}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@default) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r3, r5}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000080)) [ 2722.646342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:10:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2002d03000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0x4000}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2722.778076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2722.802770] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 17:10:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080004bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:45 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) [ 2722.834862] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2722.849027] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2722.861663] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2722.898520] CPU: 1 PID: 32722 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2722.906446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2722.915807] Call Trace: [ 2722.918415] dump_stack+0x1b2/0x283 [ 2722.922061] warn_alloc.cold+0x96/0x1af [ 2722.926050] ? zone_watermark_ok_safe+0x250/0x250 [ 2722.930916] ? wait_for_completion_io+0x10/0x10 [ 2722.935607] __alloc_pages_nodemask+0x2129/0x2730 [ 2722.940487] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2722.945352] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2722.950223] ? HARDIRQ_verbose+0x10/0x10 [ 2722.954307] ? do_raw_spin_unlock+0x164/0x250 [ 2722.958818] alloc_pages_current+0xe7/0x1e0 [ 2722.963150] kvm_mmu_create+0xd1/0x1c0 [ 2722.967050] kvm_arch_vcpu_init+0x282/0x890 [ 2722.971383] ? alloc_pages_current+0xef/0x1e0 [ 2722.975891] kvm_vcpu_init+0x26d/0x360 [ 2722.979788] vmx_create_vcpu+0xf5/0x2950 [ 2722.983863] ? __mutex_unlock_slowpath+0x75/0x780 [ 2722.988714] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2722.993745] ? alloc_loaded_vmcs+0x240/0x240 [ 2722.998170] kvm_vm_ioctl+0x4ae/0x1430 [ 2723.002163] ? __lock_acquire+0x655/0x42a0 [ 2723.006414] ? kvm_vcpu_release+0xa0/0xa0 [ 2723.010577] ? trace_hardirqs_on+0x10/0x10 [ 2723.014828] ? check_preemption_disabled+0x35/0x240 [ 2723.019864] ? trace_hardirqs_on+0x10/0x10 [ 2723.024112] ? check_preemption_disabled+0x35/0x240 [ 2723.029140] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2723.034087] ? HARDIRQ_verbose+0x10/0x10 [ 2723.038161] ? kvm_vcpu_release+0xa0/0xa0 [ 2723.042325] do_vfs_ioctl+0x75a/0xfe0 [ 2723.046141] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2723.051781] ? ioctl_preallocate+0x1a0/0x1a0 [ 2723.056208] ? security_file_ioctl+0x76/0xb0 [ 2723.060637] ? security_file_ioctl+0x83/0xb0 [ 2723.065062] SyS_ioctl+0x7f/0xb0 [ 2723.068444] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2723.072436] do_syscall_64+0x1d5/0x640 [ 2723.076365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2723.081566] RIP: 0033:0x45cb29 [ 2723.084763] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:45 executing program 3: socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000000)) [ 2723.092483] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2723.099764] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2723.107049] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2723.114331] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2723.121621] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2723.175338] warn_alloc_show_mem: 1 callbacks suppressed [ 2723.175343] Mem-Info: [ 2723.183424] active_anon:583273 inactive_anon:25887 isolated_anon:0 [ 2723.183424] active_file:9943 inactive_file:44035 isolated_file:0 [ 2723.183424] unevictable:0 dirty:40 writeback:7 unstable:0 [ 2723.183424] slab_reclaimable:63564 slab_unreclaimable:239870 [ 2723.183424] mapped:66963 shmem:31002 pagetables:26730 bounce:0 [ 2723.183424] free:514883 free_pcp:383 free_cma:0 [ 2723.221337] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2723.249445] Node 1 active_anon:592116kB inactive_anon:64448kB active_file:39772kB inactive_file:176136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58892kB dirty:168kB writeback:0kB shmem:79544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2723.281539] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2723.308331] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2723.314807] Node 0 DMA32 free:33296kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:280kB local_pcp:148kB free_cma:0kB [ 2723.354823] lowmem_reserve[]: 0 0 0 0 0 [ 2723.358853] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2723.394652] lowmem_reserve[]: 0 0 0 0 0 [ 2723.398702] Node 1 Normal free:2018256kB min:53592kB low:66988kB high:80384kB active_anon:592016kB inactive_anon:64448kB active_file:39772kB inactive_file:176136kB unevictable:0kB writepending:216kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33120kB pagetables:61412kB bounce:0kB free_pcp:1116kB local_pcp:572kB free_cma:0kB [ 2723.431898] lowmem_reserve[]: 0 0 0 0 0 [ 2723.435940] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2723.454054] Node 0 DMA32: 1506*4kB (UMEH) 2287*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33296kB [ 2723.469388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2723.489674] Node 1 Normal: 508*4kB (UME) 208*8kB (UME) 119*16kB (UME) 25*32kB (UME) 59*64kB (UM) 14*128kB (UM) 7*256kB (UME) 4*512kB (UE) 15*1024kB (UE) 6*2048kB (U) 482*4096kB (M) = 2017728kB [ 2723.512493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2723.525202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2723.535937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2723.549753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2723.560926] 55561 total pagecache pages [ 2723.569910] 0 pages in swap cache [ 2723.575199] Swap cache stats: add 0, delete 0, find 0/0 [ 2723.580595] Free swap = 0kB [ 2723.590469] Total swap = 0kB [ 2723.595315] 1965979 pages RAM [ 2723.598455] 0 pages HighMem/MovableOnly [ 2723.607835] 338456 pages reserved [ 2723.613011] 0 pages cma reserved 17:10:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x4, 0x9, 0xf001, 0x43ea}) 17:10:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x4, 0x8001, 0x6}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10000) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000001c0)=0x3, &(0x7f0000000240)=0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r6 = getpid() ptrace$pokeuser(0x6, r6, 0xc2e5, 0xd9b) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:10:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0x0]}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xec2, 