 isolated_anon:0 [ 1774.562051][T13476] active_file:1989 inactive_file:3274 isolated_file:0 [ 1774.562051][T13476] unevictable:0 dirty:108 writeback:0 unstable:0 [ 1774.562051][T13476] slab_reclaimable:5932 slab_unreclaimable:40626 [ 1774.562051][T13476] mapped:59273 shmem:15854 pagetables:10511 bounce:0 [ 1774.562051][T13476] free:205446 free_pcp:131 free_cma:0 [ 1774.600509][T13476] Node 0 active_anon:474120kB inactive_anon:22072kB active_file:8kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1774.630564][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.659650][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1774.665069][T13476] Node 0 DMA32 free:39372kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:450020kB inactive_anon:2844kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3356kB pagetables:18712kB bounce:0kB free_pcp:516kB local_pcp:352kB free_cma:0kB [ 1774.697314][T13476] lowmem_reserve[]: 0 0 228 228 [ 1774.702269][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1774.733807][T13476] lowmem_reserve[]: 0 0 0 0 [ 1774.738394][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1774.750572][T13476] Node 0 DMA32: 961*4kB (ME) 589*8kB (ME) 364*16kB (ME) 235*32kB (UME) 99*64kB (UM) 47*128kB (M) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39372kB [ 1774.770103][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1774.785233][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1774.795690][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1774.805274][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1774.815039][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1774.824519][T13476] 21249 total pagecache pages [ 1774.829236][T13476] 0 pages in swap cache [ 1774.833451][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1774.839937][T13476] Free swap = 0kB [ 1774.843837][T13476] Total swap = 0kB [ 1774.847611][T13476] 1965979 pages RAM [ 1774.851545][T13476] 0 pages HighMem/MovableOnly [ 1774.856415][T13476] 1423249 pages reserved [ 1774.860869][T13476] 0 pages cma reserved [ 1774.865122][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=15927,uid=0 20:59:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x12, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') 20:59:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) 20:59:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e23, 0x7, @dev}}}, 0x38) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 20:59:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0xc, 0x1, 0x0, r0, 0x0}]) 20:59:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x808, 0x0) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000400)="ab", 0x1}], 0x1, 0x0) [ 1775.284392][ T32] audit: type=1800 audit(1590526777.464:75): pid=15954 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15750 res=0 20:59:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x3, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) 20:59:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 20:59:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0xc, 0x1, 0x0, r0, 0x0}]) 20:59:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) [ 1775.730861][T15963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1775.793423][ T32] audit: type=1800 audit(1590526777.974:76): pid=15970 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15750 res=0 20:59:38 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) [ 1775.984987][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:38 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 1776.195097][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1776.208043][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1776.216774][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.217677][T13476] Call Trace: [ 1776.217677][T13476] dump_stack+0x1c9/0x220 [ 1776.217677][T13476] dump_header+0x1e7/0xd00 [ 1776.217677][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1776.239819][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1776.239819][T13476] ? ___ratelimit+0x542/0x720 [ 1776.239819][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1776.239819][T13476] oom_kill_process+0x216/0x580 [ 1776.239819][T13476] out_of_memory+0x181e/0x1cc0 [ 1776.239819][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1776.239819][T13476] alloc_pages_current+0x67d/0x990 [ 1776.239819][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1776.239819][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1776.239819][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1776.239819][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1776.239819][T13476] ion_ioctl+0x79d/0x1fc0 [ 1776.239819][T13476] ? debug_shrink_set+0x220/0x220 [ 1776.239819][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1776.239819][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1776.239819][T13476] do_syscall_64+0xb8/0x160 [ 1776.239819][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1776.239819][T13476] RIP: 0033:0x45ca29 [ 1776.239819][T13476] Code: Bad RIP value. [ 1776.239819][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.239819][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1776.239819][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.239819][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1776.239819][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1776.239819][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1776.393830][T13476] Mem-Info: [ 1776.397120][T13476] active_anon:133930 inactive_anon:7191 isolated_anon:0 [ 1776.397120][T13476] active_file:1991 inactive_file:3280 isolated_file:0 [ 1776.397120][T13476] unevictable:0 dirty:114 writeback:0 unstable:0 [ 1776.397120][T13476] slab_reclaimable:5932 slab_unreclaimable:40627 [ 1776.397120][T13476] mapped:56514 shmem:13126 pagetables:10592 bounce:0 [ 1776.397120][T13476] free:207694 free_pcp:131 free_cma:0 [ 1776.435498][T13476] Node 0 active_anon:474120kB inactive_anon:22072kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 364544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1776.464484][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.493618][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1776.498895][T13476] Node 0 DMA32 free:39404kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:450020kB inactive_anon:2844kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3356kB pagetables:18712kB bounce:0kB free_pcp:516kB local_pcp:352kB free_cma:0kB [ 1776.530910][T13476] lowmem_reserve[]: 0 0 228 228 [ 1776.535979][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1776.567228][T13476] lowmem_reserve[]: 0 0 0 0 [ 1776.571820][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1776.584004][T13476] Node 0 DMA32: 961*4kB (ME) 589*8kB (ME) 364*16kB (ME) 237*32kB (UME) 99*64kB (UM) 47*128kB (M) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39436kB [ 1776.601295][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1776.616332][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.626330][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.635837][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1776.645609][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1776.655096][T13476] 18409 total pagecache pages [ 1776.659893][T13476] 0 pages in swap cache [ 1776.664235][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1776.670332][T13476] Free swap = 0kB [ 1776.674226][T13476] Total swap = 0kB [ 1776.677984][T13476] 1965979 pages RAM [ 1776.681819][T13476] 0 pages HighMem/MovableOnly [ 1776.686675][T13476] 1423249 pages reserved [ 1776.691093][T13476] 0 pages cma reserved [ 1776.695342][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=21236,uid=0 [ 1776.710324][T13476] Out of memory: Killed process 21236 (syz-executor.1) total-vm:74976kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 20:59:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x2a, 0x1}, 0x20}}, 0x0) 20:59:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) 20:59:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) 20:59:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x3, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) 20:59:39 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) [ 1777.040714][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:39 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) 20:59:39 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) 20:59:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x2}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000000c0)={0x5db}, 0x4) 20:59:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x2a, 0x1}, 0x20}}, 0x0) 20:59:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:59:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x3, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) 20:59:39 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) 20:59:39 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:59:40 executing program 0: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000140)={0x2, 0x400}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, '\x00', "b8d5e8382b7cb1d02b30a05c6ef0b81f0934126148d3f0d32c95b2b7a139c441", "552573ed", "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) 20:59:40 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) [ 1777.759076][T16015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x7, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8010550e, 0x0) 20:59:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x2a, 0x1}, 0x20}}, 0x0) 20:59:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007058000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x3, @ipv4={[], [], @loopback}}]}}]}, 0x48}}, 0x0) 20:59:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x2a, 0x1}, 0x20}}, 0x0) 20:59:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x7, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8010550e, 0x0) 20:59:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:59:40 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r1, 0xc0045009, &(0x7f00000000c0)=0x10) sendfile(r1, r0, 0x0, 0xedc0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1406, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) getpid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x6}}, 0x20) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x200}, 0x70, 0x81, 0x0, 0x0, 0x5, 'syz1\x00', "4cf40eeb9ba4e3e6d0d6784ad91d9941099e32fcca62aa01d57e37025da1ec94", "4be3bd7b4fb08a718bf9946bcc1602c27674eb53df101339342f7cdb7c2ce13f", [{0x3, 0x7544, {0x1, 0x1}}, {0x9, 0xfd22, {0x0, 0x401}}, {0x19, 0x0, {0x1, 0x5}}, {0x0, 0x9, {0x2, 0x1f}}, {0x101, 0x7f, {0x0, 0x8}}, {0x7ff, 0xbbc, {0x1, 0x8}}, {0x1ff, 0x3f, {0x0, 0x7}}, {0xfff7, 0x48, {0x3, 0xf0c}}, {0x9, 0x1ff, {0x0, 0xfffffff7}}, {0xfa, 0x6, {0x2, 0x1f}}, {0x1f, 0x6000, {0x0, 0x1}}, {0x9, 0xc0, {0x1, 0x3f}}, {0x6, 0x2, {0x1, 0x4}}, {0x8, 0x6, {0x3}}, {0x0, 0x4, {0x1, 0x81}}, {0x3, 0x6, {0x1}}, {0x6, 0x200, {0x2, 0x1}}, {0xaca6, 0x3, {0x1, 0xd0}}, {0x2c5, 0x1, {0x3, 0x5}}, {0xf800, 0xc02, {0x3, 0xfffffffc}}, {0x200, 0x100, {0x3, 0xfe35}}, {0x100, 0x0, {0x0, 0x3}}, {0x6, 0x2, {0x3, 0x1}}, {0xf05d, 0x3, {0xd67068b56f52d973, 0x7b}}, {0x2, 0x5, {0x2, 0x2}}, {}, {0xf2e6, 0x4, {0x0, 0x80000001}}, {0x1, 0xffff, {0x0, 0xfffffffe}}, {0x4, 0xfff, {0x2, 0x6}}, {0x1ff, 0x1, {0x0, 0x9}}, {0x8000, 0x4, {0x0, 0x101}}, {0x209a, 0xfe00, {0x2}}, {0xfff, 0x40, {0x1, 0x6}}, {0x4, 0x200, {0x3, 0x6}}, {0x800, 0x81, {0x3, 0x8}}, {0x8, 0x5f, {0x0, 0x8000}}, {0x2, 0xffc1, {0x1, 0x7}}, {0x0, 0x0, {0x3, 0x2}}, {0x0, 0x7fff, {0x1, 0x1}}, {0x3, 0x1000, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x4, 0x0, 0x20, 0x8, 0x1c, 'syz1\x00', "c5286cd6dd6608af17b3dedf13a565e0dfa15579ae5a7ebd5a62f44325ce260c", "9fa776de008f74f7ded4654ddb6fa435b472738dbd45f29c2eef8d605e80dd6b", [{0x2, 0x8, {0x2, 0x740c}}, {0x7, 0x8, {0x3, 0x401}}, {0x3, 0x3, {0x3, 0x2}}, {0x4, 0x1f, {0x2, 0x27}}, {0x1000, 0x6, {0x1, 0x6565}}, {0x1000, 0xcd5, {0x2, 0xe4}}, {0x7, 0x1ff, {0x3, 0x9}}, {0x5, 0x4, {0x2, 0xd35}}, {0x101, 0x0, {0x0, 0x32c}}, {0x1, 0xfff9, {0x2, 0x8}}, {0x1, 0x8, {0x0, 0x4}}, {0x7f, 0x2, {0x2, 0xffffffff}}, {0x3ff, 0x20, {0x2, 0xb3}}, {0xffff, 0x7, {0x0, 0x1f}}, {0xfff7, 0x1, {0x3, 0x81}}, {0x3df6, 0x1}, {0x8, 0x4, {0x1, 0x8000}}, {0x8000, 0x9, {0x3, 0x7d}}, {0x40, 0x0, {0x0, 0x6}}, {0xfff, 0x8, {0x1, 0x80000001}}, {0x800, 0x8, {0x2, 0xc36}}, {0x1, 0x40, {0x3, 0xfff}}, {0x100, 0x0, {0x1, 0xff}}, {0x0, 0x3f, {0x3, 0x1c20000}}, {0x5, 0x6, {0x2, 0x7}}, {0x6, 0x1f, {0x3, 0x6}}, {0x5, 0x54, {0x0, 0x9}}, {0x8000, 0x0, {0x1, 0x6}}, {0x3, 0xffb1, {0x1, 0x9a}}, {0x1000, 0x6, {0x0, 0x7}}, {0x4, 0xb7, {0x0, 0x7}}, {0x4121, 0x3706, {0x0, 0xfc}}, {0x4, 0xee92, {0x3, 0x1000}}, {0x8, 0x8, {0x1, 0x3}}, {0x7, 0x3, {0x1, 0x1ff}}, {0x1ff, 0x4, {0x1, 0x1}}, {0x1, 0x7, {0x1, 0x6}}, {0x8001, 0x3, {0x3, 0x101}}, {0x8, 0x8, {0x3}}, {0xff4c, 0x8001, {0x2, 0x9}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x2004085}, 0x20000040) [ 1778.346731][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:59:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:59:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x7, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8010550e, 0x0) 20:59:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13c, &(0x7f00000002c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:59:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffff0001, &(0x7f0000000040)) 20:59:41 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 20:59:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:59:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="d6ac7d0759e34fef7c55a051d74120a9c4c0820317a72684827860a89b1df44cfe348bc38ac0f0f7d5bdc71bac54b964c22726142b1af756b1e83e437d03e5320835d0955ed0837cbfc3afd14a42371f08d238f5cce4bb0c73532f11687494e2dc0bdd51f759e9d26f2a78770b603854c868a180d87ac1be76175a6cd0d41338e36656cf046fe62d2b399abe75768feb51cf92499d2b2e2df675e4aba95a6ff8472c71430ee3f4abd78ead0703751959987403f1080d4a23c5b8f4dc71b71d53bfec4688f6fd5068da23e35508e7a63a8b631ff0de9e9d0c48504585bc0b37c7dde848ded4041ad741f111b48b4ea4e0607846389855205431734772132e3c85cae412818e31730af4efb05b7578a0ef352c74c7764798c9478c760d6a6331aeee2ac9082768fc8de7cb3e4f6644937008304f3dd7f7b308f06a64d8b2b19f0c3c65205ad17ddbb967e24994f899f0029cb37c9e162797b959689bdf22ade30e1513ec821210"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x7, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8010550e, 0x0) 20:59:41 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 20:59:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffff0001, &(0x7f0000000040)) 20:59:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:59:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="d6ac7d0759e34fef7c55a051d74120a9c4c0820317a72684827860a89b1df44cfe348bc38ac0f0f7d5bdc71bac54b964c22726142b1af756b1e83e437d03e5320835d0955ed0837cbfc3afd14a42371f08d238f5cce4bb0c73532f11687494e2dc0bdd51f759e9d26f2a78770b603854c868a180d87ac1be76175a6cd0d41338e36656cf046fe62d2b399abe75768feb51cf92499d2b2e2df675e4aba95a6ff8472c71430ee3f4abd78ead0703751959987403f1080d4a23c5b8f4dc71b71d53bfec4688f6fd5068da23e35508e7a63a8b631ff0de9e9d0c48504585bc0b37c7dde848ded4041ad741f111b48b4ea4e0607846389855205431734772132e3c85cae412818e31730af4efb05b7578a0ef352c74c7764798c9478c760d6a6331aeee2ac9082768fc8de7cb3e4f6644937008304f3dd7f7b308f06a64d8b2b19f0c3c65205ad17ddbb967e24994f899f0029cb37c9e162797b959689bdf22ade30e1513ec821210"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017624007a2a30005000040", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x10}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 20:59:42 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1780.393515][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1780.406582][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1780.415312][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1780.416477][T13476] Call Trace: [ 1780.416477][T13476] dump_stack+0x1c9/0x220 [ 1780.416477][T13476] dump_header+0x1e7/0xd00 [ 1780.416477][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1780.416477][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1780.416477][T13476] ? ___ratelimit+0x542/0x720 [ 1780.416477][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1780.416477][T13476] oom_kill_process+0x216/0x580 [ 1780.416477][T13476] out_of_memory+0x181e/0x1cc0 [ 1780.416477][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1780.416477][T13476] alloc_pages_current+0x67d/0x990 [ 1780.416477][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1780.483817][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1780.483817][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1780.483817][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1780.483817][T13476] ion_ioctl+0x79d/0x1fc0 [ 1780.483817][T13476] ? debug_shrink_set+0x220/0x220 [ 1780.483817][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1780.483817][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1780.483817][T13476] do_syscall_64+0xb8/0x160 [ 1780.524118][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1780.524118][T13476] RIP: 0033:0x45ca29 [ 1780.524118][T13476] Code: Bad RIP value. [ 1780.524118][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1780.524118][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1780.553823][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1780.553823][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1780.553823][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1780.553823][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1780.590226][T13476] Mem-Info: [ 1780.593488][T13476] active_anon:133400 inactive_anon:7191 isolated_anon:0 [ 1780.593488][T13476] active_file:1990 inactive_file:3289 isolated_file:0 [ 1780.593488][T13476] unevictable:0 dirty:125 writeback:0 unstable:0 [ 1780.593488][T13476] slab_reclaimable:5931 slab_unreclaimable:40634 [ 1780.593488][T13476] mapped:56522 shmem:13126 pagetables:10453 bounce:0 [ 1780.593488][T13476] free:207879 free_pcp:162 free_cma:0 [ 1780.631956][T13476] Node 0 active_anon:472048kB inactive_anon:22072kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 362496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1780.661133][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1780.690299][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1780.695731][T13476] Node 0 DMA32 free:39376kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:447948kB inactive_anon:2844kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3340kB pagetables:18712kB bounce:0kB free_pcp:636kB local_pcp:368kB free_cma:0kB [ 1780.727747][T13476] lowmem_reserve[]: 0 0 228 228 [ 1780.732727][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8780kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1780.764313][T13476] lowmem_reserve[]: 0 0 0 0 [ 1780.768897][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1780.780970][T13476] Node 0 DMA32: 962*4kB (UME) 589*8kB (ME) 364*16kB (ME) 237*32kB (UME) 99*64kB (UM) 47*128kB (M) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39440kB [ 1780.797552][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1780.812685][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.822486][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.832808][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.842717][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.852321][T13476] 18417 total pagecache pages [ 1780.857187][T13476] 0 pages in swap cache [ 1780.861397][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1780.867747][T13476] Free swap = 0kB [ 1780.871557][T13476] Total swap = 0kB [ 1780.875487][T13476] 1965979 pages RAM [ 1780.879352][T13476] 0 pages HighMem/MovableOnly [ 1780.884215][T13476] 1423249 pages reserved [ 1780.888489][T13476] 0 pages cma reserved [ 1780.892597][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=10709,uid=0 [ 1780.907679][T13476] Out of memory: Killed process 10709 (syz-executor.0) total-vm:75108kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1780.927396][ T1820] oom_reaper: reaped process 10709 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1781.395812][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1781.408687][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1781.417762][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1781.418435][T13476] Call Trace: [ 1781.418435][T13476] dump_stack+0x1c9/0x220 [ 1781.418435][T13476] dump_header+0x1e7/0xd00 [ 1781.418435][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1781.418435][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1781.418435][T13476] ? ___ratelimit+0x542/0x720 [ 1781.418435][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1781.418435][T13476] oom_kill_process+0x216/0x580 [ 1781.418435][T13476] out_of_memory+0x181e/0x1cc0 [ 1781.418435][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1781.418435][T13476] alloc_pages_current+0x67d/0x990 [ 1781.418435][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1781.484002][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1781.484002][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1781.484002][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1781.484002][T13476] ion_ioctl+0x79d/0x1fc0 [ 1781.484002][T13476] ? debug_shrink_set+0x220/0x220 [ 1781.484002][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1781.484002][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1781.484002][T13476] do_syscall_64+0xb8/0x160 [ 1781.484002][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1781.484002][T13476] RIP: 0033:0x45ca29 [ 1781.484002][T13476] Code: Bad RIP value. [ 1781.484002][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1781.484002][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1781.553707][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1781.563851][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1781.563851][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1781.563851][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1781.594104][T13476] Mem-Info: [ 1781.597387][T13476] active_anon:132848 inactive_anon:7191 isolated_anon:0 [ 1781.597387][T13476] active_file:1988 inactive_file:3289 isolated_file:0 [ 1781.597387][T13476] unevictable:0 dirty:131 writeback:0 unstable:0 [ 1781.597387][T13476] slab_reclaimable:5931 slab_unreclaimable:40634 [ 1781.597387][T13476] mapped:56526 shmem:13126 pagetables:10445 bounce:0 [ 1781.597387][T13476] free:207903 free_pcp:187 free_cma:0 [ 1781.636116][T13476] Node 0 active_anon:469872kB inactive_anon:22072kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 360448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1781.665286][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1781.696407][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1781.701698][T13476] Node 0 DMA32 free:39472kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:445772kB inactive_anon:2844kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3340kB pagetables:18708kB bounce:0kB free_pcp:676kB local_pcp:408kB free_cma:0kB [ 1781.733972][T13476] lowmem_reserve[]: 0 0 228 228 [ 1781.738941][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8728kB bounce:0kB free_pcp:72kB local_pcp:68kB free_cma:0kB [ 1781.773081][T13476] lowmem_reserve[]: 0 0 0 0 [ 1781.777846][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1781.789961][T13476] Node 0 DMA32: 962*4kB (UME) 589*8kB (ME) 364*16kB (ME) 234*32kB (ME) 99*64kB (UM) 48*128kB (UM) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39472kB [ 1781.806558][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1781.822240][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.832155][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.843177][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.852985][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.862516][T13476] 18423 total pagecache pages [ 1781.867432][T13476] 0 pages in swap cache [ 1781.871663][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1781.877945][T13476] Free swap = 0kB [ 1781.881700][T13476] Total swap = 0kB [ 1781.885869][T13476] 1965979 pages RAM [ 1781.889710][T13476] 0 pages HighMem/MovableOnly [ 1781.894590][T13476] 1423249 pages reserved [ 1781.898859][T13476] 0 pages cma reserved [ 1781.902967][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=12950,uid=0 [ 1781.918234][T13476] Out of memory: Killed process 12950 (syz-executor.4) total-vm:75108kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1782.341791][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1782.354918][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1782.363666][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1782.372612][T13476] Call Trace: [ 1782.376581][T13476] dump_stack+0x1c9/0x220 [ 1782.381501][T13476] dump_header+0x1e7/0xd00 [ 1782.383880][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1782.391829][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1782.398080][T13476] ? ___ratelimit+0x542/0x720 [ 1782.401797][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1782.407308][T13476] oom_kill_process+0x216/0x580 [ 1782.412223][T13476] out_of_memory+0x181e/0x1cc0 [ 1782.415893][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1782.422511][T13476] alloc_pages_current+0x67d/0x990 [ 1782.428136][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1782.433657][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1782.439260][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1782.443769][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1782.451000][T13476] ion_ioctl+0x79d/0x1fc0 [ 1782.455455][T13476] ? debug_shrink_set+0x220/0x220 [ 1782.460353][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1782.463775][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1782.463775][T13476] do_syscall_64+0xb8/0x160 [ 1782.474469][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1782.480627][T13476] RIP: 0033:0x45ca29 [ 1782.483741][T13476] Code: Bad RIP value. [ 1782.488547][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1782.497183][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1782.503727][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1782.508848][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1782.508848][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1782.524586][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1782.538149][T13476] Mem-Info: [ 1782.541410][T13476] active_anon:132291 inactive_anon:7191 isolated_anon:0 [ 1782.541410][T13476] active_file:1988 inactive_file:3289 isolated_file:0 [ 1782.541410][T13476] unevictable:0 dirty:136 writeback:0 unstable:0 [ 1782.541410][T13476] slab_reclaimable:5931 slab_unreclaimable:40634 [ 1782.541410][T13476] mapped:56533 shmem:13126 pagetables:10419 bounce:0 [ 1782.541410][T13476] free:207970 free_pcp:245 free_cma:0 [ 1782.579940][T13476] Node 0 active_anon:467712kB inactive_anon:22072kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 360448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1782.608949][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.638138][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1782.643500][T13476] Node 0 DMA32 free:39504kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:443612kB inactive_anon:2844kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3324kB pagetables:18664kB bounce:0kB free_pcp:812kB local_pcp:544kB free_cma:0kB [ 1782.676017][T13476] lowmem_reserve[]: 0 0 228 228 [ 1782.681036][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8668kB bounce:0kB free_pcp:168kB local_pcp:164kB free_cma:0kB [ 1782.712975][T13476] lowmem_reserve[]: 0 0 0 0 [ 1782.717728][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1782.729854][T13476] Node 0 DMA32: 962*4kB (UME) 589*8kB (ME) 365*16kB (UME) 236*32kB (UME) 99*64kB (UM) 48*128kB (UM) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39552kB [ 1782.746507][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1782.761720][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.771502][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.781053][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.790872][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.800426][T13476] 18428 total pagecache pages [ 1782.805323][T13476] 0 pages in swap cache [ 1782.809532][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1782.815853][T13476] Free swap = 0kB [ 1782.819894][T13476] Total swap = 0kB [ 1782.823824][T13476] 1965979 pages RAM [ 1782.827754][T13476] 0 pages HighMem/MovableOnly [ 1782.832549][T13476] 1423249 pages reserved [ 1782.837016][T13476] 0 pages cma reserved 20:59:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13c, &(0x7f00000002c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:59:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffff0001, &(0x7f0000000040)) 20:59:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:59:44 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017624007a2a30005000040", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x10}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 20:59:44 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) [ 1782.841183][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=12943,uid=0 [ 1782.856509][T13476] Out of memory: Killed process 12943 (syz-executor.1) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1782.894617][ T1820] oom_reaper: reaped process 12943 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 20:59:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffff0001, &(0x7f0000000040)) 20:59:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000001080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4020565a, &(0x7f00000010c0)) 20:59:45 executing program 3: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x2, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 20:59:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017624007a2a30005000040", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x10}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 20:59:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13c, &(0x7f00000002c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:59:45 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r3, 0x80000000, 0x0) [ 1783.425739][T16129] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:45 executing program 3: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x2, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 20:59:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000440), 0x0, &(0x7f0000000200)={0x1ff}, 0x0, 0x0) 20:59:45 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000001080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4020565a, &(0x7f00000010c0)) 20:59:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050017624007a2a30005000040", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x10}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) 20:59:45 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r3, 0x80000000, 0x0) [ 1783.692558][T16147] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13c, &(0x7f00000002c0)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:59:46 executing program 3: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x2, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 20:59:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000001080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4020565a, &(0x7f00000010c0)) 20:59:46 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r3, 0x80000000, 0x0) 20:59:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) [ 1784.137549][T16166] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:46 executing program 3: clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x2, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0) 20:59:46 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$nbd(r0, 0x0, 0x0) close(r1) close(r0) 20:59:46 executing program 0: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 1784.464290][T16177] xt_CT: You must specify a L4 protocol and not use inversions on it 20:59:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000440), 0x0, &(0x7f0000000200)={0x1ff}, 0x0, 0x0) 20:59:46 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000001080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4020565a, &(0x7f00000010c0)) 20:59:46 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r3, 0x80000000, 0x0) 20:59:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x69c6}) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$dsp(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) dup3(r5, r2, 0x0) tkill(r0, 0x1000000000016) 20:59:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:46 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$nbd(r0, 0x0, 0x0) close(r1) close(r0) 20:59:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40d9b3144", 0xff7c}], 0x1) 20:59:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x92, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60209208005c0600fe8000000000000000cc93c6ec000000000000bbfe80"], 0x0) 20:59:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x69c6}) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$dsp(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) dup3(r5, r2, 0x0) tkill(r0, 0x1000000000016) 20:59:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:47 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$nbd(r0, 0x0, 0x0) close(r1) close(r0) 20:59:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x92, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60209208005c0600fe8000000000000000cc93c6ec000000000000bbfe80"], 0x0) 20:59:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000440), 0x0, &(0x7f0000000200)={0x1ff}, 0x0, 0x0) 20:59:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40d9b3144", 0xff7c}], 0x1) 20:59:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x69c6}) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$dsp(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) dup3(r5, r2, 0x0) tkill(r0, 0x1000000000016) 20:59:48 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$nbd(r0, 0x0, 0x0) close(r1) close(r0) 20:59:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x92, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60209208005c0600fe8000000000000000cc93c6ec000000000000bbfe80"], 0x0) 20:59:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x92, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60209208005c0600fe8000000000000000cc93c6ec000000000000bbfe80"], 0x0) 20:59:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x69c6}) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$dsp(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) dup3(r5, r2, 0x0) tkill(r0, 0x1000000000016) 20:59:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40d9b3144", 0xff7c}], 0x1) 20:59:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r3, 0x105, 0x0, 0x0, {0x5}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0) [ 1786.642885][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1786.656043][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1786.664766][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.665489][T13476] Call Trace: [ 1786.665489][T13476] dump_stack+0x1c9/0x220 [ 1786.665489][T13476] dump_header+0x1e7/0xd00 [ 1786.665489][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1786.665489][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1786.665489][T13476] ? ___ratelimit+0x542/0x720 [ 1786.665489][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1786.665489][T13476] oom_kill_process+0x216/0x580 [ 1786.665489][T13476] out_of_memory+0x181e/0x1cc0 [ 1786.665489][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1786.665489][T13476] alloc_pages_current+0x67d/0x990 [ 1786.665489][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1786.665489][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1786.665489][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1786.665489][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1786.665489][T13476] ion_ioctl+0x79d/0x1fc0 [ 1786.665489][T13476] ? debug_shrink_set+0x220/0x220 [ 1786.665489][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1786.665489][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1786.665489][T13476] do_syscall_64+0xb8/0x160 [ 1786.665489][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1786.665489][T13476] RIP: 0033:0x45ca29 [ 1786.665489][T13476] Code: Bad RIP value. [ 1786.665489][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1786.665489][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1786.665489][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1786.665489][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1786.665489][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1786.665489][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1786.840176][T13476] Mem-Info: [ 1786.843526][T13476] active_anon:131940 inactive_anon:7061 isolated_anon:0 [ 1786.843526][T13476] active_file:1990 inactive_file:3324 isolated_file:0 [ 1786.843526][T13476] unevictable:0 dirty:143 writeback:0 unstable:0 [ 1786.843526][T13476] slab_reclaimable:5931 slab_unreclaimable:40626 [ 1786.843526][T13476] mapped:56577 shmem:13126 pagetables:10457 bounce:0 [ 1786.843526][T13476] free:207890 free_pcp:285 free_cma:0 [ 1786.882194][T13476] Node 0 active_anon:466032kB inactive_anon:21552kB active_file:20kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:12kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 356352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1786.911610][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.940719][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1786.946113][T13476] Node 0 DMA32 free:39588kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:441932kB inactive_anon:2324kB active_file:16kB inactive_file:400kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3292kB pagetables:18524kB bounce:0kB free_pcp:968kB local_pcp:268kB free_cma:0kB [ 1786.978191][T13476] lowmem_reserve[]: 0 0 228 228 [ 1786.983757][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24100kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4272kB pagetables:8640kB bounce:0kB free_pcp:172kB local_pcp:8kB free_cma:0kB [ 1787.015147][T13476] lowmem_reserve[]: 0 0 0 0 [ 1787.019744][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1787.032501][T13476] Node 0 DMA32: 961*4kB (ME) 590*8kB (UME) 365*16kB (UME) 239*32kB (UME) 98*64kB (M) 48*128kB (UM) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39588kB [ 1787.049003][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1787.064170][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1787.064208][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1787.064246][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 20:59:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000440), 0x0, &(0x7f0000000200)={0x1ff}, 0x0, 0x0) 20:59:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:49 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @remote, 'geneve0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 1787.064283][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1787.064301][T13476] 18468 total pagecache pages [ 1787.064320][T13476] 0 pages in swap cache [ 1787.064348][T13476] Swap cache stats: add 0, delete 0, find 0/0 20:59:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r3, 0x105, 0x0, 0x0, {0x5}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0) [ 1787.064363][T13476] Free swap = 0kB [ 1787.064379][T13476] Total swap = 0kB [ 1787.064398][T13476] 1965979 pages RAM [ 1787.064413][T13476] 0 pages HighMem/MovableOnly [ 1787.064429][T13476] 1423249 pages reserved [ 1787.064444][T13476] 0 pages cma reserved [ 1787.064473][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=9300,uid=0 [ 1787.064683][T13476] Out of memory: Killed process 9300 (syz-executor.4) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1787.067553][ T1820] oom_reaper: reaped process 9300 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 20:59:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b40d9b3144", 0xff7c}], 0x1) 20:59:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0x275) 20:59:49 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @remote, 'geneve0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 20:59:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r3, 0x105, 0x0, 0x0, {0x5}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0) 20:59:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 20:59:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r3, 0x105, 0x0, 0x0, {0x5}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa2}}, 0x0) 20:59:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 20:59:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:50 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @remote, 'geneve0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 20:59:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x7, 0x0, &(0x7f0000000080), 0x0) 20:59:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) 20:59:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@remote}, {@in=@loopback, 0x0, 0x32}, @in=@loopback}, 0xc8d7}}, 0xf8}}, 0x0) 20:59:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@remote}, {@in=@loopback, 0x0, 0x32}, @in=@loopback}, 0xc8d7}}, 0xf8}}, 0x0) 20:59:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}, @IFLA_BR_AGEING_TIME={0x8}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4910}]}, 0x60}}, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6d, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x80) 20:59:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 20:59:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:59:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) 20:59:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@remote}, {@in=@loopback, 0x0, 0x32}, @in=@loopback}, 0xc8d7}}, 0xf8}}, 0x0) 20:59:51 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 20:59:51 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @remote, 'geneve0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 20:59:52 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f00000042c0)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f3814f9f4070009040180020000000000000000000008", 0x1d) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b05090002", 0x17}], 0x1) splice(r0, 0x0, r4, 0x0, 0x422000a7f, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffb4) 20:59:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@remote}, {@in=@loopback, 0x0, 0x32}, @in=@loopback}, 0xc8d7}}, 0xf8}}, 0x0) 20:59:52 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x8, 0x800000000000004, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) r0 = gettid() tkill(r0, 0x33) 20:59:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) 20:59:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x61, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 20:59:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 20:59:52 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f00000042c0)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f3814f9f4070009040180020000000000000000000008", 0x1d) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b05090002", 0x17}], 0x1) splice(r0, 0x0, r4, 0x0, 0x422000a7f, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffb4) 20:59:52 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'gretap0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x837, @link_local}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) 20:59:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) [ 1790.639284][T16347] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1790.649998][T16347] xt_NFQUEUE: number of total queues is 0 20:59:52 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0) [ 1790.774335][T16350] xt_NFQUEUE: number of total queues is 0 20:59:53 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'gretap0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x837, @link_local}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) 20:59:53 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f00000042c0)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f3814f9f4070009040180020000000000000000000008", 0x1d) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b05090002", 0x17}], 0x1) splice(r0, 0x0, r4, 0x0, 0x422000a7f, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffb4) 20:59:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) 20:59:53 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0) 20:59:53 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'gretap0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x837, @link_local}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) [ 1791.288097][T16369] xt_NFQUEUE: number of total queues is 0 20:59:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 20:59:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) 20:59:53 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0) 20:59:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001000000000000000000074342e37447c8119cb9bfe96d05080000", @ANYRES32, @ANYBLOB="0000ff000a0002005d035beb561454b30004b0ec7e6d7046acdf3d68b0de13d015951b54fba06f2bbbb4cb8b3d93339d55de23d35e4301204896b4ee8a13c047454705c8d09748ad58aa63c31ef4a3ef96ace3a856492c032d701f26bbdd290d1890ea19636c2501812d73c0db5bf56db72fa2dc2d5b4d1600d1dec6d817cd2fe1aad1ad472bfd28b535ac43d3e7ebe3647dd75bc18841c8bb8cb06bfad47f4d3e884024b0cfea684023be8b19032456a0a0e04479f3070069e7cb95b18b62fd3a5a0e3d953715d6bd0100"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1791.490943][T16375] xt_NFQUEUE: number of total queues is 0 20:59:53 executing program 2: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xffffffff, 'gretap0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x837, @link_local}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) 20:59:53 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f00000042c0)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f3814f9f4070009040180020000000000000000000008", 0x1d) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b05090002", 0x17}], 0x1) splice(r0, 0x0, r4, 0x0, 0x422000a7f, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffb4) [ 1791.606767][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1791.619547][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1791.628257][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.629391][T13476] Call Trace: [ 1791.629391][T13476] dump_stack+0x1c9/0x220 [ 1791.629391][T13476] dump_header+0x1e7/0xd00 [ 1791.629391][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1791.629391][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1791.629391][T13476] ? ___ratelimit+0x542/0x720 [ 1791.629391][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1791.629391][T13476] oom_kill_process+0x216/0x580 [ 1791.629391][T13476] out_of_memory+0x181e/0x1cc0 [ 1791.629391][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1791.629391][T13476] alloc_pages_current+0x67d/0x990 [ 1791.629391][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1791.629391][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1791.629391][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1791.629391][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1791.629391][T13476] ion_ioctl+0x79d/0x1fc0 [ 1791.629391][T13476] ? debug_shrink_set+0x220/0x220 [ 1791.629391][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1791.629391][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1791.629391][T13476] do_syscall_64+0xb8/0x160 [ 1791.629391][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1791.629391][T13476] RIP: 0033:0x45ca29 [ 1791.629391][T13476] Code: Bad RIP value. [ 1791.629391][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1791.629391][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1791.629391][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1791.629391][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1791.629391][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1791.629391][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1791.802607][T13476] Mem-Info: [ 1791.806051][T13476] active_anon:131471 inactive_anon:7064 isolated_anon:0 [ 1791.806051][T13476] active_file:1993 inactive_file:3343 isolated_file:0 [ 1791.806051][T13476] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1791.806051][T13476] slab_reclaimable:5931 slab_unreclaimable:40635 [ 1791.806051][T13476] mapped:56576 shmem:13129 pagetables:10553 bounce:0 [ 1791.806051][T13476] free:207630 free_pcp:328 free_cma:0 [ 1791.844331][T13476] Node 0 active_anon:463864kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 354304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.873706][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.902907][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1791.908372][T13476] Node 0 DMA32 free:39592kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:439776kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3292kB pagetables:18416kB bounce:0kB free_pcp:1112kB local_pcp:708kB free_cma:0kB [ 1791.940895][T13476] lowmem_reserve[]: 0 0 228 228 [ 1791.945913][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:200kB local_pcp:192kB free_cma:0kB [ 1791.977565][T13476] lowmem_reserve[]: 0 0 0 0 [ 1791.982173][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1791.994318][T13476] Node 0 DMA32: 962*4kB (UME) 590*8kB (UME) 365*16kB (UME) 240*32kB (UME) 98*64kB (M) 48*128kB (UM) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39624kB [ 1792.011017][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1792.026082][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.035799][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.045258][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.054992][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.064505][T13476] 18480 total pagecache pages [ 1792.069252][T13476] 0 pages in swap cache [ 1792.073456][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.079679][T13476] Free swap = 0kB [ 1792.083460][T13476] Total swap = 0kB [ 1792.087328][T13476] 1965979 pages RAM [ 1792.091168][T13476] 0 pages HighMem/MovableOnly [ 1792.095974][T13476] 1423249 pages reserved [ 1792.100246][T13476] 0 pages cma reserved [ 1792.104464][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=2456,uid=0 [ 1792.119298][T13476] Out of memory: Killed process 2456 (syz-executor.4) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1792.121438][T16388] xt_NFQUEUE: number of total queues is 0 20:59:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') write$tun(r0, 0x0, 0x0) 20:59:54 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) [ 1792.394367][ T24] tipc: TX() has been purged, node left! 20:59:54 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0) 20:59:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 20:59:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') write$tun(r0, 0x0, 0x0) 20:59:55 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, &(0x7f0000d43000)) 20:59:55 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) 20:59:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) 20:59:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b700000040420f00bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000005d040000000000002d400300000000006504000001ed00007b130000000000006c440000000000007a0a00fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61622cfd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d0d0000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa841dbb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 1793.287357][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1793.541253][T16415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:59:55 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r5, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 20:59:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') write$tun(r0, 0x0, 0x0) 20:59:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 20:59:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) [ 1793.824181][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1793.912262][T16420] device bond5 entered promiscuous mode [ 1793.960374][T16456] device bond_slave_0 entered promiscuous mode [ 1793.968034][T16456] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1793.979396][T16456] device macvlan2 entered promiscuous mode [ 1793.985711][T16456] device bond0 entered promiscuous mode [ 1793.991836][T16456] device bond_slave_1 entered promiscuous mode [ 1794.001312][T16456] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 1794.144958][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:59:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') write$tun(r0, 0x0, 0x0) 20:59:56 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, &(0x7f0000d43000)) 20:59:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e000000020006fb0a0002000406da1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) [ 1794.572391][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1794.651715][T16476] bond5: (slave macvlan3): Error -98 calling set_mac_address 20:59:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) 20:59:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000000)=[@decrefs, @acquire_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 1794.952556][T16481] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1794.962296][T16481] veth0_to_bond: FDB only supports static addresses [ 1795.051292][T16485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1795.181083][T16492] binder: 16486:16492 unknown command 0 [ 1795.187157][T16492] binder: 16486:16492 ioctl c0306201 20000280 returned -22 20:59:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r5, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) [ 1795.237690][T16493] binder: 16486:16493 unknown command 0 [ 1795.243844][T16493] binder: 16486:16493 ioctl c0306201 20000240 returned -22 20:59:57 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012002300010076657468", @ANYRES32=0x0], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 20:59:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) [ 1795.485871][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1795.608146][T16495] device bond6 entered promiscuous mode [ 1795.632129][T16497] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1795.643209][T16497] device macvlan3 entered promiscuous mode [ 1795.651848][T16497] bond6: (slave macvlan3): Enslaving as an active interface with an up link 20:59:57 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, &(0x7f0000d43000)) 20:59:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000000)=[@decrefs, @acquire_done={0x400c630e}], 0x0, 0x0, 0x0}) [ 1795.702339][T16500] all: renamed from veth197 [ 1795.883246][T16542] binder: 16540:16542 unknown command 0 [ 1795.889407][T16542] binder: 16540:16542 ioctl c0306201 20000280 returned -22 [ 1795.939048][T16544] binder: 16540:16544 unknown command 0 [ 1795.944930][T16544] binder: 16540:16544 ioctl c0306201 20000240 returned -22 [ 1795.965377][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1796.559209][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1796.572116][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1796.580866][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.581895][T13476] Call Trace: [ 1796.581895][T13476] dump_stack+0x1c9/0x220 [ 1796.581895][T13476] dump_header+0x1e7/0xd00 [ 1796.581895][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1796.581895][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1796.581895][T13476] ? ___ratelimit+0x542/0x720 [ 1796.581895][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1796.581895][T13476] oom_kill_process+0x216/0x580 [ 1796.581895][T13476] out_of_memory+0x181e/0x1cc0 [ 1796.581895][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1796.581895][T13476] alloc_pages_current+0x67d/0x990 [ 1796.581895][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1796.581895][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1796.581895][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1796.581895][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1796.581895][T13476] ion_ioctl+0x79d/0x1fc0 [ 1796.581895][T13476] ? debug_shrink_set+0x220/0x220 [ 1796.581895][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1796.581895][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1796.581895][T13476] do_syscall_64+0xb8/0x160 [ 1796.581895][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1796.581895][T13476] RIP: 0033:0x45ca29 [ 1796.581895][T13476] Code: Bad RIP value. [ 1796.581895][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.581895][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1796.581895][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1796.581895][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1796.581895][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1796.581895][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1796.758121][T13476] Mem-Info: [ 1796.761386][T13476] active_anon:130933 inactive_anon:9257 isolated_anon:0 [ 1796.761386][T13476] active_file:1993 inactive_file:5240 isolated_file:0 [ 1796.761386][T13476] unevictable:0 dirty:57 writeback:0 unstable:0 [ 1796.761386][T13476] slab_reclaimable:5931 slab_unreclaimable:40705 [ 1796.761386][T13476] mapped:57836 shmem:15339 pagetables:10428 bounce:0 [ 1796.761386][T13476] free:203123 free_pcp:359 free_cma:0 [ 1796.800134][T13476] Node 0 active_anon:461700kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 352256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1796.831525][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.864253][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1796.869537][T13476] Node 0 DMA32 free:39488kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:437612kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3276kB pagetables:18308kB bounce:0kB free_pcp:1232kB local_pcp:408kB free_cma:0kB [ 1796.901995][T13476] lowmem_reserve[]: 0 0 228 228 [ 1796.907111][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:204kB local_pcp:8kB free_cma:0kB [ 1796.938992][T13476] lowmem_reserve[]: 0 0 0 0 [ 1796.943749][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1796.955958][T13476] Node 0 DMA32: 962*4kB (UME) 589*8kB (ME) 365*16kB (UME) 239*32kB (UME) 99*64kB (UM) 47*128kB (M) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39520kB [ 1796.972484][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1796.987757][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.997560][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.007159][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.017095][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.026664][T13476] 23750 total pagecache pages [ 1797.031389][T13476] 0 pages in swap cache [ 1797.036093][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1797.042206][T13476] Free swap = 0kB [ 1797.046185][T13476] Total swap = 0kB [ 1797.049950][T13476] 1965979 pages RAM [ 1797.053968][T13476] 0 pages HighMem/MovableOnly [ 1797.058686][T13476] 1423249 pages reserved [ 1797.062952][T13476] 0 pages cma reserved [ 1797.067320][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=1338,uid=0 [ 1797.082528][T13476] Out of memory: Killed process 1338 (syz-executor.3) total-vm:74976kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1797.101503][ T1820] oom_reaper: reaped process 1338 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1797.620667][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1797.637141][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1797.645871][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.646805][T13476] Call Trace: [ 1797.646805][T13476] dump_stack+0x1c9/0x220 [ 1797.646805][T13476] dump_header+0x1e7/0xd00 [ 1797.646805][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1797.646805][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1797.646805][T13476] ? ___ratelimit+0x542/0x720 [ 1797.646805][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1797.646805][T13476] oom_kill_process+0x216/0x580 [ 1797.646805][T13476] out_of_memory+0x181e/0x1cc0 [ 1797.646805][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1797.646805][T13476] alloc_pages_current+0x67d/0x990 [ 1797.646805][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1797.646805][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1797.646805][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1797.646805][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1797.646805][T13476] ion_ioctl+0x79d/0x1fc0 [ 1797.646805][T13476] ? debug_shrink_set+0x220/0x220 [ 1797.743695][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1797.743695][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1797.743695][T13476] do_syscall_64+0xb8/0x160 [ 1797.743695][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1797.743695][T13476] RIP: 0033:0x45ca29 [ 1797.743695][T13476] Code: Bad RIP value. [ 1797.743695][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.743695][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1797.743695][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1797.743695][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1797.803987][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1797.814179][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1797.826235][T13476] Mem-Info: [ 1797.829602][T13476] active_anon:130369 inactive_anon:7077 isolated_anon:0 [ 1797.829602][T13476] active_file:1991 inactive_file:5243 isolated_file:0 [ 1797.829602][T13476] unevictable:0 dirty:62 writeback:0 unstable:0 [ 1797.829602][T13476] slab_reclaimable:5935 slab_unreclaimable:40677 [ 1797.829602][T13476] mapped:57841 shmem:13136 pagetables:10382 bounce:0 [ 1797.829602][T13476] free:205361 free_pcp:348 free_cma:0 [ 1797.868420][T13476] Node 0 active_anon:459536kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 350208kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1797.897546][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.927342][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1797.932649][T13476] Node 0 DMA32 free:39380kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:435448kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3276kB pagetables:18204kB bounce:0kB free_pcp:1188kB local_pcp:824kB free_cma:0kB [ 1797.965760][T13476] lowmem_reserve[]: 0 0 228 228 [ 1797.970743][T13476] Node 0 Normal free:9432kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:204kB local_pcp:196kB free_cma:0kB [ 1798.002392][T13476] lowmem_reserve[]: 0 0 0 0 [ 1798.007077][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1798.019249][T13476] Node 0 DMA32: 961*4kB (ME) 590*8kB (UME) 364*16kB (ME) 236*32kB (UME) 99*64kB (UM) 47*128kB (M) 16*256kB (M) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 39412kB [ 1798.035813][T13476] Node 0 Normal: 794*4kB (UME) 284*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9432kB [ 1798.050945][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.060895][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.070421][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1798.080192][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.091076][T13476] 20401 total pagecache