0x2) 17:10:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af75000008000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xebb97c068fc7334a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaa8bb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x0, 0x5, {0x77359400}, {0x3, 0x2, 0x9, 0x5, 0x1, 0xce, "a56b610b"}, 0x401, 0x4, @userptr=0xa47, 0x7fffffff}) getsockopt$sock_int(r1, 0x1, 0x1e, 0x0, &(0x7f0000000400)) 17:10:46 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) connect$pptp(r1, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @rand_addr=0x64010102}}, 0x1e) 17:10:46 executing program 3: socket$kcm(0x10, 0x5, 0x10) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x8402) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000400)) 17:10:46 executing program 0: socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x200, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000280), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x110, r2, 0x6b9a7000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1403, 0x100, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) getsockopt$sock_int(r1, 0x1, 0x23, 0x0, &(0x7f0000000000)=0xfffffde4) bind$can_raw(r1, &(0x7f0000000100), 0x10) 17:10:46 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) socket$isdn(0x22, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0xfffd, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) [ 2723.788949] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2723.828691] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2723.850289] CPU: 1 PID: 327 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2723.858036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2723.867400] Call Trace: [ 2723.870003] dump_stack+0x1b2/0x283 [ 2723.873649] warn_alloc.cold+0x96/0x1af [ 2723.877641] ? zone_watermark_ok_safe+0x250/0x250 [ 2723.882509] ? wait_for_completion_io+0x10/0x10 [ 2723.887204] __alloc_pages_nodemask+0x2129/0x2730 [ 2723.892097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2723.896958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2723.901828] ? HARDIRQ_verbose+0x10/0x10 [ 2723.905914] ? do_raw_spin_unlock+0x164/0x250 [ 2723.910431] alloc_pages_current+0xe7/0x1e0 [ 2723.914789] kvm_mmu_create+0xd1/0x1c0 [ 2723.918697] kvm_arch_vcpu_init+0x282/0x890 [ 2723.923036] ? alloc_pages_current+0xef/0x1e0 [ 2723.927554] kvm_vcpu_init+0x26d/0x360 [ 2723.931466] vmx_create_vcpu+0xf5/0x2950 [ 2723.935551] ? __mutex_unlock_slowpath+0x75/0x780 [ 2723.940410] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2723.945446] ? alloc_loaded_vmcs+0x240/0x240 [ 2723.949881] kvm_vm_ioctl+0x4ae/0x1430 [ 2723.953788] ? __lock_acquire+0x655/0x42a0 [ 2723.958045] ? kvm_vcpu_release+0xa0/0xa0 [ 2723.962215] ? trace_hardirqs_on+0x10/0x10 [ 2723.966471] ? check_preemption_disabled+0x35/0x240 [ 2723.971513] ? trace_hardirqs_on+0x10/0x10 [ 2723.975765] ? check_preemption_disabled+0x35/0x240 [ 2723.980803] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2723.985761] ? HARDIRQ_verbose+0x10/0x10 [ 2723.989860] ? kvm_vcpu_release+0xa0/0xa0 [ 2723.994033] do_vfs_ioctl+0x75a/0xfe0 17:10:46 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x11, 0x80000, 0x3ff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r5 = socket$kcm(0x11, 0xb, 0x0) sendmsg(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2027, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000002c0), 0x8}, 0x1024, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x9, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000500)={r6, r8}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000280)={0x1, 0x0, 0x3016, 0x0, 0x999, {0x3, 0x1f}, 0x1}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000140)={r3, r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r2, r9}) getpeername$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000300)=0xfffffffffffffe59) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) [ 2723.997857] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2724.003503] ? ioctl_preallocate+0x1a0/0x1a0 [ 2724.007940] ? security_file_ioctl+0x76/0xb0 [ 2724.012374] ? security_file_ioctl+0x83/0xb0 [ 2724.016810] SyS_ioctl+0x7f/0xb0 [ 2724.020192] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2724.024191] do_syscall_64+0x1d5/0x640 [ 2724.028106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2724.033307] RIP: 0033:0x45cb29 [ 2724.036501] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x401, 0x3, 0x4}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x3, 0x1) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000280)) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004005) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000000)={@fixed={[], 0x11}, 0x5, 0x8, 0x9, 0x1, 0x8, "b72703ff36ff847bc5603c51164ba0bb938f9bfaaf737582790824da3b681070ec28db96a9028cff8e4ccb01f95f9f3393419baa3d3a60a32c0940fd4a9ab7b7dd813c7134c5d12973201bf32f39f85bf707c547bd7dbd6a0a09cdcf339aa405fd6a661bdde97a1349d7c950699459bb71afe5158e1e1a4d940ae3036dfb92a2"}) 17:10:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000000)=0xffffffffffffff2e) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000003980)=ANY=[@ANYBLOB="08af75246ce73402465cec0180c2000001f0bcaa3683d2b2000000004c27aaaaaba1aaaabb8d"]) prctl$PR_GET_FP_MODE(0x2e) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000001100)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000c80)={0x2, r3}) sendmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="dae24cdf567a47162b7b58b78de038e04310e82ae5a9a232be8b4bcdec08fd9990b93ff18d93a49049060f97f41bbae6e698016dd3edbb155ffaa0637ad512a1b5ebc2b68d758dc51c2ae31844d0bb6010ee3fbb3f21561a3048617050461155b59ff0dbad5c68dff103d92afe13ec976a199aada454144ac68e5e0f1a5b63b5b30aea4aff4f71b2acb05290b924819d2a9a59ee526e035cb09bec9b82c62a69638cfd2f6247980df0cb336bc842f34b993b4ae9719d437293cabda9a1be83abaace3da1c7920720bbdd28c1af1ba61ae64d33f8e5f60c5965cdd987e4a80943210cabce99200121704b2ff8a8", 0xed}, {&(0x7f0000000140)="34e931ae4ad8401d9a8e22eb2aabc521364c62b1ef8c43b19fb3b847f5986cefd6b706f39f04a285b88d9d2888318a2cc022827c4529ebb70df32b60dd2a", 0x3e}], 0x2, &(0x7f00000001c0)=[{0x18, 0x6, 0x80000001, "61d22ddac4b7670f"}, {0xa0, 0x111, 0x8000, "10ffe048443ec73e544246aef417feb5db6d39b24c8511b80d8e3bad26e9ab5112065ef47b5ed47db6beee2531964a70182bb144c00559116b1be4d20d7a60e1421f544b6fdcd89c479fd0ea5a2dade47a0913691d26862a4ffd4166967d5093751c2cd73de83cccdee46217f8fbb21ef6b3d401afec844af24cab406952bdf1227fc89b47bd8ebcdf"}, {0x48, 