pages [ 1798.095938][T13476] 0 pages in swap cache [ 1798.100179][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1798.106431][T13476] Free swap = 0kB [ 1798.110192][T13476] Total swap = 0kB [ 1798.114104][T13476] 1965979 pages RAM [ 1798.117951][T13476] 0 pages HighMem/MovableOnly [ 1798.122660][T13476] 1423249 pages reserved [ 1798.127098][T13476] 0 pages cma reserved [ 1798.131209][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=31921,uid=0 [ 1798.146222][T13476] Out of memory: Killed process 31921 (syz-executor.4) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1798.170566][ T1820] oom_reaper: reaped process 31921 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1798.473923][ T102] tipc: TX() has been purged, node left! [ 1798.593286][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1798.607804][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1798.617569][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.624422][T13476] Call Trace: [ 1798.624422][T13476] dump_stack+0x1c9/0x220 [ 1798.633898][T13476] dump_header+0x1e7/0xd00 [ 1798.637983][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1798.646316][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1798.646316][T13476] ? ___ratelimit+0x542/0x720 [ 1798.656018][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1798.656018][T13476] oom_kill_process+0x216/0x580 [ 1798.664360][T13476] out_of_memory+0x181e/0x1cc0 [ 1798.664360][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1798.676275][T13476] alloc_pages_current+0x67d/0x990 [ 1798.683769][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1798.684366][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1798.693860][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1798.696158][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1798.704476][T13476] ion_ioctl+0x79d/0x1fc0 [ 1798.704476][T13476] ? debug_shrink_set+0x220/0x220 [ 1798.713959][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1798.716592][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1798.724352][T13476] do_syscall_64+0xb8/0x160 [ 1798.724352][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1798.736016][T13476] RIP: 0033:0x45ca29 [ 1798.736016][T13476] Code: Bad RIP value. [ 1798.743788][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1798.746256][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1798.757854][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1798.764307][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1798.775928][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1798.784339][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1798.794049][T13476] Mem-Info: [ 1798.797328][T13476] active_anon:129816 inactive_anon:7071 isolated_anon:0 [ 1798.797328][T13476] active_file:1992 inactive_file:5246 isolated_file:0 [ 1798.797328][T13476] unevictable:0 dirty:65 writeback:0 unstable:0 [ 1798.797328][T13476] slab_reclaimable:5935 slab_unreclaimable:40669 [ 1798.797328][T13476] mapped:57844 shmem:13136 pagetables:10349 bounce:0 [ 1798.797328][T13476] free:206003 free_pcp:62 free_cma:0 [ 1798.835719][T13476] Node 0 active_anon:457384kB inactive_anon:21552kB active_file:8kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.864835][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.894060][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1798.899353][T13476] Node 0 DMA32 free:39428kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:433296kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3276kB pagetables:18100kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1798.931915][T13476] lowmem_reserve[]: 0 0 228 228 [ 1798.937028][T13476] Node 0 Normal free:9620kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.968483][T13476] lowmem_reserve[]: 0 0 0 0 [ 1798.973078][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1798.985517][T13476] Node 0 DMA32: 1043*4kB (ME) 630*8kB (ME) 368*16kB (UME) 234*32kB (ME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39484kB [ 1799.001855][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1799.017177][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.027015][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.036531][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.046306][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.055805][T13476] 20389 total pagecache pages [ 1799.060528][T13476] 0 pages in swap cache [ 1799.064890][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1799.070991][T13476] Free swap = 0kB [ 1799.074907][T13476] Total swap = 0kB [ 1799.078666][T13476] 1965979 pages RAM [ 1799.082500][T13476] 0 pages HighMem/MovableOnly [ 1799.087371][T13476] 1423249 pages reserved [ 1799.091666][T13476] 0 pages cma reserved [ 1799.095943][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=31658,uid=0 [ 1799.111029][T13476] Out of memory: Killed process 31658 (syz-executor.4) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1799.481697][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1799.495043][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1799.503791][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.504552][T13476] Call Trace: [ 1799.504552][T13476] dump_stack+0x1c9/0x220 [ 1799.504552][T13476] dump_header+0x1e7/0xd00 [ 1799.504552][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1799.504552][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1799.504552][T13476] ? ___ratelimit+0x542/0x720 [ 1799.504552][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1799.504552][T13476] oom_kill_process+0x216/0x580 [ 1799.504552][T13476] out_of_memory+0x181e/0x1cc0 [ 1799.504552][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1799.504552][T13476] alloc_pages_current+0x67d/0x990 [ 1799.504552][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1799.504552][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1799.504552][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1799.504552][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1799.504552][T13476] ion_ioctl+0x79d/0x1fc0 [ 1799.504552][T13476] ? debug_shrink_set+0x220/0x220 [ 1799.504552][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1799.504552][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1799.504552][T13476] do_syscall_64+0xb8/0x160 [ 1799.504552][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1799.504552][T13476] RIP: 0033:0x45ca29 [ 1799.504552][T13476] Code: Bad RIP value. [ 1799.504552][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.504552][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1799.504552][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1799.504552][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1799.504552][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1799.504552][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1799.678571][T13476] Mem-Info: [ 1799.682199][T13476] active_anon:129279 inactive_anon:7064 isolated_anon:0 [ 1799.682199][T13476] active_file:1991 inactive_file:5232 isolated_file:0 [ 1799.682199][T13476] unevictable:0 dirty:74 writeback:0 unstable:0 [ 1799.682199][T13476] slab_reclaimable:5935 slab_unreclaimable:40634 [ 1799.682199][T13476] mapped:57854 shmem:13129 pagetables:10324 bounce:0 [ 1799.682199][T13476] free:206006 free_pcp:192 free_cma:0 [ 1799.720686][T13476] Node 0 active_anon:455236kB inactive_anon:21552kB active_file:4kB inactive_file:360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 348160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1799.749588][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.778807][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1799.784262][T13476] Node 0 DMA32 free:39516kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:431148kB inactive_anon:2324kB active_file:4kB inactive_file:356kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3240kB pagetables:18000kB bounce:0kB free_pcp:768kB local_pcp:248kB free_cma:0kB [ 1799.817751][T13476] lowmem_reserve[]: 0 0 228 228 [ 1799.822783][T13476] Node 0 Normal free:9620kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.855658][T13476] lowmem_reserve[]: 0 0 0 0 [ 1799.860232][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1799.872493][T13476] Node 0 DMA32: 1043*4kB (ME) 630*8kB (ME) 368*16kB (UME) 235*32kB (UME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39516kB [ 1799.889455][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1799.904664][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.914694][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.924363][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.934211][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.943770][T13476] 20393 total pagecache pages [ 1799.948492][T13476] 0 pages in swap cache [ 1799.952698][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1799.959019][T13476] Free swap = 0kB [ 1799.962774][T13476] Total swap = 0kB [ 1799.968458][T13476] 1965979 pages RAM [ 1799.972301][T13476] 0 pages HighMem/MovableOnly [ 1799.977133][T13476] 1423249 pages reserved [ 1799.981498][T13476] 0 pages cma reserved [ 1799.985806][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=21262,uid=0 [ 1800.000826][T13476] Out of memory: Killed process 21262 (syz-executor.1) total-vm:74844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1800.446392][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1800.459372][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1800.468310][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.469122][T13476] Call Trace: [ 1800.469122][T13476] dump_stack+0x1c9/0x220 [ 1800.469122][T13476] dump_header+0x1e7/0xd00 [ 1800.469122][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1800.469122][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1800.469122][T13476] ? ___ratelimit+0x542/0x720 [ 1800.469122][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1800.469122][T13476] oom_kill_process+0x216/0x580 [ 1800.469122][T13476] out_of_memory+0x181e/0x1cc0 [ 1800.469122][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1800.469122][T13476] alloc_pages_current+0x67d/0x990 [ 1800.469122][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1800.469122][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1800.469122][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1800.548528][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1800.553717][T13476] ion_ioctl+0x79d/0x1fc0 [ 1800.553717][T13476] ? debug_shrink_set+0x220/0x220 [ 1800.553717][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1800.553717][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1800.553717][T13476] do_syscall_64+0xb8/0x160 [ 1800.553717][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1800.553717][T13476] RIP: 0033:0x45ca29 [ 1800.553717][T13476] Code: Bad RIP value. [ 1800.553717][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1800.553717][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1800.553717][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1800.553717][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1800.553717][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1800.553717][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1800.644581][T13476] Mem-Info: [ 1800.647868][T13476] active_anon:128747 inactive_anon:7064 isolated_anon:0 [ 1800.647868][T13476] active_file:1991 inactive_file:5257 isolated_file:0 [ 1800.647868][T13476] unevictable:0 dirty:80 writeback:0 unstable:0 [ 1800.647868][T13476] slab_reclaimable:5935 slab_unreclaimable:40633 [ 1800.647868][T13476] mapped:57860 shmem:13129 pagetables:10296 bounce:0 [ 1800.647868][T13476] free:205964 free_pcp:200 free_cma:0 [ 1800.686200][T13476] Node 0 active_anon:453172kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.715727][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.745832][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1800.751102][T13476] Node 0 DMA32 free:39548kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:429084kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3228kB pagetables:17988kB bounce:0kB free_pcp:800kB local_pcp:252kB free_cma:0kB [ 1800.783353][T13476] lowmem_reserve[]: 0 0 228 228 [ 1800.788468][T13476] Node 0 Normal free:9640kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.820284][T13476] lowmem_reserve[]: 0 0 0 0 [ 1800.825072][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1800.838384][T13476] Node 0 DMA32: 1043*4kB (ME) 630*8kB (ME) 368*16kB (UME) 235*32kB (UME) 99*64kB (M) 47*128kB (M) 16*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39580kB [ 1800.855122][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1800.870294][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1800.880446][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1800.890305][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1800.900182][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1800.909764][T13476] 20401 total pagecache pages [ 1800.914724][T13476] 0 pages in swap cache [ 1800.919059][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1800.925652][T13476] Free swap = 0kB [ 1800.929436][T13476] Total swap = 0kB [ 1800.933199][T13476] 1965979 pages RAM [ 1800.937293][T13476] 0 pages HighMem/MovableOnly [ 1800.942045][T13476] 1423249 pages reserved [ 1800.946575][T13476] 0 pages cma reserved [ 1800.950693][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12963,uid=0 [ 1800.966321][T13476] Out of memory: Killed process 12963 (syz-executor.2) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1800.989143][ T1820] oom_reaper: reaped process 12963 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1801.366223][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1801.378999][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1801.388089][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.388868][T13476] Call Trace: [ 1801.388868][T13476] dump_stack+0x1c9/0x220 [ 1801.388868][T13476] dump_header+0x1e7/0xd00 [ 1801.388868][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1801.388868][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1801.388868][T13476] ? ___ratelimit+0x542/0x720 [ 1801.388868][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1801.388868][T13476] oom_kill_process+0x216/0x580 [ 1801.388868][T13476] out_of_memory+0x181e/0x1cc0 [ 1801.388868][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1801.388868][T13476] alloc_pages_current+0x67d/0x990 [ 1801.388868][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1801.388868][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1801.388868][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1801.388868][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1801.388868][T13476] ion_ioctl+0x79d/0x1fc0 [ 1801.388868][T13476] ? debug_shrink_set+0x220/0x220 [ 1801.388868][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1801.388868][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1801.388868][T13476] do_syscall_64+0xb8/0x160 [ 1801.388868][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1801.388868][T13476] RIP: 0033:0x45ca29 [ 1801.388868][T13476] Code: Bad RIP value. [ 1801.388868][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1801.388868][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1801.388868][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1801.388868][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1801.388868][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1801.388868][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1801.563936][T13476] Mem-Info: [ 1801.567291][T13476] active_anon:128198 inactive_anon:7064 isolated_anon:0 [ 1801.567291][T13476] active_file:1991 inactive_file:5257 isolated_file:0 [ 1801.567291][T13476] unevictable:0 dirty:86 writeback:0 unstable:0 [ 1801.567291][T13476] slab_reclaimable:5935 slab_unreclaimable:40589 [ 1801.567291][T13476] mapped:57865 shmem:13129 pagetables:10270 bounce:0 [ 1801.567291][T13476] free:205953 free_pcp:250 free_cma:0 [ 1801.605861][T13476] Node 0 active_anon:451012kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 344064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1801.634789][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1801.664635][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1801.669921][T13476] Node 0 DMA32 free:39504kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:426924kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3228kB pagetables:17888kB bounce:0kB free_pcp:992kB local_pcp:380kB free_cma:0kB [ 1801.702372][T13476] lowmem_reserve[]: 0 0 228 228 [ 1801.707468][T13476] Node 0 Normal free:9640kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1801.738770][T13476] lowmem_reserve[]: 0 0 0 0 [ 1801.743367][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1801.755687][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 369*16kB (UME) 234*32kB (ME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39504kB [ 1801.772161][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1801.787306][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.797045][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.806605][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.816394][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.825916][T13476] 20401 total pagecache pages [ 1801.830737][T13476] 0 pages in swap cache [ 1801.835162][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1801.841562][T13476] Free swap = 0kB [ 1801.845566][T13476] Total swap = 0kB [ 1801.849370][T13476] 1965979 pages RAM [ 1801.853210][T13476] 0 pages HighMem/MovableOnly [ 1801.858144][T13476] 1423249 pages reserved [ 1801.864190][T13476] 0 pages cma reserved [ 1801.868318][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=13101,uid=0 [ 1801.883553][T13476] Out of memory: Killed process 13101 (syz-executor.5) total-vm:74976kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 21:00:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 21:00:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 21:00:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000000)=[@decrefs, @acquire_done={0x400c630e}], 0x0, 0x0, 0x0}) 21:00:04 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r5, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 21:00:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@dev}, 0x20) 21:00:04 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) timer_create(0x3, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 1802.309389][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1802.360089][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1802.373431][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1802.382185][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.382745][T13476] Call Trace: [ 1802.382745][T13476] dump_stack+0x1c9/0x220 [ 1802.382745][T13476] dump_header+0x1e7/0xd00 [ 1802.382745][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1802.382745][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1802.382745][T13476] ? ___ratelimit+0x542/0x720 [ 1802.382745][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1802.382745][T13476] oom_kill_process+0x216/0x580 [ 1802.382745][T13476] out_of_memory+0x181e/0x1cc0 [ 1802.382745][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1802.382745][T13476] alloc_pages_current+0x67d/0x990 [ 1802.382745][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1802.382745][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1802.382745][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1802.382745][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1802.382745][T13476] ion_ioctl+0x79d/0x1fc0 [ 1802.382745][T13476] ? debug_shrink_set+0x220/0x220 [ 1802.382745][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1802.382745][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1802.382745][T13476] do_syscall_64+0xb8/0x160 [ 1802.382745][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1802.382745][T13476] RIP: 0033:0x45ca29 [ 1802.382745][T13476] Code: Bad RIP value. [ 1802.382745][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1802.382745][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1802.382745][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1802.382745][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1802.382745][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1802.382745][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1802.559285][T13476] Mem-Info: [ 1802.562543][T13476] active_anon:127755 inactive_anon:7183 isolated_anon:0 [ 1802.562543][T13476] active_file:1991 inactive_file:5269 isolated_file:0 [ 1802.562543][T13476] unevictable:0 dirty:93 writeback:0 unstable:0 [ 1802.562543][T13476] slab_reclaimable:5934 slab_unreclaimable:40584 [ 1802.562543][T13476] mapped:57871 shmem:13248 pagetables:10392 bounce:0 [ 1802.562543][T13476] free:205553 free_pcp:250 free_cma:0 [ 1802.593154][T16562] device bond7 entered promiscuous mode [ 1802.600900][T13476] Node 0 active_anon:448832kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 339968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1802.635569][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1802.664996][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1802.670444][T13476] Node 0 DMA32 free:39536kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:424744kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3212kB pagetables:17776kB bounce:0kB free_pcp:992kB local_pcp:344kB free_cma:0kB [ 1802.702465][T13476] lowmem_reserve[]: 0 0 228 228 21:00:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) [ 1802.707533][T13476] Node 0 Normal free:9640kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1802.739032][T13476] lowmem_reserve[]: 0 0 0 0 [ 1802.744075][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1802.756127][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 367*16kB (ME) 234*32kB (ME) 99*64kB (M) 47*128kB (M) 16*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39536kB [ 1802.772498][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1802.787837][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1802.797571][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1802.807162][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1802.817787][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1802.828014][T13476] 20867 total pagecache pages [ 1802.832766][T13476] 0 pages in swap cache [ 1802.837182][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1802.843309][T13476] Free swap = 0kB [ 1802.847187][T13476] Total swap = 0kB [ 1802.851045][T13476] 1965979 pages RAM [ 1802.854968][T13476] 0 pages HighMem/MovableOnly [ 1802.859721][T13476] 1423249 pages reserved [ 1802.864080][T13476] 0 pages cma reserved [ 1802.868190][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=3078,uid=0 [ 1802.883156][T13476] Out of memory: Killed process 3078 (syz-executor.3) total-vm:74844kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 21:00:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@dev}, 0x20) [ 1802.902086][ T1820] oom_reaper: reaped process 3078 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1802.938321][T16560] binder: BINDER_SET_CONTEXT_MGR already set [ 1802.944744][T16560] binder: 16556:16560 ioctl 40046207 0 returned -16 [ 1802.974950][T16560] binder: 16556:16560 unknown command 0 [ 1802.980785][T16560] binder: 16556:16560 ioctl c0306201 20000280 returned -22 [ 1803.048721][T16603] binder: 16556:16603 unknown command 0 [ 1803.054824][T16603] binder: 16556:16603 ioctl c0306201 20000240 returned -22 21:00:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000000)=[@decrefs, @acquire_done={0x400c630e}], 0x0, 0x0, 0x0}) 21:00:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 21:00:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) [ 1803.300186][T16608] binder: 16607:16608 unknown command 0 [ 1803.306177][T16608] binder: 16607:16608 ioctl c0306201 20000280 returned -22 [ 1803.316970][T16608] binder: 16607:16608 unknown command 0 [ 1803.322730][T16608] binder: 16607:16608 ioctl c0306201 20000240 returned -22 21:00:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@dev}, 0x20) [ 1803.411193][T16569] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1803.422464][T16569] device macvlan4 entered promiscuous mode [ 1803.430958][T16569] bond7: (slave macvlan4): Enslaving as an active interface with an up link [ 1804.193324][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1804.206086][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1804.214818][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.215938][T13476] Call Trace: [ 1804.215938][T13476] dump_stack+0x1c9/0x220 [ 1804.215938][T13476] dump_header+0x1e7/0xd00 [ 1804.215938][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1804.215938][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1804.215938][T13476] ? ___ratelimit+0x542/0x720 [ 1804.215938][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1804.215938][T13476] oom_kill_process+0x216/0x580 [ 1804.215938][T13476] out_of_memory+0x181e/0x1cc0 [ 1804.215938][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1804.215938][T13476] alloc_pages_current+0x67d/0x990 [ 1804.215938][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1804.284209][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1804.284209][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1804.284209][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1804.284209][T13476] ion_ioctl+0x79d/0x1fc0 [ 1804.284209][T13476] ? debug_shrink_set+0x220/0x220 [ 1804.284209][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1804.284209][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1804.284209][T13476] do_syscall_64+0xb8/0x160 [ 1804.284209][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1804.284209][T13476] RIP: 0033:0x45ca29 [ 1804.284209][T13476] Code: Bad RIP value. [ 1804.284209][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.284209][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1804.284209][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1804.284209][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1804.284209][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1804.284209][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1804.391586][T13476] Mem-Info: [ 1804.394991][T13476] active_anon:127116 inactive_anon:7064 isolated_anon:0 [ 1804.394991][T13476] active_file:1993 inactive_file:5281 isolated_file:0 [ 1804.394991][T13476] unevictable:0 dirty:101 writeback:0 unstable:0 [ 1804.394991][T13476] slab_reclaimable:5932 slab_unreclaimable:40591 [ 1804.394991][T13476] mapped:57877 shmem:13129 pagetables:10215 bounce:0 [ 1804.394991][T13476] free:205514 free_pcp:280 free_cma:0 [ 1804.433391][T13476] Node 0 active_anon:446680kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 337920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1804.463741][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.492920][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1804.498406][T13476] Node 0 DMA32 free:39348kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:422592kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3180kB pagetables:17668kB bounce:0kB free_pcp:1112kB local_pcp:332kB free_cma:0kB [ 1804.530543][T13476] lowmem_reserve[]: 0 0 228 228 [ 1804.535644][T13476] Node 0 Normal free:9640kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:24088kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4256kB pagetables:8640kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1804.566979][T13476] lowmem_reserve[]: 0 0 0 0 [ 1804.571564][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1804.583649][T13476] Node 0 DMA32: 1043*4kB (ME) 631*8kB (UME) 367*16kB (ME) 234*32kB (ME) 100*64kB (UM) 47*128kB (M) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39348kB [ 1804.599951][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1804.615800][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.625595][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.635454][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.648020][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.657489][T13476] 20415 total pagecache pages [ 1804.662213][T13476] 0 pages in swap cache [ 1804.666586][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1804.672781][T13476] Free swap = 0kB [ 1804.676738][T13476] Total swap = 0kB [ 1804.680766][T13476] 1965979 pages RAM [ 1804.684780][T13476] 0 pages HighMem/MovableOnly [ 1804.689618][T13476] 1423249 pages reserved [ 1804.694076][T13476] 0 pages cma reserved [ 1804.698218][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=15027,uid=0 [ 1804.713203][T13476] Out of memory: Killed process 15027 (syz-executor.0) total-vm:74976kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1804.734510][ T1820] oom_reaper: reaped process 15027 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1805.190491][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1805.203389][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1805.212212][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.213068][T13476] Call Trace: [ 1805.213068][T13476] dump_stack+0x1c9/0x220 [ 1805.213068][T13476] dump_header+0x1e7/0xd00 [ 1805.213068][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1805.213068][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1805.213068][T13476] ? ___ratelimit+0x542/0x720 [ 1805.213068][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1805.213068][T13476] oom_kill_process+0x216/0x580 [ 1805.213068][T13476] out_of_memory+0x181e/0x1cc0 [ 1805.213068][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1805.213068][T13476] alloc_pages_current+0x67d/0x990 [ 1805.213068][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1805.213068][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1805.213068][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1805.213068][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1805.213068][T13476] ion_ioctl+0x79d/0x1fc0 [ 1805.213068][T13476] ? debug_shrink_set+0x220/0x220 [ 1805.213068][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1805.213068][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1805.213068][T13476] do_syscall_64+0xb8/0x160 [ 1805.213068][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1805.213068][T13476] RIP: 0033:0x45ca29 [ 1805.213068][T13476] Code: Bad RIP value. [ 1805.213068][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.213068][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1805.213068][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1805.213068][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1805.213068][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1805.213068][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1805.387428][T13476] Mem-Info: [ 1805.390706][T13476] active_anon:126570 inactive_anon:7064 isolated_anon:0 [ 1805.390706][T13476] active_file:1991 inactive_file:5287 isolated_file:0 [ 1805.390706][T13476] unevictable:0 dirty:107 writeback:0 unstable:0 [ 1805.390706][T13476] slab_reclaimable:5932 slab_unreclaimable:40591 [ 1805.390706][T13476] mapped:57882 shmem:13129 pagetables:10188 bounce:0 [ 1805.390706][T13476] free:205514 free_pcp:352 free_cma:0 [ 1805.429419][T13476] Node 0 active_anon:444492kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.458596][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.489984][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1805.495434][T13476] Node 0 DMA32 free:39380kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:420512kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3180kB pagetables:17668kB bounce:0kB free_pcp:1144kB local_pcp:332kB free_cma:0kB [ 