0x10d, 0x2, "57c7ef7d094f493360a533b9d02c2730152b7201a6bbeed0df730d403207f40f8c8042f0c0c6720a68b2057a27290edfb327463924"}, {0x68, 0x117, 0xfffffffe, "edb2bb96c1eb282dc5ed0e00ae658704c17d54dfdab7a9d964a953224786c698135a3ab0dd4213cbf766d768783b44d55cd736464dc1560cc283d5f0565a905b6942960ccf27e7d45a0e9d0652e2547e439d04db7b"}, {0xa8, 0x84, 0x4, "0ba7da8d4eb309e0177ce37286fe9e00d66553b1ce96b9e4ae2f4ba4f8adcad834f802805fe4a0a5bb3e9c23354834bf3857ce8bc04e8778eb33f08350c9893f1cda3fa509e276048f66cbb8a4572915f9b312a8026606a31f06c7db6c7e170df9693f0f6f55c6989bf9e602709ca45b23a018f5ebccf98b0e9645cd5b8a78ae3963ccd927b612d3bea77c7df065adcff3d5bb7e7013c9ec"}], 0x210}}, {{&(0x7f0000000400)=@phonet={0x23, 0x84, 0x7, 0x7f}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)="8c437a69f46b4fd299dc9acf67a9740dad4d88d3f2e70d4edb016c20c7e432a27d26db8807350244c88958057ff674108f7e3ce62e46e27a8ac98f5afd1613f6dfbf9501b213957d911a4b7bce0b8c36c965b8a6adf5ab9222de9eca0a41f15677205615dc0ef1409ad9955ea40fe9be99e8f1b4a18638404b8440f1089f724d45c60dd9b7a47019095de895b9d1f1645dc76d7471243d45f6e24444e7149991fe942f140c4e007ff76ae9182e6f0a1e2e8dd57381040048e730b7", 0xbb}, {&(0x7f0000000540)="95b0dedf5aaff4468073ef15dabacae14def1537516277dba20c61fa33c760ea0542b13c3eaf0e86dc9e3051f11499533dc80729b07d1ba94ed2c82d671c2f4904e0b2ee86467bc599bf59f9a6a7b33b350b04bfa3209dad3c7bfac9f2c54268502ffb7d2dfbe0331a1542eb8ded62b8a5f914888e8d8e825c2c52a83c7f4bb81a21a92051113df1d63875577b62afebc8cf8ca0aabd2f7701a37e3f7fd37f9089e115a31c627f129efeb4696565631e9b2b0754626ae0d374c9a91315da3301e71f05e7aa47c063090e30a1dfd14c71e2095a14eef5ad12b20e1f5b403d14fd6ff53fd80b", 0xe5}, {&(0x7f0000000640)="89ce498ad5dc508eee26dfb19e102b88327205f508e9ee93c3bcecc446b922b150a54194fb9022ede81510c37fff6b32e2a4a9384a99f221fcd9b063beca4daacc265c2a8373e33b2aab4b94b2423e74519542887b070e4d66e6cb6d30549c22712a3f474575169988135007b51ee174ab9b30f69d01cb54542bf6d0b92f2f34f20ad78441a1fea5352956b29000b988b09706a8985de03873236a28517aea3ecbc1f7271bf7c84dcf6690f0ccca027b019a060a9e297e499a80180fe77df49e362e9e760f498d607a00218a2c4a95c01851e2dd6a9fe2173d52011894d0a711779d", 0xe2}, {&(0x7f0000000740)="8ea2de93d7c0fbdce76068c1c8ef16a009438f43286bd70e48a133385bf87eb80ede7dacade855df1d41e5664735c67a1e1dc9cd4b9b53acf9d7525ca5dd78e83f5af19b2a81850330953b2ddc1e9c37a4dc4bec0192cd046be3860da11ed82fee8bf0c208a16f6b877dcc293f7ba8bf913ff448ff2ca1a976196b9473a0e1b1589d6a585bf7353a5bac4a67f2aab7a96562e89ab00ab068e3184469624833300bd14054040a4ca28c04e8e66695619e869626e0e9f7bc32b11e007b4c1ba56d24391193ef5f444b40cc2e82551636488f9b3a5b942dfdcf", 0xd8}], 0x4, &(0x7f0000000880)=[{0xf0, 0x100, 0xc5, "514fcd2399b35b99574263a2a3658e0fece5ef8fd5a0e06f6bedfb0e69e68f81644deac8ba98ef530bca65da53eb5222aac7af2ff46273ad45170ae70d83a83e569fd28249db785afecaacdd3216134eb8fdb96decbaaaa0a64d93e673e0617586ade1f758434f25394c4968223c0952d275129f9542ca13494957eb6b4841cfe201dad9c5e6ac370b1b7759394ddd7dbff976a4abdade8cd348c3b1fa3e08158f3d39d55859ba590363a843abec5687572743c15a2a72aa23db470692d3fba3a28a93f2f4cd211281dad7f79d7f887d30ddb6af337a19d8a013d82b6969"}], 0xf0}}, {{&(0x7f0000000980)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a00)="3518bd3a366a51312ec8", 0xa}, {&(0x7f0000000a40)="6c7bcde556dc3f70d1c8a614dcf785f77a4b445c52dff2fba84bfdebef245813fafdf25a59aab8bd0690028649b11d5158ab65ba5686cb0061a8078cb0156e0441fb6d12d7c361a567259390bc4a3d09b1e75287a48b2b27dd5440984ebed2bece97153f8965d13975f9f5452dbf58959a1128b4dc2add3fe238e63932ded46785586a1c8dd99b14d61f501883351234bd646445ea98240721a2bd9b01dfdcece1a058abf11191fd9592b50f6790957b36d2a2995d54446d2d725ab7ed62709e79c6a94fff27340724a1ff0f8610a19312a551010ccb99003eeef305adaadfefaf23d869df08212b950a0e75e4eb", 0xee}, {&(0x7f0000000b40)="ca2ec8e0faedbe470f6f2f062f30d32a41b49a7aa6d5e775019a11e1673352b5affef0271c9375dc1548a0e1df6c5d10ade2e2e906d3e4a008309c0e25d36015a35f7e92bb4cad65d44dc716e09fa66fe2ad49f1c126948ea6d601748b1918f822145e3ebda509db03e5df89", 0x6c}, {&(0x7f0000000bc0)="0d81a9c9082ece8c6b638c2588dd93739e3d03023b98ceb8c9f65d4330f67af084ee1df219b77dc89104e3aee961d236db339d822774e71ebc1576efeb067eeead18622ff2c7cb3a1a6f5abb556ecb96968147a63ed785715e0b1863f05fe8d9ca5c0befe3c57681768045d0c98cf8b3688d10f3a6ea927c49f48301e95fd5873f4ab16c796604e6debcaded7b5255bacd3bf7202d90025f33ab9a4caeb9440532c6cd917123a6da15cf679772c88a5a45d56490e28138a9e219a424a5", 0xbd}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="d9c71fb912fd5a4526579013e776e84df6bb14703c489fd3afb412f1bcdd85e5ee14f60c27e2392f3391f75f29b1a5fa", 0x30}], 0x6, &(0x7f0000000d80)=[{0xa8, 0x112, 0x6, "e6de79f09dae8f6eaff0e0dc6580e9220169d389bc03d61a8a5753b17e9cd79065f997aebaf99e5fba50400f60814f25563e44a3be191826cf1db5f81ceda3cea4ed0b60e4ccdc0db24dd1c12cf4b7664034bcee5a19a51fda5b07a879272c9a2eacc1d10c1011fa6a5451462248f483ebf211e719c10558b95cba77ae9ef47d0bd3aa9dcd41fe699b990c0736fc9393eca38f9c05"}, {0x70, 0x101, 0x7f, "26e6e832be8e97f1e8ba02dc44357ad7d55f2be6b590d44c6f8655f9e3660321ef2464b816895d4ae2282a3447666ea6c5c93ca4611ff800f05ff2d03780c30a4f512cfedc4006475614b79b608a5d860c4ec5e901b55437516935"}], 0x118}}, {{&(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x2, 0x4, {0xa, 0x4e23, 0x0, @empty, 0x6}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000f40)="efff27be0704883665e4ada7cca61f2a8435069cf1b94b491e8ad6b811972c5b2f03b1c5e7e9fec51c29a61083678090860d9acbd832aefd69dac8daf1c897813d9c39797108e52a9e978a965d9c0aa4d981d5d0b0a856", 0x57}, {&(0x7f0000000fc0)="60bb7e1188f70db4ea41ac4fd38264d0d78894e357ad1c98eed5b8a2cd25c0b730eca20a4baa61c51effd7e2c443f15c370755924050e2f196cf9131e2ca4e4b93d251cde3118a0acea6b9583142a2a848fdb4aededa4426f14dfe016f7fbc003b73b2e1a2c370df65bd23549ebfe98fdbca239fe9dcfeed1c105ed0f622f74a03f3ba1e847523bdfe2a7574bd97c0c74321c7c81fe853cfb855e11dda07d200cc3017f56aa873c90ed97219b38c1f762e883d63", 0xb4}, {&(0x7f0000001080)="4f29d964026f0d5f915d74653ba0ea8e7ccbec7a6aaae8f7aef986a8f27492dc1926b32fbb72bbc8f3443168d619fe2c5d9e00c46fe168f6083a822a32d7f7038cc290b8b5aca344b7bd5ab4129527", 0x4f}, {&(0x7f0000001100)}, {&(0x7f0000001140)="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", 0x1000}], 0x5, &(0x7f00000021c0)=[{0x28, 0x1, 0x9, "55359c41a501687354a6dd518c34a1610d596400cadf"}, {0xc0, 0xf, 0x891f, "90407b5a0ecc41c0b3cd2eb401454f0cbafea33880eaa0c0a824ef1bdb80a0e0030d59dec45fabe9a2c09baddf224402f4a053ca90017b07adcefa0148ae53a7120fb395e2f82ade38f2c5f452df3ed4d0e74cca633b55aae54b7b363a38dea589ff5e601bf7761a6b0dfb702eaeaabae596c5de73d2d4ed338a410a045d97a7d7fc918757521820a95558e08500bdb485213177c6103d739acf361213b3527612acb5b9a89b43bab913"}, {0x38, 