1805.528016][T13476] lowmem_reserve[]: 0 0 228 228 [ 1805.532950][T13476] Node 0 Normal free:9640kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23980kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4240kB pagetables:8532kB bounce:0kB free_pcp:264kB local_pcp:152kB free_cma:0kB [ 1805.564900][T13476] lowmem_reserve[]: 0 0 0 0 [ 1805.569486][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1805.581688][T13476] Node 0 DMA32: 1043*4kB (ME) 631*8kB (UME) 367*16kB (ME) 235*32kB (UME) 100*64kB (UM) 47*128kB (M) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39380kB [ 1805.598083][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1805.613659][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1805.623402][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1805.632991][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1805.642812][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1805.652332][T13476] 20421 total pagecache pages [ 1805.657234][T13476] 0 pages in swap cache [ 1805.661447][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1805.667730][T13476] Free swap = 0kB [ 1805.671490][T13476] Total swap = 0kB [ 1805.675428][T13476] 1965979 pages RAM [ 1805.679274][T13476] 0 pages HighMem/MovableOnly [ 1805.684151][T13476] 1423249 pages reserved [ 1805.688433][T13476] 0 pages cma reserved [ 1805.692558][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=14926,uid=0 [ 1805.707709][T13476] Out of memory: Killed process 14926 (syz-executor.2) total-vm:74844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1805.726334][ T1820] oom_reaper: reaped process 14926 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1806.108790][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1806.121704][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1806.130432][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.131398][T13476] Call Trace: [ 1806.131398][T13476] dump_stack+0x1c9/0x220 [ 1806.131398][T13476] dump_header+0x1e7/0xd00 [ 1806.131398][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1806.131398][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1806.163869][T13476] ? ___ratelimit+0x542/0x720 [ 1806.163869][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1806.163869][T13476] oom_kill_process+0x216/0x580 [ 1806.163869][T13476] out_of_memory+0x181e/0x1cc0 [ 1806.183786][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1806.183786][T13476] alloc_pages_current+0x67d/0x990 [ 1806.183786][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1806.183786][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1806.183786][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1806.183786][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1806.183786][T13476] ion_ioctl+0x79d/0x1fc0 [ 1806.183786][T13476] ? debug_shrink_set+0x220/0x220 [ 1806.183786][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1806.183786][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1806.183786][T13476] do_syscall_64+0xb8/0x160 [ 1806.183786][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1806.183786][T13476] RIP: 0033:0x45ca29 [ 1806.183786][T13476] Code: Bad RIP value. [ 1806.183786][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1806.183786][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1806.183786][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1806.183786][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1806.183786][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1806.183786][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1806.307904][T13476] Mem-Info: [ 1806.311188][T13476] active_anon:126029 inactive_anon:7064 isolated_anon:0 [ 1806.311188][T13476] active_file:1993 inactive_file:5293 isolated_file:0 [ 1806.311188][T13476] unevictable:0 dirty:113 writeback:0 unstable:0 [ 1806.311188][T13476] slab_reclaimable:5932 slab_unreclaimable:40590 [ 1806.311188][T13476] mapped:57892 shmem:13129 pagetables:10162 bounce:0 [ 1806.311188][T13476] free:205530 free_pcp:418 free_cma:0 [ 1806.349526][T13476] Node 0 active_anon:442328kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 333824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1806.378984][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1806.408315][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1806.413759][T13476] Node 0 DMA32 free:39412kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:418464kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3180kB pagetables:17668kB bounce:0kB free_pcp:1144kB local_pcp:332kB free_cma:0kB [ 1806.446120][T13476] lowmem_reserve[]: 0 0 228 228 [ 1806.451062][T13476] Node 0 Normal free:9640kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23864kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4224kB pagetables:8428kB bounce:0kB free_pcp:528kB local_pcp:296kB free_cma:0kB [ 1806.482733][T13476] lowmem_reserve[]: 0 0 0 0 [ 1806.487559][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1806.499649][T13476] Node 0 DMA32: 1043*4kB (ME) 631*8kB (UME) 367*16kB (ME) 234*32kB (ME) 99*64kB (M) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39412kB [ 1806.515973][T13476] Node 0 Normal: 832*4kB (UME) 291*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9640kB [ 1806.531108][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.541483][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.550991][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.560756][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.570266][T13476] 20427 total pagecache pages [ 1806.575243][T13476] 0 pages in swap cache [ 1806.579452][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1806.585794][T13476] Free swap = 0kB [ 1806.589900][T13476] Total swap = 0kB [ 1806.593798][T13476] 1965979 pages RAM [ 1806.597671][T13476] 0 pages HighMem/MovableOnly [ 1806.602552][T13476] 1423249 pages reserved [ 1806.607072][T13476] 0 pages cma reserved [ 1806.611276][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=14320,uid=0 [ 1806.626289][T13476] Out of memory: Killed process 14320 (syz-executor.5) total-vm:74976kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1806.644786][ T1820] oom_reaper: reaped process 14320 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1807.015010][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1807.027746][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1807.036424][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.037638][T13476] Call Trace: [ 1807.037638][T13476] dump_stack+0x1c9/0x220 [ 1807.037638][T13476] dump_header+0x1e7/0xd00 [ 1807.037638][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1807.037638][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1807.037638][T13476] ? ___ratelimit+0x542/0x720 [ 1807.037638][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1807.037638][T13476] oom_kill_process+0x216/0x580 [ 1807.037638][T13476] out_of_memory+0x181e/0x1cc0 [ 1807.037638][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1807.037638][T13476] alloc_pages_current+0x67d/0x990 [ 1807.037638][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1807.037638][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1807.037638][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1807.037638][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1807.037638][T13476] ion_ioctl+0x79d/0x1fc0 [ 1807.037638][T13476] ? debug_shrink_set+0x220/0x220 [ 1807.037638][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1807.037638][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1807.037638][T13476] do_syscall_64+0xb8/0x160 [ 1807.037638][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1807.037638][T13476] RIP: 0033:0x45ca29 [ 1807.037638][T13476] Code: Bad RIP value. [ 1807.037638][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.037638][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1807.037638][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1807.037638][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1807.037638][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1807.037638][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1807.211811][T13476] Mem-Info: [ 1807.215204][T13476] active_anon:125485 inactive_anon:7064 isolated_anon:0 [ 1807.215204][T13476] active_file:1993 inactive_file:5299 isolated_file:0 [ 1807.215204][T13476] unevictable:0 dirty:119 writeback:0 unstable:0 [ 1807.215204][T13476] slab_reclaimable:5932 slab_unreclaimable:40590 [ 1807.215204][T13476] mapped:57900 shmem:13129 pagetables:10136 bounce:0 [ 1807.215204][T13476] free:205529 free_pcp:376 free_cma:0 [ 1807.253784][T13476] Node 0 active_anon:440152kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 331776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1807.282837][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1807.312080][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1807.317522][T13476] Node 0 DMA32 free:39444kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:416416kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3180kB pagetables:17668kB bounce:0kB free_pcp:1144kB local_pcp:332kB free_cma:0kB [ 1807.350080][T13476] lowmem_reserve[]: 0 0 228 228 [ 1807.355183][T13476] Node 0 Normal free:9700kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23736kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4208kB pagetables:8324kB bounce:0kB free_pcp:360kB local_pcp:56kB free_cma:0kB [ 1807.388037][T13476] lowmem_reserve[]: 0 0 0 0 [ 1807.392627][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1807.404722][T13476] Node 0 DMA32: 1043*4kB (ME) 631*8kB (UME) 367*16kB (ME) 236*32kB (UME) 99*64kB (M) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39476kB [ 1807.420958][T13476] Node 0 Normal: 831*4kB (UME) 299*8kB (UME) 91*16kB (UME) 45*32kB (UM) 17*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9700kB [ 1807.436707][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1807.446548][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.456047][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1807.465795][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1807.475371][T13476] 20433 total pagecache pages [ 1807.480083][T13476] 0 pages in swap cache [ 1807.484525][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1807.490635][T13476] Free swap = 0kB [ 1807.494537][T13476] Total swap = 0kB [ 1807.498394][T13476] 1965979 pages RAM [ 1807.502235][T13476] 0 pages HighMem/MovableOnly [ 1807.507105][T13476] 1423249 pages reserved [ 1807.511385][T13476] 0 pages cma reserved [ 1807.515652][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=14148,uid=0 [ 1807.530639][T13476] Out of memory: Killed process 14148 (syz-executor.5) total-vm:74976kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1807.552437][ T1820] oom_reaper: reaped process 14148 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1807.888715][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1807.901528][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1807.910214][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.911396][T13476] Call Trace: [ 1807.911396][T13476] dump_stack+0x1c9/0x220 [ 1807.911396][T13476] dump_header+0x1e7/0xd00 [ 1807.911396][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1807.911396][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1807.911396][T13476] ? ___ratelimit+0x542/0x720 [ 1807.911396][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1807.911396][T13476] oom_kill_process+0x216/0x580 [ 1807.911396][T13476] out_of_memory+0x181e/0x1cc0 [ 1807.911396][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1807.911396][T13476] alloc_pages_current+0x67d/0x990 [ 1807.911396][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1807.911396][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1807.911396][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1807.911396][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1807.911396][T13476] ion_ioctl+0x79d/0x1fc0 [ 1807.911396][T13476] ? debug_shrink_set+0x220/0x220 [ 1807.911396][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1807.911396][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1807.911396][T13476] do_syscall_64+0xb8/0x160 [ 1807.911396][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1807.911396][T13476] RIP: 0033:0x45ca29 [ 1807.911396][T13476] Code: Bad RIP value. [ 1807.911396][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.911396][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1807.911396][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1807.911396][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1807.911396][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1807.911396][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1808.083474][T13476] Mem-Info: [ 1808.086916][T13476] active_anon:124943 inactive_anon:7064 isolated_anon:0 [ 1808.086916][T13476] active_file:1992 inactive_file:5305 isolated_file:0 [ 1808.086916][T13476] unevictable:0 dirty:125 writeback:0 unstable:0 [ 1808.086916][T13476] slab_reclaimable:5932 slab_unreclaimable:40589 [ 1808.086916][T13476] mapped:57905 shmem:13129 pagetables:10110 bounce:0 [ 1808.086916][T13476] free:205602 free_pcp:296 free_cma:0 [ 1808.125489][T13476] Node 0 active_anon:437984kB inactive_anon:21552kB active_file:8kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 329728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1808.154418][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1808.184686][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1808.189966][T13476] Node 0 DMA32 free:39480kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:414368kB inactive_anon:2324kB active_file:4kB inactive_file:408kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3180kB pagetables:17668kB bounce:0kB free_pcp:868kB local_pcp:536kB free_cma:0kB [ 1808.222179][T13476] lowmem_reserve[]: 0 0 228 228 [ 1808.228212][T13476] Node 0 Normal free:9672kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8220kB bounce:0kB free_pcp:316kB local_pcp:260kB free_cma:0kB [ 1808.260068][T13476] lowmem_reserve[]: 0 0 0 0 [ 1808.264827][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1808.277006][T13476] Node 0 DMA32: 1044*4kB (UME) 631*8kB (UME) 367*16kB (ME) 234*32kB (ME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39480kB [ 1808.295466][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 93*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9672kB [ 1808.310610][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.320690][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.330411][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.340502][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.350028][T13476] 20439 total pagecache pages [ 1808.354905][T13476] 0 pages in swap cache [ 1808.359370][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1808.365820][T13476] Free swap = 0kB [ 1808.369569][T13476] Total swap = 0kB [ 1808.373325][T13476] 1965979 pages RAM [ 1808.377356][T13476] 0 pages HighMem/MovableOnly [ 1808.382068][T13476] 1423249 pages reserved [ 1808.386523][T13476] 0 pages cma reserved [ 1808.390637][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=13000,uid=0 [ 1808.405670][T13476] Out of memory: Killed process 13000 (syz-executor.4) total-vm:74976kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1808.735842][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1808.748766][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1808.757915][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1808.758584][T13476] Call Trace: [ 1808.758584][T13476] dump_stack+0x1c9/0x220 [ 1808.758584][T13476] dump_header+0x1e7/0xd00 [ 1808.758584][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1808.758584][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1808.758584][T13476] ? ___ratelimit+0x542/0x720 [ 1808.758584][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1808.758584][T13476] oom_kill_process+0x216/0x580 [ 1808.758584][T13476] out_of_memory+0x181e/0x1cc0 [ 1808.758584][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1808.758584][T13476] alloc_pages_current+0x67d/0x990 [ 1808.758584][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1808.758584][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1808.758584][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1808.758584][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1808.758584][T13476] ion_ioctl+0x79d/0x1fc0 [ 1808.758584][T13476] ? debug_shrink_set+0x220/0x220 [ 1808.758584][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1808.758584][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1808.758584][T13476] do_syscall_64+0xb8/0x160 [ 1808.758584][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1808.758584][T13476] RIP: 0033:0x45ca29 [ 1808.758584][T13476] Code: Bad RIP value. [ 1808.758584][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.758584][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1808.758584][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1808.758584][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1808.758584][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1808.758584][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1808.935693][T13476] Mem-Info: [ 1808.938968][T13476] active_anon:124402 inactive_anon:7064 isolated_anon:0 [ 1808.938968][T13476] active_file:1992 inactive_file:5305 isolated_file:0 [ 1808.938968][T13476] unevictable:0 dirty:125 writeback:0 unstable:0 [ 1808.938968][T13476] slab_reclaimable:5932 slab_unreclaimable:40589 [ 1808.938968][T13476] mapped:57905 shmem:13129 pagetables:10085 bounce:0 [ 1808.938968][T13476] free:205610 free_pcp:369 free_cma:0 [ 1808.977576][T13476] Node 0 active_anon:435804kB inactive_anon:21552kB active_file:16kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 327680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1809.006615][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.035927][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1809.041214][T13476] Node 0 DMA32 free:39544kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:412188kB inactive_anon:2324kB active_file:8kB inactive_file:408kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3164kB pagetables:17556kB bounce:0kB free_pcp:1160kB local_pcp:536kB free_cma:0kB [ 1809.073600][T13476] lowmem_reserve[]: 0 0 228 228 [ 1809.078525][T13476] Node 0 Normal free:9672kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8220kB bounce:0kB free_pcp:316kB local_pcp:260kB free_cma:0kB [ 1809.111360][T13476] lowmem_reserve[]: 0 0 0 0 [ 1809.116119][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1809.128355][T13476] Node 0 DMA32: 1044*4kB (UME) 631*8kB (UME) 367*16kB (ME) 236*32kB (UME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39544kB [ 1809.144958][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 93*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9672kB [ 1809.160146][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.169993][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.179716][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.189550][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.199258][T13476] 20448 total pagecache pages [ 1809.204182][T13476] 0 pages in swap cache [ 1809.208384][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1809.214669][T13476] Free swap = 0kB [ 1809.218419][T13476] Total swap = 0kB [ 1809.222170][T13476] 1965979 pages RAM [ 1809.226307][T13476] 0 pages HighMem/MovableOnly [ 1809.231021][T13476] 1423249 pages reserved [ 1809.235726][T13476] 0 pages cma reserved [ 1809.239835][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=12995,uid=0 [ 1809.254936][T13476] Out of memory: Killed process 12995 (syz-executor.3) total-vm:74976kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1809.272822][ T1820] oom_reaper: reaped process 12995 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1809.598924][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1809.611764][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1809.620578][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.621533][T13476] Call Trace: [ 1809.621533][T13476] dump_stack+0x1c9/0x220 [ 1809.621533][T13476] dump_header+0x1e7/0xd00 [ 1809.621533][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1809.621533][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1809.621533][T13476] ? ___ratelimit+0x542/0x720 [ 1809.621533][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1809.621533][T13476] oom_kill_process+0x216/0x580 [ 1809.621533][T13476] out_of_memory+0x181e/0x1cc0 [ 1809.621533][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1809.621533][T13476] alloc_pages_current+0x67d/0x990 [ 1809.621533][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1809.621533][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1809.621533][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1809.621533][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1809.621533][T13476] ion_ioctl+0x79d/0x1fc0 [ 1809.621533][T13476] ? debug_shrink_set+0x220/0x220 [ 1809.621533][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1809.621533][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1809.621533][T13476] do_syscall_64+0xb8/0x160 [ 1809.621533][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1809.621533][T13476] RIP: 0033:0x45ca29 [ 1809.621533][T13476] Code: Bad RIP value. [ 1809.621533][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.621533][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1809.621533][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1809.621533][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1809.621533][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1809.621533][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1809.796016][T13476] Mem-Info: [ 1809.799318][T13476] active_anon:123861 inactive_anon:7064 isolated_anon:0 [ 1809.799318][T13476] active_file:1993 inactive_file:5300 isolated_file:0 [ 1809.799318][T13476] unevictable:0 dirty:134 writeback:0 unstable:0 [ 1809.799318][T13476] slab_reclaimable:5932 slab_unreclaimable:40589 [ 1809.799318][T13476] mapped:57909 shmem:13129 pagetables:10057 bounce:0 [ 1809.799318][T13476] free:205618 free_pcp:437 free_cma:0 [ 1809.839460][T13476] Node 0 active_anon:433656kB inactive_anon:21552kB active_file:12kB inactive_file:360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 327680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1809.869889][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.899325][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1809.904745][T13476] Node 0 DMA32 free:39576kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:410040kB inactive_anon:2324kB active_file:8kB inactive_file:356kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3164kB pagetables:17456kB bounce:0kB free_pcp:1432kB local_pcp:684kB free_cma:0kB [ 1809.937006][T13476] lowmem_reserve[]: 0 0 228 228 [ 1809.941947][T13476] Node 0 Normal free:9672kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8220kB bounce:0kB free_pcp:316kB local_pcp:260kB free_cma:0kB [ 1809.974309][T13476] lowmem_reserve[]: 0 0 0 0 [ 1809.978897][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1809.991103][T13476] Node 0 DMA32: 1044*4kB (UME) 631*8kB (UME) 367*16kB (ME) 236*32kB (UME) 99*64kB (M) 47*128kB (M) 16*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39608kB [ 1810.007721][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 93*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9672kB [ 1810.022950][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.032816][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.042433][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.052288][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.061822][T13476] 20454 total pagecache pages [ 1810.066754][T13476] 0 pages in swap cache [ 1810.071410][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1810.077711][T13476] Free swap = 0kB [ 1810.081467][T13476] Total swap = 0kB [ 1810.085434][T13476] 1965979 pages RAM [ 1810.089269][T13476] 0 pages HighMem/MovableOnly [ 1810.094207][T13476] 1423249 pages reserved [ 1810.098484][T13476] 0 pages cma reserved [ 1810.102600][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=12979,uid=0 [ 1810.117684][T13476] Out of memory: Killed process 12979 (syz-executor.3) total-vm:74976kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1810.140847][ T1820] oom_reaper: reaped process 12979 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1810.547534][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1810.560456][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1810.569171][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.570325][T13476] Call Trace: [ 1810.570325][T13476] dump_stack+0x1c9/0x220 [ 1810.570325][T13476] dump_header+0x1e7/0xd00 [ 1810.570325][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1810.570325][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1810.570325][T13476] ? ___ratelimit+0x542/0x720 [ 1810.570325][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1810.570325][T13476] oom_kill_process+0x216/0x580 [ 1810.570325][T13476] out_of_memory+0x181e/0x1cc0 [ 1810.570325][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1810.570325][T13476] alloc_pages_current+0x67d/0x990 [ 1810.570325][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1810.570325][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1810.570325][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1810.570325][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1810.570325][T13476] ion_ioctl+0x79d/0x1fc0 [ 1810.570325][T13476] ? debug_shrink_set+0x220/0x220 [ 1810.570325][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1810.570325][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1810.570325][T13476] do_syscall_64+0xb8/0x160 [ 1810.570325][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1810.570325][T13476] RIP: 0033:0x45ca29 [ 1810.570325][T13476] Code: Bad RIP value. [ 1810.570325][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.570325][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1810.570325][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1810.570325][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.570325][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1810.570325][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1810.746085][T13476] Mem-Info: [ 1810.749342][T13476] active_anon:123316 inactive_anon:7064 isolated_anon:0 [ 1810.749342][T13476] active_file:1993 inactive_file:5317 isolated_file:0 [ 1810.749342][T13476] unevictable:0 dirty:140 writeback:0 unstable:0 [ 1810.749342][T13476] slab_reclaimable:5932 slab_unreclaimable:40589 [ 1810.749342][T13476] mapped:57916 shmem:13129 pagetables:10030 bounce:0 [ 1810.749342][T13476] free:205587 free_pcp:473 free_cma:0 [ 1810.788251][T13476] Node 0 active_anon:431476kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 325632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1810.817291][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.846699][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1810.852063][T13476] Node 0 DMA32 free:39420kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:407860kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3164kB pagetables:17348kB bounce:0kB free_pcp:1572kB local_pcp:536kB free_cma:0kB [ 1810.884490][T13476] lowmem_reserve[]: 0 0 228 228 [ 1810.889431][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8216kB bounce:0kB free_pcp:320kB local_pcp:260kB free_cma:0kB [ 1810.921441][T13476] lowmem_reserve[]: 0 0 0 0 [ 1810.926375][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1810.938674][T13476] Node 0 DMA32: 1043*4kB (ME) 630*8kB (ME) 368*16kB (UME) 237*32kB (UME) 100*64kB (UM) 47*128kB (M) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39452kB [ 1810.958332][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1810.974323][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1810.984128][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1810.993482][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.003426][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.012885][T13476] 20460 total pagecache pages [ 1811.017812][T13476] 0 pages in swap cache [ 1811.022041][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.028346][T13476] Free swap = 0kB [ 1811.032097][T13476] Total swap = 0kB [ 1811.036058][T13476] 1965979 pages RAM [ 1811.039905][T13476] 0 pages HighMem/MovableOnly [ 1811.044821][T13476] 1423249 pages reserved [ 1811.049104][T13476] 0 pages cma reserved [ 1811.053209][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=12909,uid=0 [ 1811.068926][T13476] Out of memory: Killed process 12909 (syz-executor.1) total-vm:74844kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1811.087934][ T1820] oom_reaper: reaped process 12909 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 21:00:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 21:00:13 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r5, @ANYBLOB="00050000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 21:00:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) 21:00:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@dev}, 0x20) 21:00:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) [ 1811.262060][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) 21:00:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) [ 1811.347550][T16626] device bond8 entered promiscuous mode [ 1811.406716][T16630] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1811.417677][T16630] device macvlan5 entered promiscuous mode [ 1811.426744][T16630] bond8: (slave macvlan5): Enslaving as an active interface with an up link 21:00:13 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:00:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) 21:00:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 21:00:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) 21:00:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) [ 1812.304586][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1812.317453][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1812.326274][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.327379][T13476] Call Trace: [ 1812.327379][T13476] dump_stack+0x1c9/0x220 [ 1812.327379][T13476] dump_header+0x1e7/0xd00 [ 1812.327379][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1812.327379][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1812.327379][T13476] ? ___ratelimit+0x542/0x720 [ 1812.327379][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1812.327379][T13476] oom_kill_process+0x216/0x580 [ 1812.327379][T13476] out_of_memory+0x181e/0x1cc0 [ 1812.327379][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1812.327379][T13476] alloc_pages_current+0x67d/0x990 [ 1812.327379][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1812.327379][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1812.327379][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1812.327379][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1812.327379][T13476] ion_ioctl+0x79d/0x1fc0 [ 1812.327379][T13476] ? debug_shrink_set+0x220/0x220 [ 1812.327379][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1812.327379][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1812.327379][T13476] do_syscall_64+0xb8/0x160 [ 1812.327379][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1812.327379][T13476] RIP: 0033:0x45ca29 [ 1812.327379][T13476] Code: Bad RIP value. [ 1812.327379][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.327379][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1812.327379][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1812.327379][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1812.327379][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1812.327379][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1812.505587][T13476] Mem-Info: [ 1812.508850][T13476] active_anon:122774 inactive_anon:7064 isolated_anon:0 [ 1812.508850][T13476] active_file:1992 inactive_file:5329 isolated_file:0 [ 1812.508850][T13476] unevictable:0 dirty:149 writeback:0 unstable:0 [ 1812.508850][T13476] slab_reclaimable:5932 slab_unreclaimable:40578 [ 1812.508850][T13476] mapped:57927 shmem:13129 pagetables:10001 bounce:0 [ 1812.508850][T13476] free:205587 free_pcp:546 free_cma:0 [ 1812.547823][T13476] Node 0 active_anon:429292kB inactive_anon:21552kB active_file:8kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 321536kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.576764][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1812.606840][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1812.612320][T13476] Node 0 DMA32 free:39548kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:405676kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3116kB pagetables:17236kB bounce:0kB free_pcp:1848kB local_pcp:536kB free_cma:0kB [ 1812.644829][T13476] lowmem_reserve[]: 0 0 228 228 [ 1812.649823][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8216kB bounce:0kB free_pcp:336kB local_pcp:260kB free_cma:0kB [ 1812.681783][T13476] lowmem_reserve[]: 0 0 0 0 [ 1812.686539][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1812.698594][T13476] Node 0 DMA32: 1043*4kB (ME) 630*8kB (ME) 368*16kB (UME) 237*32kB (UME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39580kB [ 1812.715139][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1812.730981][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.741069][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.750624][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1812.760907][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1812.770407][T13476] 20466 total pagecache pages [ 1812.775413][T13476] 0 pages in swap cache [ 1812.779632][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1812.785891][T13476] Free swap = 0kB [ 1812.789661][T13476] Total swap = 0kB [ 1812.793501][T13476] 1965979 pages RAM [ 1812.797611][T13476] 0 pages HighMem/MovableOnly [ 1812.802293][T13476] 1423249 pages reserved [ 1812.806730][T13476] 0 pages cma reserved [ 1812.810898][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=10578,uid=0 [ 1812.825950][T13476] Out of memory: Killed process 10578 (syz-executor.4) total-vm:74844kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1812.844741][ T1820] oom_reaper: reaped process 10578 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1813.380327][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1813.393226][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1813.402483][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1813.402927][T13476] Call Trace: [ 1813.402927][T13476] dump_stack+0x1c9/0x220 [ 1813.402927][T13476] dump_header+0x1e7/0xd00 [ 1813.402927][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1813.402927][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1813.433728][T13476] ? ___ratelimit+0x542/0x720 [ 1813.433728][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1813.433728][T13476] oom_kill_process+0x216/0x580 [ 1813.433728][T13476] out_of_memory+0x181e/0x1cc0 [ 1813.433728][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1813.433728][T13476] alloc_pages_current+0x67d/0x990 [ 1813.433728][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1813.433728][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1813.433728][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1813.433728][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1813.488871][T13476] ion_ioctl+0x79d/0x1fc0 [ 1813.488871][T13476] ? debug_shrink_set+0x220/0x220 [ 1813.488871][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1813.503771][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1813.503771][T13476] do_syscall_64+0xb8/0x160 [ 1813.503771][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1813.503771][T13476] RIP: 0033:0x45ca29 [ 1813.503771][T13476] Code: Bad RIP value. [ 1813.503771][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.503771][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1813.503771][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1813.503771][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1813.503771][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1813.503771][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1813.579601][T13476] Mem-Info: [ 1813.582856][T13476] active_anon:122237 inactive_anon:7064 isolated_anon:0 [ 1813.582856][T13476] active_file:1991 inactive_file:5335 isolated_file:0 [ 1813.582856][T13476] unevictable:0 dirty:155 writeback:0 unstable:0 [ 1813.582856][T13476] slab_reclaimable:5932 slab_unreclaimable:40570 [ 1813.582856][T13476] mapped:57927 shmem:13129 pagetables:9974 bounce:0 [ 1813.582856][T13476] free:205540 free_pcp:473 free_cma:0 [ 1813.621723][T13476] Node 0 active_anon:427140kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 319488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1813.650747][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1813.680474][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1813.685936][T13476] Node 0 DMA32 free:39360kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:403524kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3116kB pagetables:17204kB bounce:0kB free_pcp:1460kB local_pcp:868kB free_cma:0kB [ 1813.718131][T13476] lowmem_reserve[]: 0 0 228 228 [ 1813.723066][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8140kB bounce:0kB free_pcp:432kB local_pcp:80kB free_cma:0kB [ 1813.755260][T13476] lowmem_reserve[]: 0 0 0 0 [ 1813.759831][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1813.771963][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 368*16kB (UME) 236*32kB (UME) 99*64kB (M) 47*128kB (M) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39360kB [ 1813.788240][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1813.803392][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1813.813305][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1813.822882][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1813.832955][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1813.842453][T13476] 20469 total pagecache pages [ 1813.847317][T13476] 0 pages in swap cache [ 1813.851518][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1813.858008][T13476] Free swap = 0kB [ 1813.861944][T13476] Total swap = 0kB [ 1813.865893][T13476] 1965979 pages RAM [ 1813.869740][T13476] 0 pages HighMem/MovableOnly [ 1813.874706][T13476] 1423249 pages reserved [ 1813.878982][T13476] 0 pages cma reserved [ 1813.883089][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=9377,uid=0 [ 1813.898239][T13476] Out of memory: Killed process 9377 (syz-executor.4) total-vm:74844kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1814.338936][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1814.351993][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1814.360901][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.361693][T13476] Call Trace: [ 1814.361693][T13476] dump_stack+0x1c9/0x220 [ 1814.361693][T13476] dump_header+0x1e7/0xd00 [ 1814.361693][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1814.383718][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1814.383718][T13476] ? ___ratelimit+0x542/0x720 [ 1814.383718][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1814.383718][T13476] oom_kill_process+0x216/0x580 [ 1814.383718][T13476] out_of_memory+0x181e/0x1cc0 [ 1814.383718][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1814.383718][T13476] alloc_pages_current+0x67d/0x990 [ 1814.383718][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1814.383718][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1814.383718][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1814.383718][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1814.383718][T13476] ion_ioctl+0x79d/0x1fc0 [ 1814.383718][T13476] ? debug_shrink_set+0x220/0x220 [ 1814.383718][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1814.383718][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1814.383718][T13476] do_syscall_64+0xb8/0x160 [ 1814.383718][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1814.383718][T13476] RIP: 0033:0x45ca29 [ 1814.383718][T13476] Code: Bad RIP value. [ 1814.383718][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1814.383718][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1814.383718][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1814.383718][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1814.383718][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1814.383718][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1814.539749][T13476] Mem-Info: [ 1814.543031][T13476] active_anon:121701 inactive_anon:7064 isolated_anon:0 [ 1814.543031][T13476] active_file:1991 inactive_file:5335 isolated_file:0 [ 1814.543031][T13476] unevictable:0 dirty:161 writeback:0 unstable:0 [ 1814.543031][T13476] slab_reclaimable:5932 slab_unreclaimable:40570 [ 1814.543031][T13476] mapped:57934 shmem:13129 pagetables:9949 bounce:0 [ 1814.543031][T13476] free:205548 free_pcp:490 free_cma:0 [ 1814.581321][T13476] Node 0 active_anon:424996kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 319488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1814.612795][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1814.641937][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1814.647342][T13476] Node 0 DMA32 free:39392kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:401380kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3100kB pagetables:17104kB bounce:0kB free_pcp:1528kB local_pcp:932kB free_cma:0kB [ 1814.680734][T13476] lowmem_reserve[]: 0 0 228 228 [ 1814.685816][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4192kB pagetables:8140kB bounce:0kB free_pcp:432kB local_pcp:80kB free_cma:0kB [ 1814.717411][T13476] lowmem_reserve[]: 0 0 0 0 [ 1814.722103][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1814.734178][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 368*16kB (UME) 236*32kB (UME) 100*64kB (UM) 47*128kB (M) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39424kB [ 1814.750839][T13476] Node 0 Normal: 794*4kB (UME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1814.765968][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1814.775735][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1814.785234][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1814.795000][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1814.804508][T13476] 20475 total pagecache pages [ 1814.809371][T13476] 0 pages in swap cache [ 1814.813757][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1814.819895][T13476] Free swap = 0kB [ 1814.823890][T13476] Total swap = 0kB [ 1814.827648][T13476] 1965979 pages RAM [ 1814.831486][T13476] 0 pages HighMem/MovableOnly [ 1814.836351][T13476] 1423249 pages reserved [ 1814.840628][T13476] 0 pages cma reserved [ 1814.844937][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=14858,uid=0 [ 1814.859923][T13476] Out of memory: Killed process 14858 (syz-executor.4) total-vm:74844kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1814.882079][ T1820] oom_reaper: reaped process 14858 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1815.240997][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1815.254136][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1815.262952][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1815.263802][T13476] Call Trace: [ 1815.263802][T13476] dump_stack+0x1c9/0x220 [ 1815.263802][T13476] dump_header+0x1e7/0xd00 [ 1815.263802][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1815.263802][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1815.263802][T13476] ? ___ratelimit+0x542/0x720 [ 1815.263802][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1815.263802][T13476] oom_kill_process+0x216/0x580 [ 1815.263802][T13476] out_of_memory+0x181e/0x1cc0 [ 1815.263802][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1815.263802][T13476] alloc_pages_current+0x67d/0x990 [ 1815.263802][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1815.263802][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1815.263802][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1815.263802][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1815.263802][T13476] ion_ioctl+0x79d/0x1fc0 [ 1815.263802][T13476] ? debug_shrink_set+0x220/0x220 [ 1815.263802][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1815.263802][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1815.263802][T13476] do_syscall_64+0xb8/0x160 [ 1815.263802][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1815.263802][T13476] RIP: 0033:0x45ca29 [ 1815.263802][T13476] Code: Bad RIP value. [ 1815.263802][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1815.263802][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1815.263802][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1815.263802][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1815.263802][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1815.263802][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1815.436385][T13476] Mem-Info: [ 1815.439672][T13476] active_anon:121161 inactive_anon:7064 isolated_anon:0 [ 1815.439672][T13476] active_file:1991 inactive_file:5346 isolated_file:0 [ 1815.439672][T13476] unevictable:0 dirty:167 writeback:0 unstable:0 [ 1815.439672][T13476] slab_reclaimable:5932 slab_unreclaimable:40570 [ 1815.439672][T13476] mapped:57945 shmem:13129 pagetables:9920 bounce:0 [ 1815.439672][T13476] free:205556 free_pcp:500 free_cma:0 [ 1815.478825][T13476] Node 0 active_anon:422836kB inactive_anon:21552kB active_file:4kB inactive_file:412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 315392kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1815.509695][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.539085][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1815.544818][T13476] Node 0 DMA32 free:39456kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:399324kB inactive_anon:2324kB active_file:4kB inactive_file:408kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3084kB pagetables:17096kB bounce:0kB free_pcp:1528kB local_pcp:596kB free_cma:0kB [ 1815.577604][T13476] lowmem_reserve[]: 0 0 228 228 [ 1815.582580][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23512kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4180kB pagetables:8032kB bounce:0kB free_pcp:472kB local_pcp:324kB free_cma:0kB [ 1815.614389][T13476] lowmem_reserve[]: 0 0 0 0 [ 1815.618973][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1815.631130][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 368*16kB (UME) 235*32kB (ME) 99*64kB (M) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39456kB [ 1815.647689][T13476] Node 0 Normal: 794*4kB (ME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1815.663067][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.672891][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.682492][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.692433][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1815.702095][T13476] 20481 total pagecache pages [ 1815.707013][T13476] 0 pages in swap cache [ 1815.711217][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1815.717519][T13476] Free swap = 0kB [ 1815.721274][T13476] Total swap = 0kB [ 1815.725342][T13476] 1965979 pages RAM [ 1815.729187][T13476] 0 pages HighMem/MovableOnly [ 1815.734127][T13476] 1423249 pages reserved [ 1815.738399][T13476] 0 pages cma reserved [ 1815.742507][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12985,uid=0 [ 1815.757869][T13476] Out of memory: Killed process 12985 (syz-executor.2) total-vm:74844kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1815.776263][ T1820] oom_reaper: reaped process 12985 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1816.099593][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1816.112498][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1816.121276][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1816.122357][T13476] Call Trace: [ 1816.122357][T13476] dump_stack+0x1c9/0x220 [ 1816.122357][T13476] dump_header+0x1e7/0xd00 [ 1816.122357][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1816.122357][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1816.122357][T13476] ? ___ratelimit+0x542/0x720 [ 1816.122357][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1816.122357][T13476] oom_kill_process+0x216/0x580 [ 1816.122357][T13476] out_of_memory+0x181e/0x1cc0 [ 1816.122357][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1816.122357][T13476] alloc_pages_current+0x67d/0x990 [ 1816.122357][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1816.122357][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1816.122357][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1816.122357][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1816.122357][T13476] ion_ioctl+0x79d/0x1fc0 [ 1816.122357][T13476] ? debug_shrink_set+0x220/0x220 [ 1816.122357][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1816.122357][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1816.122357][T13476] do_syscall_64+0xb8/0x160 [ 1816.122357][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1816.122357][T13476] RIP: 0033:0x45ca29 [ 1816.122357][T13476] Code: Bad RIP value. [ 1816.122357][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.122357][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1816.122357][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1816.122357][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1816.122357][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1816.122357][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1816.299943][T13476] Mem-Info: [ 1816.303218][T13476] active_anon:120620 inactive_anon:7064 isolated_anon:0 [ 1816.303218][T13476] active_file:1993 inactive_file:5353 isolated_file:0 [ 1816.303218][T13476] unevictable:0 dirty:173 writeback:0 unstable:0 [ 1816.303218][T13476] slab_reclaimable:5932 slab_unreclaimable:40570 [ 1816.303218][T13476] mapped:57953 shmem:13129 pagetables:9893 bounce:0 [ 1816.303218][T13476] free:205580 free_pcp:552 free_cma:0 [ 1816.342912][T13476] Node 0 active_anon:420672kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 313344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1816.372159][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1816.401564][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1816.406966][T13476] Node 0 DMA32 free:39520kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:397160kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3072kB pagetables:16988kB bounce:0kB free_pcp:1732kB local_pcp:676kB free_cma:0kB [ 1816.439260][T13476] lowmem_reserve[]: 0 0 228 228 [ 1816.444327][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23512kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4172kB pagetables:8032kB bounce:0kB free_pcp:476kB local_pcp:328kB free_cma:0kB [ 1816.476722][T13476] lowmem_reserve[]: 0 0 0 0 [ 1816.481308][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1816.494618][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 368*16kB (UME) 237*32kB (UME) 99*64kB (M) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39520kB [ 1816.511012][T13476] Node 0 Normal: 794*4kB (ME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1816.526289][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.536118][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1816.545686][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.555579][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1816.565465][T13476] 20487 total pagecache pages [ 1816.570196][T13476] 0 pages in swap cache [ 1816.574594][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1816.580873][T13476] Free swap = 0kB [ 1816.584843][T13476] Total swap = 0kB [ 1816.588605][T13476] 1965979 pages RAM [ 1816.592535][T13476] 0 pages HighMem/MovableOnly [ 1816.597499][T13476] 1423249 pages reserved [ 1816.601775][T13476] 0 pages cma reserved [ 1816.607814][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=12938,uid=0 [ 1816.623900][T13476] Out of memory: Killed process 12938 (syz-executor.2) total-vm:74844kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1816.645106][ T1820] oom_reaper: reaped process 12938 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1817.048304][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1817.061650][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1817.070439][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1817.071427][T13476] Call Trace: [ 1817.071427][T13476] dump_stack+0x1c9/0x220 [ 1817.071427][T13476] dump_header+0x1e7/0xd00 [ 1817.071427][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1817.071427][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1817.071427][T13476] ? ___ratelimit+0x542/0x720 [ 1817.071427][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1817.071427][T13476] oom_kill_process+0x216/0x580 [ 1817.071427][T13476] out_of_memory+0x181e/0x1cc0 [ 1817.071427][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1817.071427][T13476] alloc_pages_current+0x67d/0x990 [ 1817.071427][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1817.071427][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1817.071427][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1817.071427][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1817.071427][T13476] ion_ioctl+0x79d/0x1fc0 [ 1817.071427][T13476] ? debug_shrink_set+0x220/0x220 [ 1817.071427][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1817.071427][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1817.071427][T13476] do_syscall_64+0xb8/0x160 [ 1817.071427][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1817.071427][T13476] RIP: 0033:0x45ca29 [ 1817.071427][T13476] Code: Bad RIP value. [ 1817.071427][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.071427][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1817.071427][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1817.071427][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1817.071427][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1817.071427][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1817.245208][T13476] Mem-Info: [ 1817.248498][T13476] active_anon:120078 inactive_anon:7064 isolated_anon:0 [ 1817.248498][T13476] active_file:1993 inactive_file:5359 isolated_file:0 [ 1817.248498][T13476] unevictable:0 dirty:179 writeback:0 unstable:0 [ 1817.248498][T13476] slab_reclaimable:5932 slab_unreclaimable:40568 [ 1817.248498][T13476] mapped:57959 shmem:13129 pagetables:9866 bounce:0 [ 1817.248498][T13476] free:205580 free_pcp:586 free_cma:0 [ 1817.287511][T13476] Node 0 active_anon:418504kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 311296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1817.317419][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1817.346828][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1817.352234][T13476] Node 0 DMA32 free:39552kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:394992kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3072kB pagetables:16880kB bounce:0kB free_pcp:1852kB local_pcp:536kB free_cma:0kB [ 1817.384796][T13476] lowmem_reserve[]: 0 0 228 228 [ 1817.389710][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23512kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4160kB pagetables:8032kB bounce:0kB free_pcp:492kB local_pcp:328kB free_cma:0kB [ 1817.421822][T13476] lowmem_reserve[]: 0 0 0 0 [ 1817.426562][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1817.438670][T13476] Node 0 DMA32: 1044*4kB (UME) 630*8kB (ME) 369*16kB (UME) 237*32kB (UME) 100*64kB (UM) 48*128kB (UM) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39600kB [ 1817.455288][T13476] Node 0 Normal: 794*4kB (ME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1817.470469][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1817.480303][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1817.489966][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1817.499789][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1817.509413][T13476] 20493 total pagecache pages [ 1817.514338][T13476] 0 pages in swap cache [ 1817.518542][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1817.524818][T13476] Free swap = 0kB [ 1817.528570][T13476] Total swap = 0kB [ 1817.532325][T13476] 1965979 pages RAM [ 1817.536485][T13476] 0 pages HighMem/MovableOnly [ 1817.541183][T13476] 1423249 pages reserved [ 1817.545649][T13476] 0 pages cma reserved [ 1817.549761][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=13093,uid=0 [ 1817.565088][T13476] Out of memory: Killed process 13093 (syz-executor.5) total-vm:74844kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1817.582626][ T1820] oom_reaper: reaped process 13093 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1817.902342][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1817.915480][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1817.924210][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1817.933977][T13476] Call Trace: [ 1817.935473][T13476] dump_stack+0x1c9/0x220 [ 1817.935473][T13476] dump_header+0x1e7/0xd00 [ 1817.945546][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1817.945546][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1817.954850][T13476] ? ___ratelimit+0x542/0x720 [ 1817.954850][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1817.965632][T13476] oom_kill_process+0x216/0x580 [ 1817.965632][T13476] out_of_memory+0x181e/0x1cc0 [ 1817.974802][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1817.983866][T13476] alloc_pages_current+0x67d/0x990 [ 1817.985615][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1817.993771][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1817.994766][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1818.005496][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1818.005496][T13476] ion_ioctl+0x79d/0x1fc0 [ 1818.015759][T13476] ? debug_shrink_set+0x220/0x220 [ 1818.015759][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1818.023826][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1818.028416][T13476] do_syscall_64+0xb8/0x160 [ 1818.034755][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1818.034755][T13476] RIP: 0033:0x45ca29 [ 1818.044167][T13476] Code: Bad RIP value. [ 1818.047094][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1818.054814][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1818.063943][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1818.065680][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1818.074728][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1818.085500][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1818.098300][T13476] Mem-Info: [ 1818.101587][T13476] active_anon:119540 inactive_anon:7064 isolated_anon:0 [ 1818.101587][T13476] active_file:1991 inactive_file:5364 isolated_file:0 [ 1818.101587][T13476] unevictable:0 dirty:184 writeback:0 unstable:0 [ 1818.101587][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1818.101587][T13476] mapped:57964 shmem:13129 pagetables:9840 bounce:0 [ 1818.101587][T13476] free:205598 free_pcp:551 free_cma:0 [ 1818.140291][T13476] Node 0 active_anon:416352kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 309248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1818.169205][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1818.198906][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1818.204418][T13476] Node 0 DMA32 free:39388kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:392880kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3056kB pagetables:16788kB bounce:0kB free_pcp:1656kB local_pcp:1120kB free_cma:0kB [ 1818.237196][T13476] lowmem_reserve[]: 0 0 228 228 [ 1818.242131][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23472kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4156kB pagetables:8020kB bounce:0kB free_pcp:548kB local_pcp:220kB free_cma:0kB [ 1818.274553][T13476] lowmem_reserve[]: 0 0 0 0 [ 1818.279133][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1818.291689][T13476] Node 0 DMA32: 1057*4kB (ME) 633*8kB (ME) 369*16kB (UME) 236*32kB (UME) 100*64kB (UM) 48*128kB (UM) 16*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39388kB [ 1818.308148][T13476] Node 0 Normal: 794*4kB (ME) 302*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1818.323249][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1818.333107][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1818.342672][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1818.352481][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1818.362113][T13476] 20498 total pagecache pages [ 1818.367257][T13476] 0 pages in swap cache [ 1818.371464][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1818.377811][T13476] Free swap = 0kB [ 1818.381591][T13476] Total swap = 0kB [ 1818.385555][T13476] 1965979 pages RAM [ 1818.389400][T13476] 0 pages HighMem/MovableOnly [ 1818.394292][T13476] 1423249 pages reserved [ 1818.398576][T13476] 0 pages cma reserved [ 1818.402687][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=14359,uid=0 [ 1818.417790][T13476] Out of memory: Killed process 14359 (syz-executor.5) total-vm:74844kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1818.437197][ T1820] oom_reaper: reaped process 14359 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1818.816269][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1818.829273][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1818.837993][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1818.843893][T13476] Call Trace: [ 1818.843893][T13476] dump_stack+0x1c9/0x220 [ 1818.854367][T13476] dump_header+0x1e7/0xd00 [ 1818.854367][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1818.865940][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1818.865940][T13476] ? ___ratelimit+0x542/0x720 [ 1818.874330][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1818.874330][T13476] oom_kill_process+0x216/0x580 [ 1818.885899][T13476] out_of_memory+0x181e/0x1cc0 [ 1818.885899][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1818.895333][T13476] alloc_pages_current+0x67d/0x990 [ 1818.895333][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1818.903933][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1818.908857][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1818.914371][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1818.924096][T13476] ion_ioctl+0x79d/0x1fc0 [ 1818.926627][T13476] ? debug_shrink_set+0x220/0x220 [ 1818.934762][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1818.934762][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1818.943851][T13476] do_syscall_64+0xb8/0x160 [ 1818.946258][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1818.954317][T13476] RIP: 0033:0x45ca29 [ 1818.954317][T13476] Code: Bad RIP value. [ 1818.954317][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1818.966021][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1818.974410][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1818.986150][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1818.994461][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1819.003829][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1819.013197][T13476] Mem-Info: [ 1819.016683][T13476] active_anon:118999 inactive_anon:7064 isolated_anon:0 [ 1819.016683][T13476] active_file:1991 inactive_file:5370 isolated_file:0 [ 1819.016683][T13476] unevictable:0 dirty:190 writeback:0 unstable:0 [ 1819.016683][T13476] slab_reclaimable:5930 slab_unreclaimable:40562 [ 1819.016683][T13476] mapped:57970 shmem:13129 pagetables:9814 bounce:0 [ 1819.016683][T13476] free:205610 free_pcp:547 free_cma:0 [ 1819.055373][T13476] Node 0 active_anon:414188kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 307200kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1819.084396][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1819.113906][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1819.119732][T13476] Node 0 DMA32 free:39420kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:390832kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3056kB pagetables:16788kB bounce:0kB free_pcp:1660kB local_pcp:1120kB free_cma:0kB [ 1819.152885][T13476] lowmem_reserve[]: 0 0 228 228 [ 1819.158042][T13476] Node 0 Normal free:9688kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23356kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4140kB pagetables:7916kB bounce:0kB free_pcp:528kB local_pcp:180kB free_cma:0kB [ 1819.189947][T13476] lowmem_reserve[]: 0 0 0 0 [ 1819.194622][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1819.206956][T13476] Node 0 DMA32: 1057*4kB (ME) 633*8kB (ME) 369*16kB (UME) 236*32kB (UME) 99*64kB (M) 47*128kB (M) 17*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39452kB [ 1819.223154][T13476] Node 0 Normal: 806*4kB (ME) 296*8kB (UME) 94*16kB (UME) 45*32kB (UM) 18*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9688kB [ 1819.238327][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.248073][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.257782][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1819.267656][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1819.277166][T13476] 20504 total pagecache pages [ 1819.281891][T13476] 0 pages in swap cache [ 1819.286258][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1819.292360][T13476] Free swap = 0kB [ 1819.296337][T13476] Total swap = 0kB [ 1819.300097][T13476] 1965979 pages RAM [ 1819.304158][T13476] 0 pages HighMem/MovableOnly [ 1819.308866][T13476] 1423249 pages reserved [ 1819.313135][T13476] 0 pages cma reserved [ 1819.317421][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=14344,uid=0 [ 1819.334627][T13476] Out of memory: Killed process 14344 (syz-executor.5) total-vm:74844kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1819.355291][ T1820] oom_reaper: reaped process 14344 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 21:00:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 21:00:21 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:00:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f770000000024000200200009801c0001000d000100636f6e6e6d61726b"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:00:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66698c9ed2f7bca892"], 0x24) 21:00:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x301}, 0x14}}, 0x0) [ 1819.734784][T16690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1819.808074][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x301}, 0x14}}, 0x0) 21:00:22 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r0, 0xf2b, 0x0, 0x0, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x24}}, 0x0) [ 1820.005792][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:22 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:00:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f770000000024000200200009801c0001000d000100636f6e6e6d61726b"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:00:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000200)=0x7) 21:00:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x301}, 0x14}}, 0x0) [ 1820.322719][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:22 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1820.393066][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1821.204928][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1821.217592][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1821.226325][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1821.227507][T13476] Call Trace: [ 1821.227507][T13476] dump_stack+0x1c9/0x220 [ 1821.227507][T13476] dump_header+0x1e7/0xd00 [ 1821.227507][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1821.227507][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1821.227507][T13476] ? ___ratelimit+0x542/0x720 [ 1821.227507][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1821.227507][T13476] oom_kill_process+0x216/0x580 [ 1821.227507][T13476] out_of_memory+0x181e/0x1cc0 [ 1821.227507][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1821.227507][T13476] alloc_pages_current+0x67d/0x990 [ 1821.227507][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1821.227507][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1821.227507][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1821.227507][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1821.227507][T13476] ion_ioctl+0x79d/0x1fc0 [ 1821.227507][T13476] ? debug_shrink_set+0x220/0x220 [ 1821.227507][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1821.227507][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1821.227507][T13476] do_syscall_64+0xb8/0x160 [ 1821.227507][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1821.227507][T13476] RIP: 0033:0x45ca29 [ 1821.227507][T13476] Code: Bad RIP value. [ 1821.227507][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1821.227507][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1821.227507][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1821.227507][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1821.227507][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1821.227507][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1821.402762][T13476] Mem-Info: [ 1821.406254][T13476] active_anon:118460 inactive_anon:7064 isolated_anon:0 [ 1821.406254][T13476] active_file:1993 inactive_file:5376 isolated_file:0 [ 1821.406254][T13476] unevictable:0 dirty:37 writeback:0 unstable:0 [ 1821.406254][T13476] slab_reclaimable:5930 slab_unreclaimable:40565 [ 1821.406254][T13476] mapped:57977 shmem:13129 pagetables:9788 bounce:0 [ 1821.406254][T13476] free:205385 free_pcp:76 free_cma:0 [ 1821.444578][T13476] Node 0 active_anon:412020kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 305152kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1821.476550][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1821.506691][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1821.511987][T13476] Node 0 DMA32 free:39200kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:388784kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3056kB pagetables:16788kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1821.544303][T13476] lowmem_reserve[]: 0 0 228 228 [ 1821.549237][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23236kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4124kB pagetables:7812kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1821.581055][T13476] lowmem_reserve[]: 0 0 0 0 [ 1821.585861][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1821.598147][T13476] Node 0 DMA32: 1118*4kB (ME) 679*8kB (ME) 373*16kB (UME) 231*32kB (UME) 97*64kB (UM) 44*128kB (UM) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39200kB [ 1821.614553][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1821.629997][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1821.639797][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1821.649324][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1821.659130][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1821.668693][T13476] 20510 total pagecache pages [ 1821.673434][T13476] 0 pages in swap cache [ 1821.678142][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1821.684524][T13476] Free swap = 0kB [ 1821.688282][T13476] Total swap = 0kB [ 1821.692284][T13476] 1965979 pages RAM [ 1821.696295][T13476] 0 pages HighMem/MovableOnly [ 1821.701059][T13476] 1423249 pages reserved [ 1821.705530][T13476] 0 pages cma reserved [ 1821.709645][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=5369,uid=0 [ 1821.724912][T13476] Out of memory: Killed process 5369 (syz-executor.5) total-vm:74976kB, anon-rss:2232kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1821.743392][ T1820] oom_reaper: reaped process 5369 (syz-executor.5), now anon-rss:0kB, file-rss:34624kB, shmem-rss:0kB [ 1822.196890][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1822.209882][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1822.218616][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1822.219592][T13476] Call Trace: [ 1822.219592][T13476] dump_stack+0x1c9/0x220 [ 1822.235096][T13476] dump_header+0x1e7/0xd00 [ 1822.235096][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1822.235096][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1822.235096][T13476] ? ___ratelimit+0x542/0x720 [ 1822.235096][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1822.235096][T13476] oom_kill_process+0x216/0x580 [ 1822.235096][T13476] out_of_memory+0x181e/0x1cc0 [ 1822.235096][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1822.235096][T13476] alloc_pages_current+0x67d/0x990 [ 1822.235096][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1822.235096][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1822.235096][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1822.235096][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1822.303710][T13476] ion_ioctl+0x79d/0x1fc0 [ 1822.303710][T13476] ? debug_shrink_set+0x220/0x220 [ 1822.303710][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1822.303710][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1822.303710][T13476] do_syscall_64+0xb8/0x160 [ 1822.303710][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1822.303710][T13476] RIP: 0033:0x45ca29 [ 1822.303710][T13476] Code: Bad RIP value. [ 1822.303710][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.303710][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1822.303710][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1822.303710][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1822.303710][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1822.303710][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1822.395336][T13476] Mem-Info: [ 1822.399930][T13476] active_anon:117913 inactive_anon:7064 isolated_anon:0 [ 1822.399930][T13476] active_file:1991 inactive_file:5382 isolated_file:0 [ 1822.399930][T13476] unevictable:0 dirty:43 writeback:0 unstable:0 [ 1822.399930][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1822.399930][T13476] mapped:57979 shmem:13129 pagetables:9760 bounce:0 [ 1822.399930][T13476] free:205586 free_pcp:102 free_cma:0 [ 1822.438287][T13476] Node 0 active_anon:409884kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 303104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1822.468070][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.497786][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1822.503175][T13476] Node 0 DMA32 free:39484kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:386648kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3040kB pagetables:16788kB bounce:0kB free_pcp:352kB local_pcp:264kB free_cma:0kB [ 1822.535700][T13476] lowmem_reserve[]: 0 0 228 228 [ 1822.540640][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23236kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4124kB pagetables:7812kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1822.572171][T13476] lowmem_reserve[]: 0 0 0 0 [ 1822.576929][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1822.589062][T13476] Node 0 DMA32: 1119*4kB (UME) 680*8kB (UME) 372*16kB (ME) 231*32kB (UME) 96*64kB (M) 43*128kB (M) 16*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39516kB [ 1822.606232][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1822.621453][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.631287][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1822.640790][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.650512][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1822.659956][T13476] 20516 total pagecache pages [ 1822.664778][T13476] 0 pages in swap cache [ 1822.668978][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1822.675239][T13476] Free swap = 0kB [ 1822.678994][T13476] Total swap = 0kB [ 1822.682762][T13476] 1965979 pages RAM [ 1822.686774][T13476] 0 pages HighMem/MovableOnly [ 1822.691487][T13476] 1423249 pages reserved [ 1822.695903][T13476] 0 pages cma reserved [ 1822.700017][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=12417,uid=0 [ 1822.715237][T13476] Out of memory: Killed process 12417 (syz-executor.1) total-vm:75108kB, anon-rss:2228kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1822.733874][ T1820] oom_reaper: reaped process 12417 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1823.092222][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1823.105132][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1823.113873][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1823.114923][T13476] Call Trace: [ 1823.114923][T13476] dump_stack+0x1c9/0x220 [ 1823.114923][T13476] dump_header+0x1e7/0xd00 [ 1823.114923][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1823.114923][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1823.114923][T13476] ? ___ratelimit+0x542/0x720 [ 1823.114923][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1823.114923][T13476] oom_kill_process+0x216/0x580 [ 1823.114923][T13476] out_of_memory+0x181e/0x1cc0 [ 1823.114923][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1823.114923][T13476] alloc_pages_current+0x67d/0x990 [ 1823.114923][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1823.114923][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1823.114923][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1823.114923][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1823.114923][T13476] ion_ioctl+0x79d/0x1fc0 [ 1823.114923][T13476] ? debug_shrink_set+0x220/0x220 [ 1823.114923][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1823.114923][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1823.114923][T13476] do_syscall_64+0xb8/0x160 [ 1823.114923][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1823.114923][T13476] RIP: 0033:0x45ca29 [ 1823.114923][T13476] Code: Bad RIP value. [ 1823.114923][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.114923][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1823.114923][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1823.114923][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1823.114923][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1823.114923][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1823.289860][T13476] Mem-Info: [ 1823.293162][T13476] active_anon:117375 inactive_anon:7064 isolated_anon:0 [ 1823.293162][T13476] active_file:1991 inactive_file:5388 isolated_file:0 [ 1823.293162][T13476] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1823.293162][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1823.293162][T13476] mapped:57987 shmem:13129 pagetables:9735 bounce:0 [ 1823.293162][T13476] free:205673 free_pcp:160 free_cma:0 [ 1823.331471][T13476] Node 0 active_anon:407732kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1823.360329][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1823.389800][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1823.395244][T13476] Node 0 DMA32 free:39548kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:384496kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3024kB pagetables:16688kB bounce:0kB free_pcp:584kB local_pcp:388kB free_cma:0kB [ 1823.427620][T13476] lowmem_reserve[]: 0 0 228 228 [ 1823.432552][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23236kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4124kB pagetables:7812kB bounce:0kB free_pcp:56kB local_pcp:56kB free_cma:0kB [ 1823.464325][T13476] lowmem_reserve[]: 0 0 0 0 [ 1823.468910][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1823.481008][T13476] Node 0 DMA32: 1119*4kB (UME) 680*8kB (UME) 372*16kB (ME) 230*32kB (ME) 97*64kB (UM) 43*128kB (M) 16*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39548kB [ 1823.497742][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1823.513000][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1823.522883][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1823.532434][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1823.542224][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1823.551737][T13476] 20522 total pagecache pages [ 1823.556734][T13476] 0 pages in swap cache [ 1823.561031][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1823.567429][T13476] Free swap = 0kB [ 1823.571275][T13476] Total swap = 0kB [ 1823.575212][T13476] 1965979 pages RAM [ 1823.579108][T13476] 0 pages HighMem/MovableOnly [ 1823.583956][T13476] 1423249 pages reserved [ 1823.588226][T13476] 0 pages cma reserved [ 1823.592337][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=10449,uid=0 [ 1823.607590][T13476] Out of memory: Killed process 10449 (syz-executor.2) total-vm:75108kB, anon-rss:2228kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1823.970079][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1823.983034][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1823.991855][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1823.992858][T13476] Call Trace: [ 1823.992858][T13476] dump_stack+0x1c9/0x220 [ 1823.992858][T13476] dump_header+0x1e7/0xd00 [ 1823.992858][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1823.992858][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1823.992858][T13476] ? ___ratelimit+0x542/0x720 [ 1823.992858][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1823.992858][T13476] oom_kill_process+0x216/0x580 [ 1823.992858][T13476] out_of_memory+0x181e/0x1cc0 [ 1823.992858][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1823.992858][T13476] alloc_pages_current+0x67d/0x990 [ 1823.992858][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1823.992858][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1823.992858][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1823.992858][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1823.992858][T13476] ion_ioctl+0x79d/0x1fc0 [ 1823.992858][T13476] ? debug_shrink_set+0x220/0x220 [ 1823.992858][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1823.992858][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1823.992858][T13476] do_syscall_64+0xb8/0x160 [ 1823.992858][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1823.992858][T13476] RIP: 0033:0x45ca29 [ 1823.992858][T13476] Code: Bad RIP value. [ 1823.992858][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1823.992858][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1823.992858][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1823.992858][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1823.992858][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1823.992858][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1824.165711][T13476] Mem-Info: [ 1824.168987][T13476] active_anon:116839 inactive_anon:7064 isolated_anon:0 [ 1824.168987][T13476] active_file:1993 inactive_file:5394 isolated_file:0 [ 1824.168987][T13476] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1824.168987][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1824.168987][T13476] mapped:57994 shmem:13129 pagetables:9710 bounce:0 [ 1824.168987][T13476] free:205673 free_pcp:334 free_cma:0 [ 1824.207365][T13476] Node 0 active_anon:405588kB inactive_anon:21552kB active_file:12kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1824.236315][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1824.265638][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1824.270915][T13476] Node 0 DMA32 free:39548kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:382352kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:3008kB pagetables:16588kB bounce:0kB free_pcp:1280kB local_pcp:892kB free_cma:0kB [ 1824.303381][T13476] lowmem_reserve[]: 0 0 228 228 [ 1824.308442][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23236kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4124kB pagetables:7812kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 1824.340287][T13476] lowmem_reserve[]: 0 0 0 0 [ 1824.345119][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1824.357391][T13476] Node 0 DMA32: 1143*4kB (UME) 688*8kB (UME) 384*16kB (UME) 231*32kB (UME) 97*64kB (UM) 44*128kB (UM) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39548kB [ 1824.374776][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1824.390135][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1824.399979][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1824.409518][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1824.419367][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1824.428899][T13476] 20528 total pagecache pages [ 1824.433855][T13476] 0 pages in swap cache [ 1824.438058][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1824.444369][T13476] Free swap = 0kB [ 1824.448119][T13476] Total swap = 0kB [ 1824.451868][T13476] 1965979 pages RAM [ 1824.455937][T13476] 0 pages HighMem/MovableOnly [ 1824.460644][T13476] 1423249 pages reserved [ 1824.465217][T13476] 0 pages cma reserved [ 1824.469345][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=10469,uid=0 [ 1824.484432][T13476] Out of memory: Killed process 10469 (syz-executor.2) total-vm:74976kB, anon-rss:2220kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1824.807672][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1824.820471][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1824.829252][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1824.830372][T13476] Call Trace: [ 1824.830372][T13476] dump_stack+0x1c9/0x220 [ 1824.843952][T13476] dump_header+0x1e7/0xd00 [ 1824.843952][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1824.843952][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1824.843952][T13476] ? ___ratelimit+0x542/0x720 [ 1824.843952][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1824.843952][T13476] oom_kill_process+0x216/0x580 [ 1824.843952][T13476] out_of_memory+0x181e/0x1cc0 [ 1824.843952][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1824.843952][T13476] alloc_pages_current+0x67d/0x990 [ 1824.843952][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1824.843952][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1824.843952][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1824.843952][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1824.843952][T13476] ion_ioctl+0x79d/0x1fc0 [ 1824.843952][T13476] ? debug_shrink_set+0x220/0x220 [ 1824.843952][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1824.843952][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1824.843952][T13476] do_syscall_64+0xb8/0x160 [ 1824.843952][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1824.843952][T13476] RIP: 0033:0x45ca29 [ 1824.843952][T13476] Code: Bad RIP value. [ 1824.843952][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.843952][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1824.843952][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1824.843952][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1824.987264][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1824.987264][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1825.007596][T13476] Mem-Info: [ 1825.010882][T13476] active_anon:116295 inactive_anon:7064 isolated_anon:0 [ 1825.010882][T13476] active_file:1991 inactive_file:5394 isolated_file:0 [ 1825.010882][T13476] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1825.010882][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1825.010882][T13476] mapped:57995 shmem:13129 pagetables:9685 bounce:0 [ 1825.010882][T13476] free:205681 free_pcp:366 free_cma:0 [ 1825.049015][T13476] Node 0 active_anon:403412kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 299008kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.078919][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.108120][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1825.113377][T13476] Node 0 DMA32 free:39580kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:380176kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2992kB pagetables:16500kB bounce:0kB free_pcp:1396kB local_pcp:248kB free_cma:0kB [ 1825.145898][T13476] lowmem_reserve[]: 0 0 228 228 [ 1825.150822][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23236kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4124kB pagetables:7800kB bounce:0kB free_pcp:68kB local_pcp:56kB free_cma:0kB [ 1825.182220][T13476] lowmem_reserve[]: 0 0 0 0 [ 1825.186906][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1825.198980][T13476] Node 0 DMA32: 1143*4kB (UME) 688*8kB (UME) 384*16kB (UME) 231*32kB (UME) 96*64kB (M) 43*128kB (M) 15*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39612kB [ 1825.215548][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1825.230747][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.240523][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.250045][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1825.259804][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1825.269286][T13476] 20528 total pagecache pages [ 1825.274151][T13476] 0 pages in swap cache [ 1825.278353][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1825.284602][T13476] Free swap = 0kB [ 1825.288367][T13476] Total swap = 0kB [ 1825.292115][T13476] 1965979 pages RAM [ 1825.296095][T13476] 0 pages HighMem/MovableOnly [ 1825.300800][T13476] 1423249 pages reserved [ 1825.305233][T13476] 0 pages cma reserved [ 1825.309339][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=10443,uid=0 [ 1825.324993][T13476] Out of memory: Killed process 10443 (syz-executor.2) total-vm:74976kB, anon-rss:2220kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1825.342556][ T1820] oom_reaper: reaped process 10443 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1825.658154][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1825.671065][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1825.679788][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1825.680816][T13476] Call Trace: [ 1825.680816][T13476] dump_stack+0x1c9/0x220 [ 1825.680816][T13476] dump_header+0x1e7/0xd00 [ 1825.680816][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1825.680816][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1825.680816][T13476] ? ___ratelimit+0x542/0x720 [ 1825.680816][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1825.680816][T13476] oom_kill_process+0x216/0x580 [ 1825.680816][T13476] out_of_memory+0x181e/0x1cc0 [ 1825.680816][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1825.680816][T13476] alloc_pages_current+0x67d/0x990 [ 1825.680816][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1825.680816][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1825.680816][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1825.680816][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1825.680816][T13476] ion_ioctl+0x79d/0x1fc0 [ 1825.680816][T13476] ? debug_shrink_set+0x220/0x220 [ 1825.680816][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1825.680816][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1825.680816][T13476] do_syscall_64+0xb8/0x160 [ 1825.680816][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1825.680816][T13476] RIP: 0033:0x45ca29 [ 1825.680816][T13476] Code: Bad RIP value. [ 1825.680816][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1825.807062][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1825.807062][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1825.807062][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1825.807062][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1825.807062][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1825.854929][T13476] Mem-Info: [ 1825.858208][T13476] active_anon:115754 inactive_anon:7064 isolated_anon:0 [ 1825.858208][T13476] active_file:1991 inactive_file:5400 isolated_file:0 [ 1825.858208][T13476] unevictable:0 dirty:61 writeback:0 unstable:0 [ 1825.858208][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1825.858208][T13476] mapped:58000 shmem:13129 pagetables:9660 bounce:0 [ 1825.858208][T13476] free:205626 free_pcp:434 free_cma:0 [ 1825.897106][T13476] Node 0 active_anon:401232kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1825.929428][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1825.958637][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1825.964100][T13476] Node 0 DMA32 free:39392kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:378000kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2992kB pagetables:16400kB bounce:0kB free_pcp:1664kB local_pcp:264kB free_cma:0kB [ 1825.996450][T13476] lowmem_reserve[]: 0 0 228 228 [ 1826.001380][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23232kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4124kB pagetables:7800kB bounce:0kB free_pcp:72kB local_pcp:56kB free_cma:0kB [ 1826.033232][T13476] lowmem_reserve[]: 0 0 0 0 [ 1826.037950][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1826.051366][T13476] Node 0 DMA32: 1142*4kB (ME) 687*8kB (ME) 383*16kB (ME) 231*32kB (UME) 97*64kB (UM) 43*128kB (M) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39392kB [ 1826.067677][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1826.082960][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.093154][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.103160][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.112977][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.122558][T13476] 20543 total pagecache pages [ 1826.132082][T13476] 0 pages in swap cache [ 1826.136582][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1826.142685][T13476] Free swap = 0kB [ 1826.146608][T13476] Total swap = 0kB [ 1826.150370][T13476] 1965979 pages RAM [ 1826.154371][T13476] 0 pages HighMem/MovableOnly [ 1826.159080][T13476] 1423249 pages reserved [ 1826.163349][T13476] 0 pages cma reserved [ 1826.167705][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=17342,uid=0 [ 1826.182712][T13476] Out of memory: Killed process 17342 (syz-executor.0) total-vm:75108kB, anon-rss:2220kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1826.203832][ T1820] oom_reaper: reaped process 17342 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1826.435919][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1826.448692][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1826.457375][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1826.458608][T13476] Call Trace: [ 1826.458608][T13476] dump_stack+0x1c9/0x220 [ 1826.458608][T13476] dump_header+0x1e7/0xd00 [ 1826.458608][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1826.458608][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1826.458608][T13476] ? ___ratelimit+0x542/0x720 [ 1826.458608][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1826.458608][T13476] oom_kill_process+0x216/0x580 [ 