0x110, 0x5, "cd36ce7d0b32a35597ca41a2002517d8a6517012b00d69276b56fea8ba4677f4d537e8536b79465b"}, {0x88, 0x111, 0x9, "f5bfcb3db2a8805caa7405195951870e1acaf1fc81087253d79c61add0c862e7318e7206996d49244ce60321115577afc76519db6086aa30af2b0f24d5e590950a1660dd4eb52ccd95c196e720e9e28740a530739c3de873016fc8d2e0ef1f708288bacb56789331d70ec4e4792f9366224924"}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000002380)="8991b073ad3f9b0aaf4b184949761f162c1c64cd06b5c9c1aa26d07376ddd929053ea0b945cf73dc930f3d9a8891b000bb5c262b632a6e131f89c5434cfcfba854d964bc37f667fe8efc401d56bb1ea3324d0dd55eda089e46e23fc9859b652b347f9771e23f729e5736047208b34517", 0x70}, {&(0x7f0000002400)="eef2f88236b2", 0x6}, {&(0x7f0000002440)="22d183d6630726b0261c13f75f3a8d28dcfc6bfcb1e31ef5e54c988b8d8b6833455fd681bfeb1f9e171e4bcbc766964416db2878cec215d41d8366f7fbdf66dd82570847", 0x44}, {&(0x7f00000024c0)="3b2e0b75d5d86913e6324b838fc23363234bfbe6caa75705deb62881747212221cc14befe1a5a6fb5322f7b2b0ca19d1c91c23c0c304622ff8cf873edc674f3f3e87fcd527d5165222becb07e72b8734e8f398e05bb3d43b3425ca", 0x5b}, {&(0x7f0000002540)="3a7642926660b2646ac27d539922db1da5916b4a464a7b8a61", 0x19}, {&(0x7f0000002580)="37e55713ca0fbc0e5c544d4b114fb9952c3acf793c262e20724b11e3d97876588e99c32d31ab6df05651220a53ddb0f734451f11ca4576e5b5135fd2e1780e77654aecee8a0e8e464510a3e008f7c7ca238e375b85389e76375987912e719f3c8f4ee10f5e99d79d80905245a0aed0c5d3d53d7b2711486c4eecc9d6f909ecdbe11ccb78f3daed7a6ff479a808488d48d855b0019f5a501065f3c94051b06ea1ce003c8a53ee5547bef0a596e40aae5e13d3f5798b6c74a3cf65b9d2a12803c675ce4f1277e99a2c03544f360bfb9d41f3d425df896095b637c43a40b177d9cdee7b32", 0xe3}, {&(0x7f0000002680)="197988a2f6bb9022f161f360d896015b60241aa706e3d807ff66c79b92a3ef86808bbac8d33656b782d2140ef41cf7443f4f757e9e71b9ced570709dc46129afd46dbb7dfb5dfc23c2ed78a5c6e091ffb223ba18fc49dac7538ed15e", 0x5c}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="d70f5db860f4e69ffa2a6b273abd2b2e697d881a904699f72831fc989d59269db58a725a0dd2b0941bfd0fd6d7917bdf7701a261a5133c2ba47625e2bbfa58d94dbe2b292b7b96d504f898f442405e1d48dc34b6bbc99765a5cda8ebd11d6e19170afce35d18f282457ec0aca735550bf7faf421927e", 0x76}], 0x9}}, {{&(0x7f0000003840)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x80, &(0x7f0000003940)=[{&(0x7f00000038c0)="31b039815ee4f494fb2c2d6142f9f49e76515d518ed432056092321cd6628ae38577997902a3f644e90d093c7902ef427a3f201e1e5725130ba474d37719abd7d79efa3c9fef10032bf4df0999fac050156421747757507d71e4b1fc00060b246e3928f818aabb1235acdfba8051159c98", 0x71}], 0x1, &(0x7f0000004e80)=[{0xe0, 0x102, 0x1000, "ca903225d19610b85c4df7c81b79e150b99602b8e6d88ec14e4a807a37a033c1dabc089c47c72e85ae3da3f30c6eed07b77299fe39174bfe97c91887427c50be64c46dcf859d0b3868fbe9fca4ad17a71fe6cf682c3358c0577f774b1bc64d3ee766dab88f72c6d7446f2962d13fed302106f802b5952bb7253ab213060ca4d0e700b010de593516b5bfa9d706ceb8dad42d64fa609a71839411e985416716a3e138d7b1eaa0e938e5e3ea8be2fdf9aaabfa2c3f23782cb3949e57bae95bff5db8d00f1f7e7312b162518a172132a0"}, {0x1010, 0x108, 0x7fffffff, "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"}, {0x48, 0x3a, 0x1cd78c22, "6ba2121acab0d9eb1967fe4cd7eb4d656e49e5dd97343d19b68023e3e9ed19ab909ddfc561fe2521b4abd727699ab5ecaaa62bbb486539"}, {0x90, 0x29, 0x10000, "8b21719508c026b9ff0b3f7919d3d9eb618f96acfec00a7a2857395f41e518715ea89abc5eb49c445d80e4cdda5a4e41bbbc8a682fdedd7a2abc85892a6833ef0bc9f50837255d43d942db3d41a5e87767982259bd55aba73d46ac86794151c2dbd3bc1f351226b2ec4a4bef65a33a515f0860b2a518d1057d"}, {0x50, 0x1, 0x0, "e82d5fc1b02beda10d542dd03328174ed6fd1b7d47836ca591e415dc5f825d341253ead0a119385cef47c0dce50ba50689e43bc1c02efbef908e82daf0"}, {0xf8, 0x10a, 0x6, "63e24511a629a78b1948122c66b3fb6922f3c2944c7c245f95c2eb632cf60aeed9d8bee32d4fc4abff97d98cf082707f0269cdac7ad2d31a49d2fc8897f4992f2e9eeb72606f28d172c828a1bc14878103c8dbe69028d85fb6e68e527f24d023267593a753aed53d7301aeeb15d2fef8e805dda892d81886d0903b72265071a651357f1044fa0a137bcaff2e40778e6d3325a137f5330db748f3711097a5a35b3ff6c30f3fc9649f65023710f76386acee46305ccaf87b9d1ff635f9e33734cb66e19d1b2def6bc51bb53bd40b786ee86067c9c702b3d10484fedf6d2938ea1888a21db84728"}, {0x10, 0x10f, 0x6}, {0x120, 0x113, 0x6e3, "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"}], 0x1440}}], 0x6, 0x2000c804) [ 2724.044221] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2724.051498] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 2724.058780] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2724.066054] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2724.073313] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 17:10:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x6) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x4}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) socket$rxrpc(0x21, 0x2, 0x2) [ 2724.104876] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2724.140857] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2724.171105] CPU: 0 PID: 328 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2724.178845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2724.178859] Call Trace: [ 2724.190798] dump_stack+0x1b2/0x283 [ 2724.194439] warn_alloc.cold+0x96/0x1af [ 2724.198433] ? zone_watermark_ok_safe+0x250/0x250 [ 2724.203287] ? wait_for_completion_io+0x10/0x10 [ 2724.207951] __alloc_pages_nodemask+0x2129/0x2730 [ 2724.212791] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2724.217618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2724.222453] ? HARDIRQ_verbose+0x10/0x10 [ 2724.226499] ? do_raw_spin_unlock+0x164/0x250 [ 2724.230987] alloc_pages_current+0xe7/0x1e0 [ 2724.235302] kvm_mmu_create+0xd1/0x1c0 [ 2724.239174] kvm_arch_vcpu_init+0x282/0x890 [ 2724.243480] ? alloc_pages_current+0xef/0x1e0 [ 2724.247961] kvm_vcpu_init+0x26d/0x360 [ 2724.251834] vmx_create_vcpu+0xf5/0x2950 [ 2724.255880] ? __mutex_unlock_slowpath+0x75/0x780 [ 2724.260703] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2724.265704] ? alloc_loaded_vmcs+0x240/0x240 [ 2724.270098] kvm_vm_ioctl+0x4ae/0x1430 [ 2724.273972] ? __lock_acquire+0x655/0x42a0 [ 2724.278195] ? kvm_vcpu_release+0xa0/0xa0 [ 2724.282328] ? trace_hardirqs_on+0x10/0x10 [ 2724.286549] ? check_preemption_disabled+0x35/0x240 [ 2724.291561] ? trace_hardirqs_on+0x10/0x10 [ 2724.295779] ? check_preemption_disabled+0x35/0x240 [ 2724.300778] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2724.305694] ? HARDIRQ_verbose+0x10/0x10 [ 2724.309741] ? kvm_vcpu_release+0xa0/0xa0 [ 2724.313874] do_vfs_ioctl+0x75a/0xfe0 [ 