1826.458608][T13476] out_of_memory+0x181e/0x1cc0 [ 1826.458608][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1826.458608][T13476] alloc_pages_current+0x67d/0x990 [ 1826.458608][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1826.458608][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1826.458608][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1826.458608][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1826.458608][T13476] ion_ioctl+0x79d/0x1fc0 [ 1826.458608][T13476] ? debug_shrink_set+0x220/0x220 [ 1826.458608][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1826.458608][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1826.458608][T13476] do_syscall_64+0xb8/0x160 [ 1826.458608][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1826.458608][T13476] RIP: 0033:0x45ca29 [ 1826.458608][T13476] Code: Bad RIP value. [ 1826.458608][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1826.458608][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1826.458608][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1826.458608][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1826.458608][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1826.458608][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1826.634025][T13476] Mem-Info: [ 1826.637306][T13476] active_anon:115218 inactive_anon:7064 isolated_anon:0 [ 1826.637306][T13476] active_file:1991 inactive_file:5406 isolated_file:0 [ 1826.637306][T13476] unevictable:0 dirty:70 writeback:0 unstable:0 [ 1826.637306][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1826.637306][T13476] mapped:58007 shmem:13129 pagetables:9647 bounce:0 [ 1826.637306][T13476] free:205642 free_pcp:491 free_cma:0 [ 1826.675691][T13476] Node 0 active_anon:399104kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1826.704605][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1826.734253][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1826.739535][T13476] Node 0 DMA32 free:39424kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:375948kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2992kB pagetables:16400kB bounce:0kB free_pcp:1684kB local_pcp:248kB free_cma:0kB [ 1826.771773][T13476] lowmem_reserve[]: 0 0 228 228 [ 1826.776823][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23160kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4112kB pagetables:7748kB bounce:0kB free_pcp:280kB local_pcp:56kB free_cma:0kB [ 1826.808694][T13476] lowmem_reserve[]: 0 0 0 0 [ 1826.813809][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1826.826022][T13476] Node 0 DMA32: 1142*4kB (ME) 687*8kB (ME) 383*16kB (ME) 230*32kB (ME) 96*64kB (M) 44*128kB (UM) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39424kB [ 1826.842332][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1826.857957][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.867764][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.877284][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1826.887081][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1826.896614][T13476] 20543 total pagecache pages [ 1826.901332][T13476] 0 pages in swap cache [ 1826.905743][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1826.911929][T13476] Free swap = 0kB [ 1826.915869][T13476] Total swap = 0kB [ 1826.919623][T13476] 1965979 pages RAM [ 1826.923500][T13476] 0 pages HighMem/MovableOnly [ 1826.928375][T13476] 1423249 pages reserved [ 1826.932651][T13476] 0 pages cma reserved [ 1826.937008][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=17233,uid=0 [ 1826.952069][T13476] Out of memory: Killed process 17233 (syz-executor.4) total-vm:74836kB, anon-rss:2212kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1826.979644][ T1820] oom_reaper: reaped process 17233 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1827.055802][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1827.068614][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1827.077335][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.078460][T13476] Call Trace: [ 1827.078460][T13476] dump_stack+0x1c9/0x220 [ 1827.078460][T13476] dump_header+0x1e7/0xd00 [ 1827.078460][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1827.078460][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1827.078460][T13476] ? ___ratelimit+0x542/0x720 [ 1827.078460][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1827.078460][T13476] oom_kill_process+0x216/0x580 [ 1827.078460][T13476] out_of_memory+0x181e/0x1cc0 [ 1827.078460][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1827.078460][T13476] alloc_pages_current+0x67d/0x990 [ 1827.078460][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1827.078460][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1827.078460][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1827.078460][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1827.078460][T13476] ion_ioctl+0x79d/0x1fc0 [ 1827.078460][T13476] ? debug_shrink_set+0x220/0x220 [ 1827.078460][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1827.078460][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1827.078460][T13476] do_syscall_64+0xb8/0x160 [ 1827.078460][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1827.078460][T13476] RIP: 0033:0x45ca29 [ 1827.078460][T13476] Code: Bad RIP value. [ 1827.078460][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.078460][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1827.078460][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1827.078460][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1827.078460][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1827.078460][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1827.255151][T13476] Mem-Info: [ 1827.258407][T13476] active_anon:114685 inactive_anon:7064 isolated_anon:0 [ 1827.258407][T13476] active_file:1991 inactive_file:5412 isolated_file:0 [ 1827.258407][T13476] unevictable:0 dirty:79 writeback:0 unstable:0 [ 1827.258407][T13476] slab_reclaimable:5930 slab_unreclaimable:40563 [ 1827.258407][T13476] mapped:58012 shmem:13129 pagetables:9621 bounce:0 [ 1827.258407][T13476] free:205823 free_pcp:626 free_cma:0 [ 1827.296729][T13476] Node 0 active_anon:396972kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 294912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1827.326813][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1827.356122][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1827.361405][T13476] Node 0 DMA32 free:40180kB min:40716kB low:50380kB high:60044kB reserved_highatomic:0KB active_anon:373904kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2976kB pagetables:16376kB bounce:0kB free_pcp:2064kB local_pcp:1728kB free_cma:0kB [ 1827.393822][T13476] lowmem_reserve[]: 0 0 228 228 [ 1827.398754][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23064kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4108kB pagetables:7668kB bounce:0kB free_pcp:440kB local_pcp:324kB free_cma:0kB [ 1827.430754][T13476] lowmem_reserve[]: 0 0 0 0 [ 1827.435446][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1827.447621][T13476] Node 0 DMA32: 1167*4kB (ME) 721*8kB (UME) 407*16kB (ME) 230*32kB (ME) 96*64kB (M) 44*128kB (UM) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40180kB [ 1827.464249][T13476] Node 0 Normal: 818*4kB (UME) 303*8kB (UME) 104*16kB (UME) 35*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1827.479881][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1827.490012][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1827.499678][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1827.509675][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1827.519428][T13476] 20552 total pagecache pages [ 1827.524342][T13476] 0 pages in swap cache [ 1827.528546][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1827.535292][T13476] Free swap = 0kB [ 1827.539043][T13476] Total swap = 0kB [ 1827.542792][T13476] 1965979 pages RAM [ 1827.546835][T13476] 0 pages HighMem/MovableOnly [ 1827.551570][T13476] 1423249 pages reserved [ 1827.556045][T13476] 0 pages cma reserved [ 1827.560153][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=17107,uid=0 [ 1827.575249][T13476] Out of memory: Killed process 17107 (syz-executor.2) total-vm:74976kB, anon-rss:2220kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1827.850851][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1827.863762][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1827.872586][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1827.873646][T13476] Call Trace: [ 1827.873646][T13476] dump_stack+0x1c9/0x220 [ 1827.873646][T13476] dump_header+0x1e7/0xd00 [ 1827.873646][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1827.873646][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1827.873646][T13476] ? ___ratelimit+0x542/0x720 [ 1827.873646][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1827.873646][T13476] oom_kill_process+0x216/0x580 [ 1827.873646][T13476] out_of_memory+0x181e/0x1cc0 [ 1827.873646][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1827.873646][T13476] alloc_pages_current+0x67d/0x990 [ 1827.873646][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1827.873646][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1827.873646][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1827.873646][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1827.873646][T13476] ion_ioctl+0x79d/0x1fc0 [ 1827.873646][T13476] ? debug_shrink_set+0x220/0x220 [ 1827.873646][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1827.873646][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1827.873646][T13476] do_syscall_64+0xb8/0x160 [ 1827.873646][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1827.873646][T13476] RIP: 0033:0x45ca29 [ 1827.873646][T13476] Code: Bad RIP value. [ 1827.873646][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.873646][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1827.873646][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1827.873646][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1827.873646][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1827.873646][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1828.047044][T13476] Mem-Info: [ 1828.050323][T13476] active_anon:114134 inactive_anon:7064 isolated_anon:0 [ 1828.050323][T13476] active_file:1991 inactive_file:5412 isolated_file:0 [ 1828.050323][T13476] unevictable:0 dirty:85 writeback:0 unstable:0 [ 1828.050323][T13476] slab_reclaimable:5930 slab_unreclaimable:40564 [ 1828.050323][T13476] mapped:58020 shmem:13129 pagetables:9581 bounce:0 [ 1828.050323][T13476] free:206154 free_pcp:527 free_cma:0 21:00:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="b9800000c00f3235000800000f300fba7af505c4a2cdaa8600000000c7442400479f1dd5c744240206000000c7442406000000000f011424b9b60300000f3266ba2000b804000000ef360f07d112c462293d5c8f00c4a1b1598f00800000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 21:00:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0x301}, 0x14}}, 0x0) [ 1828.088509][T13476] Node 0 active_anon:394768kB inactive_anon:21552kB active_file:4kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 294912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1828.117846][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.147222][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1828.152503][T13476] Node 0 DMA32 free:41472kB min:40716kB low:50380kB high:60044kB reserved_highatomic:0KB active_anon:371748kB inactive_anon:2324kB active_file:4kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2960kB pagetables:16320kB bounce:0kB free_pcp:1912kB local_pcp:1572kB free_cma:0kB [ 1828.184863][T13476] lowmem_reserve[]: 0 0 228 228 21:00:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f770000000024000200200009801c0001000d000100636f6e6e6d61726b"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:00:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) [ 1828.189801][T13476] Node 0 Normal free:9696kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23028kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4096kB pagetables:7564kB bounce:0kB free_pcp:196kB local_pcp:80kB free_cma:0kB [ 1828.221454][T13476] lowmem_reserve[]: 0 0 0 0 [ 1828.226276][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1828.238331][T13476] Node 0 DMA32: 1168*4kB (ME) 720*8kB (ME) 408*16kB (ME) 230*32kB (ME) 96*64kB (M) 44*128kB (UM) 17*256kB (UM) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 41472kB [ 1828.254681][T13476] Node 0 Normal: 826*4kB (ME) 301*8kB (ME) 105*16kB (ME) 34*32kB (UM) 19*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9696kB [ 1828.269603][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1828.279347][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1828.288907][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1828.298734][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1828.308186][T13476] 20558 total pagecache pages [ 1828.312913][T13476] 0 pages in swap cache [ 1828.317216][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1828.323330][T13476] Free swap = 0kB [ 1828.327210][T13476] Total swap = 0kB [ 1828.331012][T13476] 1965979 pages RAM [ 1828.334983][T13476] 0 pages HighMem/MovableOnly [ 1828.339720][T13476] 1423249 pages reserved [ 1828.344119][T13476] 0 pages cma reserved 21:00:30 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/157) [ 1828.348414][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=12411,uid=0 [ 1828.363339][T13476] Out of memory: Killed process 12411 (syz-executor.1) total-vm:74844kB, anon-rss:2212kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1828.381698][ T1820] oom_reaper: reaped process 12411 (syz-executor.1), now anon-rss:0kB, file-rss:34624kB, shmem-rss:0kB [ 1828.494353][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) [ 1828.594389][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x80000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 21:00:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x81, 0x1, 0x2, 0x0, 0x0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 21:00:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x94}}, 0x0) 21:00:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x80000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 21:00:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f770000000024000200200009801c0001000d000100636f6e6e6d61726b"], 0x54}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 21:00:31 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/157) 21:00:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x81, 0x1, 0x2, 0x0, 0x0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 21:00:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 21:00:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x94}}, 0x0) 21:00:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x81, 0x1, 0x2, 0x0, 0x0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 1829.329202][T16766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x80000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 1829.450775][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:00:31 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/157) 21:00:31 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x81, 0x1, 0x2, 0x0, 0x0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 21:00:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) 21:00:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x94}}, 0x0) 21:00:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x80000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 21:00:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) 21:00:32 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0xcc, 0x3, 0x1, 0x1}, 0x74) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3", &(0x7f00000000c0), 0x3, r1}, 0x38) 21:00:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x94}}, 0x0) 21:00:32 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/157) 21:00:32 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000000119050300000000000000029f04002400010014000100080001"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 21:00:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000240)='h$\xaaj\xf4\xf3\xc9Fp\xf0\xf4Z&y\xac\xa1(\x86\xb4T\\\x1d/{\xea7r\x00\xbb\xc3\xfb\xb7\r\xc9d~\xe9\xdbE\x8b(<^,Lk-\xe8\xa2\xeeLT.Ic\xa8X\xf4v\xc5\x8a\xc5\xe6\xacjT\xfaW\xaa\f\xe5\x9a\xa7;\xd8|\x1e\xd1\x97\x9c\xb1\xab\xf0N~6#\xe2\xbf\xbcs\xc8\x0e_\xb7\xfe\xed\xd6\x17\x10A\xf7\a!\xef?@\x05X\xbd\x95\x85\x9eo\x9e\xee\xfd##\x01\xab\x98\xcff\x1e$\x9e\xdaL#\x12\xdc\xe0\"\xee!|\x1b\t\xbea\xc41\x03\x0e4*]\xa8Tz\xe2\xf4\xd5\xd9\x84\x91!C\xc1/*\xfd\x04 3o\xd3\x86\xd8C\xd4\fb2U\xe0C\x81\xe6\xb2\xe0\xcf\xf6\\J\x01\x89\xa83%\x11jx\x86\xa8Q\x95\xb7^\x1dG\x1b\xe4\x7f1\xf8\xaf1\f\xb0-\x1e\x9fL\xf2\x06\xef\a\x8a\":\x03\v\x94!\t\x14\xee\x19\xc9\xbe\xd7\xbc8\xce5}A\xc9\xee\xe8\xa7|\b\xac\xc1\xe4\x01\xde\x8fO\xeb\x81-\xb1\xf6\vXQ7v\a_?\xea4\xcf\xe3\xce\xd1\xcb\xeco\x06\x9b\"I\xf0\xb2\x87\xad', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba426d00a5958d6f246c9c8a2a06007b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0xa4000960) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/83, 0x53) 21:00:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb", 0x4a}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="56455b6f4b5cc6f713f9dfc953caac338d965ce0ac67ea2ead6bd22ab4dfe8ba791e6a6a5ea72e93d9318022cd78c0bc9280a85b923371a64bb734af", 0x3c}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20, 0x40841}], 0x2, 0x1) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') lseek(r4, 0x13d, 0x0) sendmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{0x0}], 0x1}}], 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r5) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x10}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x10, 0x2}}}}, 0x100c) [ 1830.238343][T16803] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1830.247975][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1830.257549][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1830.267371][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:00:32 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0xcc, 0x3, 0x1, 0x1}, 0x74) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3", &(0x7f00000000c0), 0x3, r1}, 0x38) 21:00:32 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x8, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r0}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r0, 0x4}) [ 1830.545533][T16803] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1830.555307][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1830.568014][ C1] sd 0:0:1:0: [sg0] tag#4013 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1830.578635][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB: Test Unit Ready [ 1830.585413][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.595251][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.605133][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.615257][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.625090][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.634939][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.644775][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.654613][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.664453][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.674279][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.684135][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.693992][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1830.703830][ C1] sd 0:0:1:0: [sg0] tag#4013 CDB[c0]: 00 00 00 00 00 00 00 00 21:00:32 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x14f) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010100}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) dup(r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80006) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) 21:00:33 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0xcc, 0x3, 0x1, 0x1}, 0x74) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3", &(0x7f00000000c0), 0x3, r1}, 0x38) 21:00:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000240)='h$\xaaj\xf4\xf3\xc9Fp\xf0\xf4Z&y\xac\xa1(\x86\xb4T\\\x1d/{\xea7r\x00\xbb\xc3\xfb\xb7\r\xc9d~\xe9\xdbE\x8b(<^,Lk-\xe8\xa2\xeeLT.Ic\xa8X\xf4v\xc5\x8a\xc5\xe6\xacjT\xfaW\xaa\f\xe5\x9a\xa7;\xd8|\x1e\xd1\x97\x9c\xb1\xab\xf0N~6#\xe2\xbf\xbcs\xc8\x0e_\xb7\xfe\xed\xd6\x17\x10A\xf7\a!\xef?@\x05X\xbd\x95\x85\x9eo\x9e\xee\xfd##\x01\xab\x98\xcff\x1e$\x9e\xdaL#\x12\xdc\xe0\"\xee!|\x1b\t\xbea\xc41\x03\x0e4*]\xa8Tz\xe2\xf4\xd5\xd9\x84\x91!C\xc1/*\xfd\x04 3o\xd3\x86\xd8C\xd4\fb2U\xe0C\x81\xe6\xb2\xe0\xcf\xf6\\J\x01\x89\xa83%\x11jx\x86\xa8Q\x95\xb7^\x1dG\x1b\xe4\x7f1\xf8\xaf1\f\xb0-\x1e\x9fL\xf2\x06\xef\a\x8a\":\x03\v\x94!\t\x14\xee\x19\xc9\xbe\xd7\xbc8\xce5}A\xc9\xee\xe8\xa7|\b\xac\xc1\xe4\x01\xde\x8fO\xeb\x81-\xb1\xf6\vXQ7v\a_?\xea4\xcf\xe3\xce\xd1\xcb\xeco\x06\x9b\"I\xf0\xb2\x87\xad', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba426d00a5958d6f246c9c8a2a06007b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0xa4000960) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/83, 0x53) 21:00:33 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000000119050300000000000000029f04002400010014000100080001"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 21:00:33 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systEmem0\x03w\xbd\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='pagemap\x00') 21:00:33 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systEmem0\x03w\xbd\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='pagemap\x00') 21:00:33 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000000119050300000000000000029f04002400010014000100080001"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 21:00:33 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systEmem0\x03w\xbd\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='pagemap\x00') 21:00:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000240)='h$\xaaj\xf4\xf3\xc9Fp\xf0\xf4Z&y\xac\xa1(\x86\xb4T\\\x1d/{\xea7r\x00\xbb\xc3\xfb\xb7\r\xc9d~\xe9\xdbE\x8b(<^,Lk-\xe8\xa2\xeeLT.Ic\xa8X\xf4v\xc5\x8a\xc5\xe6\xacjT\xfaW\xaa\f\xe5\x9a\xa7;\xd8|\x1e\xd1\x97\x9c\xb1\xab\xf0N~6#\xe2\xbf\xbcs\xc8\x0e_\xb7\xfe\xed\xd6\x17\x10A\xf7\a!\xef?@\x05X\xbd\x95\x85\x9eo\x9e\xee\xfd##\x01\xab\x98\xcff\x1e$\x9e\xdaL#\x12\xdc\xe0\"\xee!|\x1b\t\xbea\xc41\x03\x0e4*]\xa8Tz\xe2\xf4\xd5\xd9\x84\x91!C\xc1/*\xfd\x04 3o\xd3\x86\xd8C\xd4\fb2U\xe0C\x81\xe6\xb2\xe0\xcf\xf6\\J\x01\x89\xa83%\x11jx\x86\xa8Q\x95\xb7^\x1dG\x1b\xe4\x7f1\xf8\xaf1\f\xb0-\x1e\x9fL\xf2\x06\xef\a\x8a\":\x03\v\x94!\t\x14\xee\x19\xc9\xbe\xd7\xbc8\xce5}A\xc9\xee\xe8\xa7|\b\xac\xc1\xe4\x01\xde\x8fO\xeb\x81-\xb1\xf6\vXQ7v\a_?\xea4\xcf\xe3\xce\xd1\xcb\xeco\x06\x9b\"I\xf0\xb2\x87\xad', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba426d00a5958d6f246c9c8a2a06007b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0xa4000960) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/83, 0x53) 21:00:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb", 0x4a}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="56455b6f4b5cc6f713f9dfc953caac338d965ce0ac67ea2ead6bd22ab4dfe8ba791e6a6a5ea72e93d9318022cd78c0bc9280a85b923371a64bb734af", 0x3c}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20, 0x40841}], 0x2, 0x1) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') lseek(r4, 0x13d, 0x0) sendmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{0x0}], 0x1}}], 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r5) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x10}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x10, 0x2}}}}, 0x100c) 21:00:34 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systEmem0\x03w\xbd\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x7f\x00uB\x00\x00\x00\x00\x00\x00\x00\vw\x82\xdb\x97\xb1=e\x89|\xe0\xad!\x12\xd6:\xf3\rU\x7fX;\x12.\x87\xe7\x9c\xa924L\x05\xf3\xad\x83\xe5\xa9\x8e\x99\xea\xb0V\xe14\x9biN\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92(XF{\x94f\xb1J\x89|\x14C\x9eTZA\x9f\xf6v\xd8-\x82\x91\bG\xfcO\xfe\xac\xf9\xf0Y*L&\x00G\xc3\xd7\x11t\'\x9c\x04]p\x94\x06\xd5\xbe\xd7\x83P\xfc\x84q0J\xf2`_\xcb\xd0\xd3i\xf3d\xeb>\x9aE\x95\n\xcb.\x81\x8c\x15Y\xc3\xf6(\xf0\f9\xe1Q\xb3\xa2\x94\xddX\xce,\"\xe2\x8b\xc3b\x8d>\xa4Y!B\x01\x96\xee\x02\xed \xc0\x89DN\x8cgE\x13\xac\x8c;\xe1x \xa3\x9c\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xd5\xc4}\xbd\xf2\x88\xc5\x1d+\xdaA\x9f\xa9\x9e\xe0Ma\xabl\x00\x1f]\xc9&\xbaB\x89#M\xd2\x7f3M\xaf7\xe6\xd4\x0e\xbd,\t\x9d\xb6:\xfegK4\xbffF\xf1\x87@\xcaN\x16>\x0e\xe8#\x7f\xf2\xf8\xd6\xa8L\"\xcdG\xd9\xeeH9\xaa', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e"], 0x3c) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='pagemap\x00') 21:00:34 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x5, 0x1d, 0xcc, 0x3, 0x1, 0x1}, 0x74) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)="c3", &(0x7f00000000c0), 0x3, r1}, 0x38) 21:00:34 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000000119050300000000000000029f04002400010014000100080001"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 21:00:34 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:00:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000240)='h$\xaaj\xf4\xf3\xc9Fp\xf0\xf4Z&y\xac\xa1(\x86\xb4T\\\x1d/{\xea7r\x00\xbb\xc3\xfb\xb7\r\xc9d~\xe9\xdbE\x8b(<^,Lk-\xe8\xa2\xeeLT.Ic\xa8X\xf4v\xc5\x8a\xc5\xe6\xacjT\xfaW\xaa\f\xe5\x9a\xa7;\xd8|\x1e\xd1\x97\x9c\xb1\xab\xf0N~6#\xe2\xbf\xbcs\xc8\x0e_\xb7\xfe\xed\xd6\x17\x10A\xf7\a!\xef?@\x05X\xbd\x95\x85\x9eo\x9e\xee\xfd##\x01\xab\x98\xcff\x1e$\x9e\xdaL#\x12\xdc\xe0\"\xee!|\x1b\t\xbea\xc41\x03\x0e4*]\xa8Tz\xe2\xf4\xd5\xd9\x84\x91!C\xc1/*\xfd\x04 3o\xd3\x86\xd8C\xd4\fb2U\xe0C\x81\xe6\xb2\xe0\xcf\xf6\\J\x01\x89\xa83%\x11jx\x86\xa8Q\x95\xb7^\x1dG\x1b\xe4\x7f1\xf8\xaf1\f\xb0-\x1e\x9fL\xf2\x06\xef\a\x8a\":\x03\v\x94!\t\x14\xee\x19\xc9\xbe\xd7\xbc8\xce5}A\xc9\xee\xe8\xa7|\b\xac\xc1\xe4\x01\xde\x8fO\xeb\x81-\xb1\xf6\vXQ7v\a_?\xea4\xcf\xe3\xce\xd1\xcb\xeco\x06\x9b\"I\xf0\xb2\x87\xad', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba426d00a5958d6f246c9c8a2a06007b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='./control\x00', 0xa4000960) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/83, 0x53) 21:00:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r3, 0x0, 0x1, 0x0, 0x0) msgsnd(r3, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgrcv(r3, &(0x7f0000000200)={0x0, ""/67}, 0x4b, 0x0, 0x0) 21:00:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000018efdc)="140000004e001f0014f9f4070009040002000710", 0x14) [ 1832.628478][ C1] sd 0:0:1:0: [sg0] tag#4029 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1832.639114][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB: Test Unit Ready [ 1832.645985][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.655829][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.666297][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.676293][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.686115][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.695946][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.705829][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.715674][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:00:34 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3f) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) [ 1832.725530][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.735395][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.745327][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.755202][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1832.765060][ C1] sd 0:0:1:0: [sg0] tag#4029 CDB[c0]: 00 00 00 00 00 00 00 00 21:00:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000, 0x201e11}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:00:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000018efdc)="140000004e001f0014f9f4070009040002000710", 0x14) 21:00:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c}) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 21:00:36 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3f) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 21:00:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb", 0x4a}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="56455b6f4b5cc6f713f9dfc953caac338d965ce0ac67ea2ead6bd22ab4dfe8ba791e6a6a5ea72e93d9318022cd78c0bc9280a85b923371a64bb734af", 0x3c}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20, 0x40841}], 0x2, 0x1) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') lseek(r4, 0x13d, 0x0) sendmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{0x0}], 0x1}}], 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r5) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x10}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x10, 0x2}}}}, 0x100c) 21:00:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c}) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 21:00:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000018efdc)="140000004e001f0014f9f4070009040002000710", 0x14) 21:00:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x5}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 21:00:36 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x1a, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x2}, 0x16, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) [ 1834.574880][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1834.575911][ C1] sd 0:0:1:0: [sg0] tag#3971 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1834.587650][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1834.598086][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB: Test Unit Ready [ 1834.597500][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1834.597500][T13476] Call Trace: [ 1834.606913][T13476] dump_stack+0x1c9/0x220 [ 1834.606913][T13476] dump_header+0x1e7/0xd00 [ 1834.606913][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1834.613666][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1834.606913][T13476] ? ___ratelimit+0x542/0x720 [ 1834.606913][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1834.606913][T13476] oom_kill_process+0x216/0x580 [ 1834.627140][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] out_of_memory+0x181e/0x1cc0 [ 1834.635998][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1834.651523][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] alloc_pages_current+0x67d/0x990 [ 1834.606913][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1834.662394][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1834.606913][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1834.606913][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1834.672601][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] ion_ioctl+0x79d/0x1fc0 [ 1834.606913][T13476] ? debug_shrink_set+0x220/0x220 [ 1834.687158][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1834.606913][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1834.606913][T13476] do_syscall_64+0xb8/0x160 [ 1834.702364][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1834.606913][T13476] RIP: 0033:0x45ca29 [ 1834.606913][T13476] Code: Bad RIP value. [ 1834.717246][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21:00:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3f) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) [ 1834.606913][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1834.731976][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1834.606913][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1834.606913][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1834.606913][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1834.742819][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.606913][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1834.749876][T13476] Mem-Info: [ 1834.758919][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1834.763323][T13476] active_anon:113754 inactive_anon:7064 isolated_anon:0 [ 1834.763323][T13476] active_file:1993 inactive_file:5592 isolated_file:0 [ 1834.763323][T13476] unevictable:0 dirty:107 writeback:0 unstable:0 [ 1834.763323][T13476] slab_reclaimable:5934 slab_unreclaimable:40562 [ 1834.763323][T13476] mapped:58112 shmem:13131 pagetables:9788 bounce:0 [ 1834.763323][T13476] free:204766 free_pcp:76 free_cma:0 [ 1834.768478][ C1] sd 0:0:1:0: [sg0] tag#3971 CDB[c0]: 00 00 00 00 00 00 00 00 [ 1834.778180][T13476] Node 0 active_anon:392600kB inactive_anon:21552kB active_file:12kB inactive_file:412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 290816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1834.983375][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1835.012623][T13476] lowmem_reserve[]: 0 908 1136 1136 21:00:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000018efdc)="140000004e001f0014f9f4070009040002000710", 0x14) [ 1835.018064][T13476] Node 0 DMA32 free:39104kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:369580kB inactive_anon:2324kB active_file:8kB inactive_file:352kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2944kB pagetables:16220kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1835.050120][T13476] lowmem_reserve[]: 0 0 228 228 [ 1835.055359][T13476] Node 0 Normal free:9720kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23020kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4092kB pagetables:7568kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 1835.087202][T13476] lowmem_reserve[]: 0 0 0 0 [ 1835.091790][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1835.103922][T13476] Node 0 DMA32: 1128*4kB (ME) 714*8kB (UME) 399*16kB (UME) 221*32kB (ME) 95*64kB (UM) 43*128kB (M) 15*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39104kB [ 1835.120586][T13476] Node 0 Normal: 822*4kB (UME) 305*8kB (UME) 105*16kB (UME) 31*32kB (M) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9360kB [ 1835.135726][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.145519][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.155048][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1835.164756][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1835.174255][T13476] 20729 total pagecache pages [ 1835.179072][T13476] 0 pages in swap cache [ 1835.183304][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1835.189589][T13476] Free swap = 0kB [ 1835.193401][T13476] Total swap = 0kB [ 1835.197309][T13476] 1965979 pages RAM [ 1835.201233][T13476] 0 pages HighMem/MovableOnly [ 1835.206111][T13476] 1423249 pages reserved [ 1835.210385][T13476] 0 pages cma reserved 21:00:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c}) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) [ 1835.214672][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=7382,uid=0 [ 1835.230200][T13476] Out of memory: Killed process 7382 (syz-executor.4) total-vm:74840kB, anon-rss:2208kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1835.248263][ T1820] oom_reaper: reaped process 7382 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 21:00:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x5}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 1835.872677][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1835.886095][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1835.894822][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1835.895282][T13476] Call Trace: [ 1835.895282][T13476] dump_stack+0x1c9/0x220 [ 1835.895282][T13476] dump_header+0x1e7/0xd00 [ 1835.895282][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1835.895282][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1835.926738][T13476] ? ___ratelimit+0x542/0x720 [ 1835.926738][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1835.937242][T13476] oom_kill_process+0x216/0x580 [ 1835.937242][T13476] out_of_memory+0x181e/0x1cc0 [ 1835.937242][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1835.937242][T13476] alloc_pages_current+0x67d/0x990 [ 1835.937242][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1835.937242][T13476] ? kmsan_get_metadata+0x11d/0x180 21:00:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x5}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) [ 1835.937242][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1835.937242][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1835.937242][T13476] ion_ioctl+0x79d/0x1fc0 [ 1835.937242][T13476] ? debug_shrink_set+0x220/0x220 [ 1835.937242][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1835.937242][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1835.937242][T13476] do_syscall_64+0xb8/0x160 [ 1835.937242][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1835.937242][T13476] RIP: 0033:0x45ca29 [ 1835.937242][T13476] Code: Bad RIP value. [ 1835.937242][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1835.937242][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1835.937242][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1835.937242][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1835.937242][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1835.937242][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1836.071698][T13476] Mem-Info: [ 1836.075107][T13476] active_anon:113236 inactive_anon:7064 isolated_anon:0 [ 1836.075107][T13476] active_file:1992 inactive_file:5593 isolated_file:0 [ 1836.075107][T13476] unevictable:0 dirty:115 writeback:0 unstable:0 [ 1836.075107][T13476] slab_reclaimable:5934 slab_unreclaimable:40563 [ 1836.075107][T13476] mapped:58043 shmem:13131 pagetables:9734 bounce:0 [ 1836.075107][T13476] free:205240 free_pcp:151 free_cma:0 [ 1836.113447][T13476] Node 0 active_anon:392492kB inactive_anon:21552kB active_file:8kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 290816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1836.142653][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.171913][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1836.177395][T13476] Node 0 DMA32 free:39104kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:369480kB inactive_anon:2324kB active_file:8kB inactive_file:412kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2928kB pagetables:16220kB bounce:0kB free_pcp:348kB local_pcp:0kB free_cma:0kB [ 1836.209420][T13476] lowmem_reserve[]: 0 0 228 228 [ 1836.214521][T13476] Node 0 Normal free:9300kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23012kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4092kB pagetables:7460kB bounce:0kB free_pcp:256kB local_pcp:56kB free_cma:0kB [ 1836.246122][T13476] lowmem_reserve[]: 0 0 0 0 [ 1836.250714][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB 21:00:38 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x1a, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x2}, 0x16, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) [ 1836.262859][T13476] Node 0 DMA32: 1128*4kB (ME) 714*8kB (UME) 399*16kB (UME) 221*32kB (ME) 95*64kB (UM) 43*128kB (M) 15*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39104kB [ 1836.279336][T13476] Node 0 Normal: 807*4kB (UME) 305*8kB (UME) 105*16kB (UME) 31*32kB (M) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9300kB [ 1836.294771][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.304678][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.314258][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.324085][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.333920][T13476] 20736 total pagecache pages [ 1836.338648][T13476] 0 pages in swap cache [ 1836.342848][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1836.349207][T13476] Free swap = 0kB [ 1836.352960][T13476] Total swap = 0kB [ 1836.356929][T13476] 1965979 pages RAM [ 1836.360778][T13476] 0 pages HighMem/MovableOnly [ 1836.365682][T13476] 1423249 pages reserved [ 1836.369987][T13476] 0 pages cma reserved [ 1836.374354][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=7369,uid=0 [ 1836.389286][T13476] Out of memory: Killed process 7369 (syz-executor.4) total-vm:74840kB, anon-rss:2208kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1836.407483][ T1820] oom_reaper: reaped process 7369 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 21:00:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c}) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) [ 1836.428621][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1836.441392][T13476] CPU: 0 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1836.450122][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1836.451225][T13476] Call Trace: [ 1836.451225][T13476] dump_stack+0x1c9/0x220 [ 1836.451225][T13476] dump_header+0x1e7/0xd00 [ 1836.451225][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1836.451225][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1836.451225][T13476] ? ___ratelimit+0x542/0x720 [ 1836.451225][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1836.451225][T13476] oom_kill_process+0x216/0x580 [ 1836.451225][T13476] out_of_memory+0x181e/0x1cc0 [ 1836.451225][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1836.451225][T13476] alloc_pages_current+0x67d/0x990 [ 1836.451225][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1836.451225][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1836.451225][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1836.451225][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1836.451225][T13476] ion_ioctl+0x79d/0x1fc0 [ 1836.451225][T13476] ? debug_shrink_set+0x220/0x220 [ 1836.451225][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1836.451225][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1836.451225][T13476] do_syscall_64+0xb8/0x160 [ 1836.451225][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1836.563289][T13476] RIP: 0033:0x45ca29 [ 1836.563289][T13476] Code: Bad RIP value. [ 1836.563289][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1836.563289][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1836.563289][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1836.563289][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1836.563289][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1836.563289][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1836.626574][T13476] Mem-Info: [ 1836.629841][T13476] active_anon:112707 inactive_anon:7064 isolated_anon:0 [ 1836.629841][T13476] active_file:1992 inactive_file:5594 isolated_file:0 [ 1836.629841][T13476] unevictable:0 dirty:115 writeback:0 unstable:0 [ 1836.629841][T13476] slab_reclaimable:5934 slab_unreclaimable:40563 [ 1836.629841][T13476] mapped:58043 shmem:13131 pagetables:9659 bounce:0 [ 1836.629841][T13476] free:205803 free_pcp:215 free_cma:0 [ 1836.668112][T13476] Node 0 active_anon:392424kB inactive_anon:21552kB active_file:8kB inactive_file:420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 290816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1836.696999][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1836.726502][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1836.731791][T13476] Node 0 DMA32 free:39104kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:369412kB inactive_anon:2324kB active_file:8kB inactive_file:416kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2928kB pagetables:16120kB bounce:0kB free_pcp:564kB local_pcp:0kB free_cma:0kB [ 1836.763867][T13476] lowmem_reserve[]: 0 0 228 228 [ 1836.768805][T13476] Node 0 Normal free:9300kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23012kB inactive_anon:19228kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4092kB pagetables:7460kB bounce:0kB free_pcp:296kB local_pcp:56kB free_cma:0kB [ 1836.800460][T13476] lowmem_reserve[]: 0 0 0 0 [ 1836.805240][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1836.817371][T13476] Node 0 DMA32: 1128*4kB (ME) 714*8kB (UME) 399*16kB (UME) 222*32kB (UME) 95*64kB (UM) 43*128kB (M) 15*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39136kB [ 1836.833739][T13476] Node 0 Normal: 807*4kB (UME) 305*8kB (UME) 105*16kB (UME) 31*32kB (M) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9300kB [ 1836.848910][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.858753][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.868230][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1836.877960][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1836.887386][T13476] 20746 total pagecache pages [ 1836.893296][T13476] 0 pages in swap cache [ 1836.897636][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1836.903845][T13476] Free swap = 0kB [ 1836.907595][T13476] Total swap = 0kB [ 1836.911351][T13476] 1965979 pages RAM [ 1836.915409][T13476] 0 pages HighMem/MovableOnly [ 1836.920132][T13476] 1423249 pages reserved [ 1836.924535][T13476] 0 pages cma reserved [ 1836.928641][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=7368,uid=0 [ 1836.943761][T13476] Out of memory: Killed process 7368 (syz-executor.3) total-vm:74840kB, anon-rss:2212kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1836.961965][ T1820] oom_reaper: reaped process 7368 (syz-executor.3), now anon-rss:0kB, file-rss:34624kB, shmem-rss:0kB 21:00:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e2671e700000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7"], 0x14f) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x44045}, {&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000900)}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52aeb", 0x4a}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4000001}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="56455b6f4b5cc6f713f9dfc953caac338d965ce0ac67ea2ead6bd22ab4dfe8ba791e6a6a5ea72e93d9318022cd78c0bc9280a85b923371a64bb734af", 0x3c}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20, 0x40841}], 0x2, 0x1) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') lseek(r4, 0x13d, 0x0) sendmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002100)=[{0x0}], 0x1}}], 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r5) write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x10}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x10, 0x2}}}}, 0x100c) 21:00:39 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1}) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3f) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 21:00:39 executing program 0: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f00000007c0)='/dev/midi#\x00', 0xc00000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0xfffffffffffffffe) 21:00:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x5}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 21:00:39 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x3, &(0x7f0000cbc000)=""/240, &(0x7f0000000000)=0xf0) [ 1837.740920][ C0] sd 0:0:1:0: [sg0] tag#3972 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1837.751555][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB: Test Unit Ready [ 1837.759094][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.768925][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.778761][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.788749][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.798812][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.808759][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.818637][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.828594][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.838475][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.848329][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.859155][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.869053][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1837.879002][ C0] sd 0:0:1:0: [sg0] tag#3972 CDB[c0]: 00 00 00 00 00 00 00 00 21:00:40 executing program 0: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f00000007c0)='/dev/midi#\x00', 0xc00000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0xfffffffffffffffe) 21:00:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0xea1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 21:00:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000000", 0x20) 21:00:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x1a, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x2}, 0x16, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) 21:00:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 21:00:40 executing program 0: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f00000007c0)='/dev/midi#\x00', 0xc00000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0xfffffffffffffffe) 21:00:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001f40)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="d083b8778d9e055daedb2fb289f629afab3edb0b25311ef1e77295a000a43e2610b846a5a59c06a800d3d76df145cad9aaddefb439dffeeefe70124989633510139d58215535682c572c0200f0ffff2d7c837bb19dbcaee855e962c24caf3ef84bdd7203429bca9254", 0x69}, {&(0x7f00000016c0)="7507747dd9bcc24bc91de456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843f0000334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcf", 0x60}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 21:00:41 executing program 0: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f00000007c0)='/dev/midi#\x00', 0xc00000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0xfffffffffffffffe) 21:00:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 21:00:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000000", 0x20) 21:00:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 21:00:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 21:00:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0xea1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 21:00:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000000", 0x20) 21:00:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) [ 1839.577204][T16997] ALSA: seq fatal error: cannot create timer (-22) [ 1840.044510][T13476] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1840.057332][T13476] CPU: 1 PID: 13476 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1840.066080][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1840.067177][T13476] Call Trace: [ 1840.067177][T13476] dump_stack+0x1c9/0x220 [ 1840.067177][T13476] dump_header+0x1e7/0xd00 [ 1840.067177][T13476] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1840.067177][T13476] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1840.067177][T13476] ? ___ratelimit+0x542/0x720 [ 1840.103792][T13476] ? task_will_free_mem+0x2c9/0x830 [ 1840.103792][T13476] oom_kill_process+0x216/0x580 [ 1840.103792][T13476] out_of_memory+0x181e/0x1cc0 [ 1840.103792][T13476] __alloc_pages_nodemask+0x4a18/0x5dc0 [ 1840.103792][T13476] alloc_pages_current+0x67d/0x990 [ 1840.103792][T13476] ion_page_pool_alloc+0x6db/0x830 [ 1840.103792][T13476] ? kmsan_get_metadata+0x11d/0x180 [ 1840.103792][T13476] ion_system_heap_allocate+0x3bd/0x13f0 [ 1840.103792][T13476] ? ion_system_contig_heap_create+0x210/0x210 [ 1840.103792][T13476] ion_ioctl+0x79d/0x1fc0 [ 1840.103792][T13476] ? debug_shrink_set+0x220/0x220 [ 1840.103792][T13476] __se_sys_ioctl+0x2e9/0x410 [ 1840.103792][T13476] __x64_sys_ioctl+0x4a/0x70 [ 1840.103792][T13476] do_syscall_64+0xb8/0x160 [ 1840.173801][T13476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1840.173801][T13476] RIP: 0033:0x45ca29 [ 1840.173801][T13476] Code: Bad RIP value. [ 1840.173801][T13476] RSP: 002b:00007f2233bb7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1840.173801][T13476] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1840.173801][T13476] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1840.173801][T13476] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1840.173801][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1840.173801][T13476] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2233bb86d4 [ 1840.241596][T13476] Mem-Info: [ 1840.244987][T13476] active_anon:112120 inactive_anon:7064 isolated_anon:0 [ 1840.244987][T13476] active_file:1996 inactive_file:5650 isolated_file:0 [ 1840.244987][T13476] unevictable:0 dirty:131 writeback:0 unstable:0 [ 1840.244987][T13476] slab_reclaimable:5930 slab_unreclaimable:40556 [ 1840.244987][T13476] mapped:58055 shmem:13131 pagetables:9609 bounce:0 [ 1840.244987][T13476] free:206406 free_pcp:287 free_cma:0 [ 1840.283295][T13476] Node 0 active_anon:392276kB inactive_anon:21552kB active_file:12kB inactive_file:420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210576kB dirty:8kB writeback:0kB shmem:23256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 290816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1840.312354][T13476] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1840.341496][T13476] lowmem_reserve[]: 0 908 1136 1136 [ 1840.347051][T13476] Node 0 DMA32 free:39232kB min:38668kB low:48332kB high:57996kB reserved_highatomic:0KB active_anon:369276kB inactive_anon:2324kB active_file:8kB inactive_file:416kB unevictable:0kB writepending:8kB present:3129332kB managed:933928kB mlocked:0kB kernel_stack:2912kB pagetables:16104kB bounce:0kB free_pcp:732kB local_pcp:668kB free_cma:0kB [ 1840.379358][T13476] lowmem_reserve[]: 0 0 228 228 [ 1840.384462][T13476] Node 0 Normal free:9300kB min:9708kB low:12132kB high:14556kB reserved_highatomic:0KB active_anon:23000kB inactive_anon:19228kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:233472kB mlocked:0kB kernel_stack:4076kB pagetables:7364kB bounce:0kB free_pcp:416kB local_pcp:260kB free_cma:0kB [ 1840.416157][T13476] lowmem_reserve[]: 0 0 0 0 [ 1840.420769][T13476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1840.432904][T13476] Node 0 DMA32: 1128*4kB (ME) 714*8kB (UME) 399*16kB (UME) 227*32kB (UME) 95*64kB (UM) 43*128kB (M) 15*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39296kB [ 1840.449608][T13476] Node 0 Normal: 807*4kB (UME) 305*8kB (UME) 105*16kB (UME) 31*32kB (M) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 9300kB [ 1840.465776][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.475565][T13476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.485103][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1840.495018][T13476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1840.504520][T13476] 20788 total pagecache pages [ 1840.509236][T13476] 0 pages in swap cache [ 1840.513439][T13476] Swap cache stats: add 0, delete 0, find 0/0 [ 1840.519776][T13476] Free swap = 0kB [ 1840.523711][T13476] Total swap = 0kB [ 1840.527490][T13476] 1965979 pages RAM [ 1840.531368][T13476] 0 pages HighMem/MovableOnly [ 1840.536247][T13476] 1423249 pages reserved [ 1840.540550][T13476] 0 pages cma reserved [ 1840.545181][T13476] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=7348,uid=0 [ 1840.560543][T13476] Out of memory: Killed process 7348 (syz-executor.4) total-vm:74840kB, anon-rss:2208kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 21:00:42 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x1a, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x2}, 0x16, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) 21:00:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df82", 0x21) 21:00:42 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 21:00:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c000000000000000000000004000000", 0x20) 21:00:42 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 21:00:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0xea1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 1840.587208][ T1820] oom_reaper: reaped process 7348 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1840.659504][T17012] ALSA: seq fatal error: cannot create timer (-22) [ 1840.701178][T17016] ALSA: seq fatal error: cannot create timer (-22) 21:00:43 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 21:00:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="c6edbccf", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1841.421927][T17026] ALSA: seq fatal error: cannot create timer (-22) [ 1841.496664][T17038] ===================================================== [ 1841.503578][T17038] BUG: KMSAN: uninit-value in bpf_skb_get_nlattr_nest+0x14c/0x2f0 [ 1841.503578][T17038] CPU: 0 PID: 17038 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1841.503578][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1841.526185][T17038] Call Trace: [ 1841.526185][T17038] dump_stack+0x1c9/0x220 [ 1841.526185][T17038] kmsan_report+0xf7/0x1e0 [ 1841.526185][T17038] __msan_warning+0x58/0xa0 [ 1841.526185][T17038] bpf_skb_get_nlattr_nest+0x14c/0x2f0 [ 1841.526185][T17038] ___bpf_prog_run+0x214d/0x97a0 [ 1841.526185][T17038] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1841.526185][T17038] ? bpf_skb_get_nlattr+0x290/0x290 [ 1841.526185][T17038] __bpf_prog_run32+0x101/0x170 [ 1841.526185][T17038] ? kmsan_get_metadata+0x4f/0x180 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] ? ___bpf_prog_run+0x97a0/0x97a0 [ 1841.526185][T17038] sk_filter_trim_cap+0x42a/0xcc0 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] unix_dgram_sendmsg+0x1987/0x3c30 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1841.526185][T17038] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 1841.526185][T17038] ? unix_dgram_peer_wake_me+0x7d0/0x7d0 [ 1841.526185][T17038] ____sys_sendmsg+0x12b6/0x1350 [ 1841.526185][T17038] __sys_sendmmsg+0x5fe/0xd60 [ 1841.526185][T17038] ? kmsan_internal_set_origin+0x75/0xb0 [ 1841.526185][T17038] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1841.526185][T17038] ? kmsan_copy_to_user+0x81/0x90 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1841.526185][T17038] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1841.526185][T17038] __se_sys_sendmmsg+0xbd/0xe0 [ 1841.526185][T17038] __x64_sys_sendmmsg+0x56/0x70 [ 1841.526185][T17038] do_syscall_64+0xb8/0x160 [ 1841.526185][T17038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1841.526185][T17038] RIP: 0033:0x45ca29 [ 1841.526185][T17038] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1841.526185][T17038] RSP: 002b:00007f2233b96c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1841.526185][T17038] RAX: ffffffffffffffda RBX: 00000000004fc580 RCX: 000000000045ca29 [ 1841.526185][T17038] RDX: 0000000000000002 RSI: 0000000020003340 RDI: 0000000000000003 [ 1841.526185][T17038] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.526185][T17038] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1841.526185][T17038] R13: 00000000000008dd R14: 00000000004cba1f R15: 00007f2233b976d4 [ 1841.526185][T17038] [ 1841.526185][T17038] Uninit was stored to memory at: [ 1841.526185][T17038] kmsan_internal_chain_origin+0xad/0x130 [ 1841.526185][T17038] __msan_chain_origin+0x50/0x90 [ 1841.526185][T17038] ___bpf_prog_run+0x6cbe/0x97a0 [ 1841.526185][T17038] __bpf_prog_run32+0x101/0x170 [ 1841.526185][T17038] sk_filter_trim_cap+0x42a/0xcc0 [ 1841.526185][T17038] unix_dgram_sendmsg+0x1987/0x3c30 [ 1841.526185][T17038] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 1841.526185][T17038] ____sys_sendmsg+0x12b6/0x1350 [ 1841.526185][T17038] __sys_sendmmsg+0x5fe/0xd60 [ 1841.526185][T17038] __se_sys_sendmmsg+0xbd/0xe0 [ 1841.526185][T17038] __x64_sys_sendmmsg+0x56/0x70 [ 1841.526185][T17038] do_syscall_64+0xb8/0x160 [ 1841.526185][T17038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1841.526185][T17038] [ 1841.526185][T17038] Uninit was stored to memory at: [ 1841.526185][T17038] kmsan_internal_chain_origin+0xad/0x130 [ 1841.526185][T17038] __msan_chain_origin+0x50/0x90 [ 1841.526185][T17038] ___bpf_prog_run+0x6c64/0x97a0 [ 1841.526185][T17038] __bpf_prog_run32+0x101/0x170 [ 1841.526185][T17038] sk_filter_trim_cap+0x42a/0xcc0 [ 1841.526185][T17038] unix_dgram_sendmsg+0x1987/0x3c30 [ 1841.526185][T17038] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 1841.526185][T17038] ____sys_sendmsg+0x12b6/0x1350 [ 1841.526185][T17038] __sys_sendmmsg+0x5fe/0xd60 [ 1841.526185][T17038] __se_sys_sendmmsg+0xbd/0xe0 [ 1841.526185][T17038] __x64_sys_sendmmsg+0x56/0x70 [ 1841.526185][T17038] do_syscall_64+0xb8/0x160 [ 1841.526185][T17038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1841.526185][T17038] [ 1841.526185][T17038] Local variable ----regs@__bpf_prog_run32 created at: [ 1841.526185][T17038] __bpf_prog_run32+0x87/0x170 [ 1841.526185][T17038] __bpf_prog_run32+0x87/0x170 [ 1841.526185][T17038] ===================================================== [ 1841.526185][T17038] Disabling lock debugging due to kernel taint [ 1841.526185][T17038] Kernel panic - not syncing: panic_on_warn set ... [ 1841.526185][T17038] CPU: 0 PID: 17038 Comm: syz-executor.3 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 1841.526185][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1841.526185][T17038] Call Trace: [ 1841.526185][T17038] dump_stack+0x1c9/0x220 [ 1841.526185][T17038] panic+0x3d5/0xc3e [ 1841.526185][T17038] kmsan_report+0x1df/0x1e0 [ 1841.526185][T17038] __msan_warning+0x58/0xa0 [ 1841.526185][T17038] bpf_skb_get_nlattr_nest+0x14c/0x2f0 [ 1841.526185][T17038] ___bpf_prog_run+0x214d/0x97a0 [ 1841.526185][T17038] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1841.526185][T17038] ? bpf_skb_get_nlattr+0x290/0x290 [ 1841.526185][T17038] __bpf_prog_run32+0x101/0x170 [ 1841.526185][T17038] ? kmsan_get_metadata+0x4f/0x180 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] ? ___bpf_prog_run+0x97a0/0x97a0 [ 1841.526185][T17038] sk_filter_trim_cap+0x42a/0xcc0 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] unix_dgram_sendmsg+0x1987/0x3c30 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1841.526185][T17038] unix_seqpacket_sendmsg+0x26c/0x2e0 [ 1841.526185][T17038] ? unix_dgram_peer_wake_me+0x7d0/0x7d0 [ 1841.526185][T17038] ____sys_sendmsg+0x12b6/0x1350 [ 1841.526185][T17038] __sys_sendmmsg+0x5fe/0xd60 [ 1841.526185][T17038] ? kmsan_internal_set_origin+0x75/0xb0 [ 1841.526185][T17038] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1841.526185][T17038] ? kmsan_copy_to_user+0x81/0x90 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? kmsan_get_metadata+0x11d/0x180 [ 1841.526185][T17038] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1841.526185][T17038] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1841.526185][T17038] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1841.526185][T17038] __se_sys_sendmmsg+0xbd/0xe0 [ 1841.526185][T17038] __x64_sys_sendmmsg+0x56/0x70 [ 1841.526185][T17038] do_syscall_64+0xb8/0x160 [ 1841.526185][T17038] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1841.526185][T17038] RIP: 0033:0x45ca29 [ 1841.526185][T17038] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1841.526185][T17038] RSP: 002b:00007f2233b96c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1841.526185][T17038] RAX: ffffffffffffffda RBX: 00000000004fc580 RCX: 000000000045ca29 [ 1841.526185][T17038] RDX: 0000000000000002 RSI: 0000000020003340 RDI: 0000000000000003 [ 1841.526185][T17038] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1841.526185][T17038] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1841.526185][T17038] R13: 00000000000008dd R14: 00000000004cba1f R15: 00007f2233b976d4 [ 1841.526185][T17038] Kernel Offset: 0x18e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1841.526185][T17038] Rebooting in 86400 seconds..