2724.317660] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2724.323268] ? ioctl_preallocate+0x1a0/0x1a0 [ 2724.327669] ? security_file_ioctl+0x76/0xb0 [ 2724.332065] ? security_file_ioctl+0x83/0xb0 [ 2724.336456] SyS_ioctl+0x7f/0xb0 [ 2724.339835] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2724.343793] do_syscall_64+0x1d5/0x640 [ 2724.347667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2724.352849] RIP: 0033:0x45cb29 [ 2724.356020] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2724.363713] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2724.370970] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2724.378225] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2724.385477] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2724.392729] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2724.436680] warn_alloc_show_mem: 1 callbacks suppressed [ 2724.436684] Mem-Info: [ 2724.481833] active_anon:583308 inactive_anon:25888 isolated_anon:0 [ 2724.481833] active_file:9943 inactive_file:44041 isolated_file:0 [ 2724.481833] unevictable:0 dirty:34 writeback:0 unstable:0 [ 2724.481833] slab_reclaimable:63568 slab_unreclaimable:239734 [ 2724.481833] mapped:67208 shmem:31002 pagetables:26716 bounce:0 [ 2724.481833] free:515040 free_pcp:292 free_cma:0 [ 2724.542990] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2724.579384] Node 1 active_anon:592484kB inactive_anon:64448kB active_file:39772kB inactive_file:176160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60028kB dirty:132kB writeback:0kB shmem:79544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2724.609803] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2724.665521] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2724.670897] Node 0 DMA32 free:33288kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:280kB local_pcp:132kB free_cma:0kB [ 2724.700673] lowmem_reserve[]: 0 0 0 0 0 [ 2724.705692] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2724.731877] lowmem_reserve[]: 0 0 0 0 0 [ 2724.735892] Node 1 Normal free:2018996kB min:53592kB low:66988kB high:80384kB active_anon:591808kB inactive_anon:64448kB active_file:39772kB inactive_file:176176kB unevictable:0kB writepending:200kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33056kB pagetables:61340kB bounce:0kB free_pcp:844kB local_pcp:224kB free_cma:0kB [ 2724.767008] lowmem_reserve[]: 0 0 0 0 0 [ 2724.771609] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2724.788236] Node 0 DMA32: 1506*4kB (UMEH) 2285*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33280kB [ 2724.803105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2724.814360] Node 1 Normal: 557*4kB (UME) 235*8kB (UME) 180*16kB (UME) 29*32kB (UME) 60*64kB (UM) 12*128kB (UM) 7*256kB (UME) 4*512kB (UE) 15*1024kB (UE) 6*2048kB (U) 482*4096kB (M) = 2019052kB [ 2724.832446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2724.841975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2724.850571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:10:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000000)=0x5d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0x5, 0x0, r0, 0x0, &(0x7f0000000080)={0x9909e2, 0xffffffff, [], @p_u8=&(0x7f0000000040)=0x80}}) write$cgroup_devices(r2, &(0x7f0000000100)={'b', ' *:* ', 'r\x00'}, 0x8) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r3, 0xd, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r4, 0xd, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(r3, r4, 0x6, &(0x7f0000000140)={0x11, 0x46f2, 0xa7}) 17:10:47 executing program 0: r0 = socket$kcm(0x10, 0x7, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x4) 17:10:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) close(r0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(r1, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) 17:10:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x3, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x63, 0x2, @perf_bp={&(0x7f0000000480)}, 0x48004, 0x0, 0xfffffffa, 0x5, 0x8, 0x1004, 0x7c}, 0x0, 0xfffffffffffffffe, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:47 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x103900, 0x0) lseek(r1, 0x2, 0x2) signalfd(r0, &(0x7f00000000c0)={[0x7]}, 0x8) [ 2724.860260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2724.869532] 55571 total pagecache pages [ 2724.874444] 0 pages in swap cache [ 2724.877911] Swap cache stats: add 0, delete 0, find 0/0 [ 2724.884062] Free swap = 0kB [ 2724.887077] Total swap = 0kB [ 2724.890076] 1965979 pages RAM [ 2724.894453] 0 pages HighMem/MovableOnly [ 2724.898463] 338456 pages reserved [ 2724.902016] 0 pages cma reserved 17:10:47 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) connect$netrom(r2, &(0x7f0000000000)={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r4, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:47 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x20) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) 17:10:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:47 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000200)={r5, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r5, 0xfff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x2}, &(0x7f00000001c0)=0x8) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000480)}, 0x928c, 0x0, 0x0, 0x1, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) setregid(0x0, 0x0) setgroups(0x2, &(0x7f0000000300)=[0x0, 0xee00]) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x100400) 17:10:48 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010100}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) [ 2725.412595] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2725.452766] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2725.473549] CPU: 1 PID: 396 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2725.481302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2725.490663] Call Trace: [ 2725.493275] dump_stack+0x1b2/0x283 [ 2725.496922] warn_alloc.cold+0x96/0x1af [ 2725.500909] ? zone_watermark_ok_safe+0x250/0x250 [ 2725.505773] ? wait_for_completion_io+0x10/0x10 [ 2725.510465] __alloc_pages_nodemask+0x2129/0x2730 [ 2725.515341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2725.520199] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2725.525064] ? HARDIRQ_verbose+0x10/0x10 [ 2725.529134] ? do_raw_spin_unlock+0x164/0x250 [ 2725.533638] alloc_pages_current+0xe7/0x1e0 [ 2725.537982] kvm_mmu_create+0xd1/0x1c0 [ 2725.541869] kvm_arch_vcpu_init+0x282/0x890 [ 2725.546173] ? alloc_pages_current+0xef/0x1e0 [ 2725.550647] kvm_vcpu_init+0x26d/0x360 [ 2725.554512] vmx_create_vcpu+0xf5/0x2950 [ 2725.558553] ? __mutex_unlock_slowpath+0x75/0x780 [ 2725.563392] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2725.568404] ? alloc_loaded_vmcs+0x240/0x240 [ 2725.572805] kvm_vm_ioctl+0x4ae/0x1430 [ 2725.576672] ? __lock_acquire+0x655/0x42a0 [ 2725.581001] ? kvm_vcpu_release+0xa0/0xa0 [ 2725.585129] ? trace_hardirqs_on+0x10/0x10 [ 2725.589340] ? check_preemption_disabled+0x35/0x240 [ 2725.594376] ? trace_hardirqs_on+0x10/0x10 [ 2725.598588] ? check_preemption_disabled+0x35/0x240 [ 2725.603582] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2725.608490] ? HARDIRQ_verbose+0x10/0x10 [ 2725.612529] ? kvm_vcpu_release+0xa0/0xa0 [ 2725.616695] do_vfs_ioctl+0x75a/0xfe0 [ 2725.620473] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2725.626091] ? ioctl_preallocate+0x1a0/0x1a0 [ 2725.630505] ? security_file_ioctl+0x76/0xb0 [ 2725.634899] ? security_file_ioctl+0x83/0xb0 [ 2725.639284] SyS_ioctl+0x7f/0xb0 [ 2725.642627] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2725.646582] do_syscall_64+0x1d5/0x640 [ 2725.650451] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2725.655621] RIP: 0033:0x45cb29 [ 2725.658787] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2725.666473] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2725.673720] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2725.680967] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2725.688218] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2725.695466] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2725.704678] Mem-Info: [ 2725.707120] active_anon:583177 inactive_anon:25888 isolated_anon:0 [ 2725.707120] active_file:9942 inactive_file:44053 isolated_file:0 [ 2725.707120] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2725.707120] slab_reclaimable:63596 slab_unreclaimable:239179 [ 2725.707120] mapped:66972 shmem:31002 pagetables:26639 bounce:0 [ 2725.707120] free:515719 free_pcp:382 free_cma:0 [ 2725.741566] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2725.769586] Node 1 active_anon:591956kB inactive_anon:64448kB active_file:39772kB inactive_file:176204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59000kB dirty:104kB writeback:0kB shmem:79544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2725.797829] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2725.824498] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2725.829539] Node 0 DMA32 free:33280kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:272kB local_pcp:148kB free_cma:0kB [ 2725.859464] lowmem_reserve[]: 0 0 0 0 0 [ 2725.863575] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2725.888943] lowmem_reserve[]: 0 0 0 0 0 [ 2725.893002] Node 1 Normal free:2021064kB min:53592kB low:66988kB high:80384kB active_anon:591872kB inactive_anon:64448kB active_file:39772kB inactive_file:176204kB unevictable:0kB writepending:92kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33056kB pagetables:61336kB bounce:0kB free_pcp:1228kB local_pcp:600kB free_cma:0kB [ 2725.923507] lowmem_reserve[]: 0 0 0 0 0 [ 2725.927509] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2725.943637] Node 0 DMA32: 1506*4kB (UMEH) 2285*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33280kB [ 2725.958015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2725.968841] Node 1 Normal: 440*4kB (UME) 132*8kB (UME) 401*16kB (UME) 37*32kB (UME) 62*64kB (UM) 3*128kB (UM) 10*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2020784kB [ 2725.987294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2725.996244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2726.004918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2726.013846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:10:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r4, 0x9, 0x7b4216dd86b76aaa}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(r6, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) 17:10:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000000400)) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 17:10:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10a10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_config_ext={0x4, 0xfffffffffffffff7}, 0x40004, 0x0, 0x0, 0x4, 0x400000000000, 0x1004, 0x7b}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:48 executing program 0: r0 = socket$kcm(0x10, 0x7, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:48 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1b) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) [ 2726.022521] 55585 total pagecache pages [ 2726.026490] 0 pages in swap cache [ 2726.029919] Swap cache stats: add 0, delete 0, find 0/0 [ 2726.035378] Free swap = 0kB [ 2726.038414] Total swap = 0kB [ 2726.041527] 1965979 pages RAM [ 2726.044625] 0 pages HighMem/MovableOnly [ 2726.048577] 338456 pages reserved [ 2726.052101] 0 pages cma reserved 17:10:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x5, &(0x7f0000000280)=[{&(0x7f0000000080)="d9cc0bb5de244b0cf1fdce8c469c6a8dd37198557483c24b316586b959a05cfa17f31e3ee9c3d5806b46c1b392ec6c037989268ffb83", 0x36, 0x3}, {&(0x7f00000000c0)="4af93a37572cef1d68217231b2ec62b7246a6755b56f6417d6298d54cdef6b7194f016f9e3ac05cb766700240e6a5a948c9004b478f1e487a9f20fe54a4073c2d880da430d81", 0x46, 0xffffffff}, {&(0x7f0000000140)="1b00172971fdeac8e98a57bc1b86", 0xe, 0x2e48}, {&(0x7f0000000180)="08db109ee98b29b9859ab5c9f7e89f2eaf1c0e51578e334560e50d0a4d5e3022bb5ce884b9efb9f10bd1cbb83ee748f2f7b1a0af745155a37e", 0x39, 0x2}, {&(0x7f00000001c0)="fe3e0f3d7db8ef9507eee61783d9af5bc01b23b64dd35d74ff26a27dcb8e8ee170e52fc01a7aca154644a6a37b6bc91318ef68445014c0dfe5d80e71a62a26ec5b137d03434b21d27e48b78938c10d33a77bb56309e6ddf0eff11bf66f18e89fef586ab9844650c46bfaf0ed4fca1d5210240c4223e21c659d4371610bd6fe45497912b1740cd77e18", 0x89, 0xf6ff}], 0x200000, &(0x7f0000000300)='!@[\x00') lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000380)=0x6, 0x4) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) getpeername(r0, &(0x7f00000004c0)=@x25, &(0x7f00000003c0)=0x80) 17:10:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0xc818) 17:10:48 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) 17:10:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @loopback}, 0x90, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='tunl0\x00', 0x2, 0x7, 0x4}) 17:10:49 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x200) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) sendmsg$rds(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000600)=""/152, 0x98}], 0x7, &(0x7f0000000900)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x12}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x8}, &(0x7f00000001c0)=0x3, &(0x7f0000000240)=0x3, 0x7fff, 0x4, 0xdc9f, 0x0, 0x4, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @fadd={0x58, 0x114, 0x6, {{0x3f, 0x8}, &(0x7f0000000440)=0x7, &(0x7f0000000740)=0x3, 0x80000001, 0xa73a, 0x5, 0x81, 0x2, 0x401}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/27, 0x1b}, &(0x7f00000007c0), 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x35}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3f}], 0x140, 0x20004010}, 0x8000) connect$pptp(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRES16=r5]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000080)=0x1) 17:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="08af333f30d30000bb01040000000000009cd16af0558201000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() getrusage(0x1, &(0x7f0000000300)) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f00000003c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000400)=0x28) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "6e854684a6f7374dfb80e9685fa347f8f6242832"}, 0x15, 0x0) 17:10:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x9, 0xd086, 0xffff, 0x3}}) 17:10:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, r2, 0x1, r1, 0x1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000080)) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:49 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000380)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14uc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc97\xf8I\xc5\x83/\xf5\xe6E\x05\xaa\x82\xdc\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4\xa7\x98\x1c\x9f\xce\xeb\'\xbc.\x9az\xe3\x9ch\xa5>!\xeb\xde\x86\x17\x1a\xff\xeddk\x06l\x1eC\t\x88>\xcdr\xe2\x8e\xa0\xfc\xfc\xf1q\xe3\xff', 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000001340)=[{&(0x7f0000000000)={0x27, 0x1, 0x2, 0x3, 0x15, 0x0, "a6fd4016c4b80f3974e1918f6c52c7cb76072d8d10e62747eac45d1b40e1c6656b7b01932000e0298dd6496fb3790aa7001ddc90cb07a38a40d9c4abbca8e1"}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000180)="40565be10997dd5f29c931ee18b62b3d4db9984d65f3358e915dbe3b1de7997c0f880e6af4e23b18e9c506e627f58b6a4d75089e55da2765f08a07dadbcb37e0583c6f0560862be4f4ef546118a6ab36c33ad773fcaf60962fecf59c0ceb11e27372a0722c906bac7d99811baf5f0b016744135901dbb14e770d5be251112382726878b1e6bc01c0058728da081b9ddbe2bd3b7b0aa5e9fc01810d830f0e7c2af081a409dc1b2811ac95baaa27973338ffa917d425635a7444d07763765d5a12d433d96aac33ee29d76bc5020b7aaac4b3", 0xd1}, {&(0x7f00000002c0)="39328019e4509f7bacd52c4c0e1a38cf72ebc87ffe2bab0da2fc3bcc4d1a45e745a60b9a27e3bdaefde51677ceb3971e4bcbc6b16fc9342d2763fbc0b55e23d8c7d4415f6fc4cba52cc93195601d6d", 0x4f}, {&(0x7f0000000480)="5ef179cf92ab2b56fc0ee08db132dd92de5d7889603712ee93305965fae21fd6aefafe168043df96c281f92da0ada9894f126688bc41cc63ecf2ea6e520e32622aca1aaad2add7b7e633cb2743afc10522cf311b09f15824e0c9d31f8594bea46d4504164ec7ef1d161c43c0092cc64a98e28f0ef8c349944ea1f3d94df6e1371d89de97ac9882b84c301ccb1c90686184e98508cbf4649a8a6e18ad00179efa3b277fcdc2d00b002400ac862f69c994d28397cf1e9a68cfa0d9405cdced67fd7ff1af710c2f82af9de64908", 0xcc}, {&(0x7f0000000580)="29e9080b43c5b01102218a366e763f2ccf78e7e1cb9a28ac68ec9596c8414110f2c806c8348244669c458d4f22b0eaa33ddb6eec80abf2ed178e8eb1a0fe34b34848608599d072d5b82d467e9406bbdadeafbbee449003c253c758dc160ddbe7ca357cdfa45a9931696702d7550fa94487e978dc9777d4f8f8a139ac82bbb80267f1bb28d8e5f0957134f5bcda923792fd1d0b95370231e7e48f2d3fdcbe", 0x9e}, {&(0x7f0000000640)="095dcf0cf0299327fe6e58b3c66ab3f22f8dd1e36f1169f5ca12dbca4c4aa641ce4d76d334b883949bc0a3bd3d4921d30d028307247a546f9cf2b32b0602f25048b334dab013e22f83966825371625cb55d70abfaa26b505ab83977cd8e79250f98172bcf51b3efed98d68ee11ef0dc73b959ec5eded48443b21344e439ba38744bcb7582e1085067bc0c86f32ed75ff1b9f728d368ebe1160f9937071e91c2457c0bf8bfb57c81a649ca9e96f701f7cc7468b30a7726f11857b60c47b4b62e578d69eabf38de8d9ca960b743559a7ae7ca44614d282fd2d291d60fb2dd77d85e6583da83da4", 0xe6}, {&(0x7f0000000740)="02561ad1988561596a8bba841146927f14826e0d6fca705b9694f56f141f7a15e99339beddb11ee108735050d0bf55a8f89cf8606ff3020595158e253c7455e7b4812dd97eadd00ce8f848810b706ac867e8e66dff4e43a33e1d8cf97d9f34396f1239c0c5a660964dc983a29f31f84bc7567252fd61beade5e60382f3ba04a69e5ce572b91eb0d9d8191f5578", 0x8d}, {&(0x7f0000000100)="f659857e7a5092b0c19e6aba5187d2b353ce3566e296dfaec38a7a283a11a9072846f8d9fc824782b36f91279f5e5f", 0x2f}, {&(0x7f0000000800)="6f5dd8e69c150731cbbb7e066500aea4bbdb0e9a0984d28951e1b875919bbce9d603a81bdacd5aa239d49ff6d56e615e4cb5454b70b544d9c958391e43ba794011e6d11559f3d3d8e99b2bbb2cb83ea2554e85e0cd", 0x55}, {&(0x7f0000000880)="5b2d59ca", 0x4}], 0x9, 0x0, 0x0, 0x41}, {&(0x7f0000000980)={0x27, 0x1, 0x1, 0x5, 0x34, 0x9, "2d8d631d34168f94373de6dce69e8b34c1de38167ca45f85417a1efffc6c4f38761fbee0612f62784bd01330abb0bd665ab9ac35c73067a47b1cdc05f0914c", 0x3}, 0x60, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="3018faecfe4fab4dd8d80c6f4cd2b396cea04e5d9434c9c3e40fc124c5667fd5385932df92e39e3a8d0b6995406f4e7e0efec7d81f8d731ab7dda40ae2831d2e56f029e01e88c427e7fa7ce0f3699cb6aae9d5d59f2398763e29fdb0b2d00a2d72a72f5f9784b2d04a5aa6729537d0913a2a44671027d20f57174b7f3c4deab1fa03f56d19b25fd440634520c9612812c56e01a7134c10abce9d6a4fef39c224d48bcdc650caf4ce", 0xa8}], 0x1, &(0x7f0000001440)=ANY=[@ANYBLOB="38000005698deec6c18500000000003a000000080000008ce1d57f50e8ae6345b87c7b831f29dd35b88a6b310147c118e6ae08d56b7dcea428b0b5d0ce0000"], 0x38, 0x40080}, {&(0x7f0000000b40)={0x27, 0x1, 0x0, 0x3, 0x7, 0xff, "08f526610dee928942d03a98b04327dde907d4f6982c584842d4d635b921961de4f19cb1c1c2408443fb93d79f3f9adfb9c82d5b6641dabf03b55d96e2a07b", 0x9}, 0x60, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="6890e775a003b837a7199fbb85acd64cee1b30fa7b86963d8d53c8c6fcb0038106700f0986de2221fedb0a5b04ad9adc2fa98ebd72c71a80b9f9afb67636", 0x3e}, {&(0x7f0000000c00)="478ae1a00b744b7e1b5347c945ce6e1c03205f77867a9d9ef164432e060cd910c6ccf0669a21f203c86da9b77993dc2b1c7b452c096965ab2eb86f2b69dd85c9624c98781db10ea22596ed2eff00ba3bfc8db638fe1f0c721d9fbaf381fa616b1c3638629ba0dd0928189bc62e691996c6b157acea4d64ffa02cc394e3f076af3f8083ac83d654ee700cc79fd26472d5961f0e7b753b95d5d143d5eda25a18b0d820928a332a13d17fa3a2b3a573dfa8b370468f762e87141376a1ef6b", 0xbd}], 0x2, &(0x7f0000000d00)={0x108, 0x108, 0x10001, "f8f9cd12e798a8e2619e52648480f2ac2bd27e8ae3bdbb7f580fba600172628aeac11782563eca41e819c2c15b8ce774f1441de85a3ea8559691558d9a71d753c058ba3dc01437b4c1be9338726515cf28bcaf6a24c7ecf63516a91314dc1a61f3e1d71706826efc4ffd1fd3c34d22131c4db1646e6646c0ac3d313b75034503ee68b7c737c465420592d010e3e288db0df76128cd016b8e5e4c4b2fb840ba0a0ae3babd8640a803ffb26695acbc0a23ce440dcf4e9182057c39cc23e44f89db26da9b6cf2335faa60e23c60bf20725389b7b8137aab015c4e848c2bdbc550ecd2a6844d669ac091ea8d1759f9055dfe19cc9b25e956"}, 0x108, 0x20040004}, {&(0x7f0000000e40)={0x27, 0x0, 0x0, 0x5, 0xd6, 0x1, "38ac7adba071f5c17b2241f6a6857e98b6c2f11e830a16742902364ceb2a4edaff89d6ae66cb5397e683a8e3b99e699722cda889d7b77af53b5212209b7bff", 0x21}, 0x60, &(0x7f00000012c0)=[{&(0x7f0000000ec0)="1611f763dd88158bf4db711e1eafcda926c1b62ae00efc24b987c7bdeb3524b9bc3a0ffa740ec2a5064d7add4e2b362a5121db657d2cee61e214d8e9e9201c84e91016bccb8353300f9e20a4695e1966c29d622138ebc9d7af0fe69e77519cbfb444036065cf3fcbd8c812f1de86560da0528972f41008613a5b6e91ff497b7f446dcd08ef6a9dd3222c8b6b218111a1232d83e532eb9aae25aa20ada6865e6114e501", 0xa3}, {&(0x7f0000000f80)="34c23b31387c5a7380b5cef72ca56813751df10725cc6abcd4b2b5d7db1ab710cd0d65d39b0892fbc5e4aa4cf95d406a3337aef9399d89", 0x37}, {&(0x7f0000000fc0)="3c5684278dbe3042af6fbfdaf28c659fdcb36b7c7ebb768aeb760adf7abc44be4c6dfa89ed5b41d51a77362c55a9c8678dd7287aba1c5257740d9e337aab96429a6bde9f851fb652ba4bdd54575c0c787a14f44dba88467667c4e1b250b44106520ed0468a4518e496f9beebfdc63b7d77cbe82dc34ef14f7f0cbef367b7812d82104ec68f9f328984ec4121147b96a0ad1cfccb97293581d16a9822d4c10e311a98b4b13ff67b97c086a69d493f04858927288a8e2f13a1d2d5922117dd8c346f683a5334c36ea02a5f774391f60f3a87ef806e815297", 0xd7}, {&(0x7f00000010c0)="6d993c7ae5d43e85af3f201314d26c769351a72f0dc0845c5b288152d15e", 0x1e}, {&(0x7f0000001100)="f5029759c4fe76e71e4797e3f30af6a11ed027bc7be854c57cdbcd4ddea3d7dbc24ee0bb8a661045e9d28e320974210cf5705784793f4e7532356736e1461038b24f979f6fec0b70df3cab3ad5618a82c735b0f7826ce945dd295bcd1d1d0de2c4d7003fc616e3ab171b63121e2ee2ba1d0462d5dc8251186ecbe0078060634df552da6a528f6e2fc5b6d8dae62bf12bdca33560a8ee393a2ed58cc3ec114ba92c57383452dabd1770da5acf3bcf4b48e74e0beb6053f6fe32dd2e575dac986f90be66c4ed96a0e4f40ee15f223ff27afc7f31444ed1d289733ffe9b1db011fdef942db5c37f8b4fe63dc0", 0xeb}, {&(0x7f0000001200)="350f4b1f92888627c7f7a44f29754f2dda07929a23af512e52644b931e25f48b835e0c7613387df1815c1a0ae245089d2aa348a42f89d160eae3e4b40f8f8910dc533535cf95898192b6aefc48ab23109aed76b2440a3a511b682c4303749cb5e219cbad157b4abbe569b0496fe3e9cf9b280b03ae8833d8f110d39c599e7d8cdde8d4513d9f1c7a82602ad392eefd9538c134d94920214a7cdb05c90db522f89790a39e1b41f7", 0xa7}], 0x6, 0x0, 0x0, 0x20000090}], 0x4, 0x4000011) socket$bt_rfcomm(0x1f, 0x0, 0x3) sendfile(r1, r1, 0x0, 0x24000000) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) 17:10:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0_to_hsr\x00') 17:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c20000aba1aaaabb8d000000000000000000"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000240)={0x0, @empty, 0x4e22, 0x4, 'lblcr\x00', 0x8, 0xfffffffc, 0x5e}, 0x2c) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300)) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:10:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@hci={0x1f, 0x2, 0x6}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="6c2bbb1c02843ef75178507fab5d2c79bb3ec861c8fae5a6fb90994cbaaa12f6c03f26534f070e173005a07ee39f378f1c2a15963507f0", 0x37}, {&(0x7f00000000c0)="65f4efef200e8bcf6c8007394121272a7f558dc7b3f9407c44de2de6147d9c5c1fa745d631dc23993b35b43075ecd042a6895a3d320472e4ad867d460110e5475f5b015b1c2b633bd738a0d3448290102f247f50606fb9d2aac85c7d1e58b22db8bdd62ae9eb3e94761e241beba5199a84d27e863c5dcc39ae046ffc4e8323e524f615f1c70c60027babb0d8e02924493f2256dd2cf7b842e83b0d2123e8d551529aa178db41", 0xa6}, {&(0x7f0000000180)="2cc9de0d84f90f4816c007db85144a8e5663d7bd", 0x14}], 0x3, &(0x7f0000000200)=[{0x78, 0x11, 0x3, "29743851b313499accbc23c7315bb8006f4c46f9cc86fc6489566f035b22c8aa57e53fd3aaf0ded3a064a943224c5cd5239164dd174b4e47ee928291dbadcb72585407e63c659a31dd751a7d3609baec691241ac820ae0bf0e865f0da3891b14dd"}, {0xa0, 0x104, 0x9, "729f90944ba00cb6c0ceb73f88bf76f6b5d175e1fb9502a1410fab889ccc12b239080b8a03b858d7be67f6ea8b963ba8b990eded10a5d4cb11c08247692e895bf0095139b37e5716a741e97848204890da08f71c326906e7c94329681b6b7dcd04c02a420e57dd937b433cff81f4206f8a8222d08c05169b4d5198924cb24cefc9b1e30624121e7d9595380d"}, {0x98, 0x84, 0x5, "3a92ac10cdd7e10779fd576e2f6dece3280573fd5da5543de3187fc0f71258b9080e23bb0ee84fff3f3f78b80631fff5a80732fd81ab8ec477297fa7ece3d635dac08168869018eb1b23790da544cdf013274b14895bec7d31ad87a8f225bd70a7099224d2898c1c3a001b4b6bebe40fc233524438146a61d63c4db1c5e4e453af24e6c66e36"}], 0x1b0}, 0x20000444) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000440)={0x0, 0x0, 0x100, 0x2, {0x40, 0x5, 0x7fffffff, 0x1000}}) 17:10:49 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af770000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x6e, 0x8, 0x0, 0xfe, 0x0, 0x80, 0x25145, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x2, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x8, 0x5, 0x1007, 0x7c}, 0x0, 0x0, r1, 0xa) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xdd, 0x80}, 0x0, 0x10000, 0x4, {0x6, 0xfc}, 0x8, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) setns(r2, 0x4000000) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) 17:10:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f0000000040)=""/113) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:49 executing program 0: r0 = socket$kcm(0x10, 0xc5b582d3c08eb54c, 0x10) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000000)) 17:10:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) getsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f00000001c0), &(0x7f0000000240)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r6 = getpid() ptrace$pokeuser(0x6, r6, 0xc2e5, 0xd9b) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:10:49 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x7, 0x1}) 17:10:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000040)) [ 2726.938267] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2726.986577] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2727.012203] CPU: 1 PID: 520 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2727.019968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2727.029334] Call Trace: [ 2727.031940] dump_stack+0x1b2/0x283 [ 2727.035587] warn_alloc.cold+0x96/0x1af [ 2727.039576] ? zone_watermark_ok_safe+0x250/0x250 [ 2727.044440] ? wait_for_completion_io+0x10/0x10 [ 2727.049131] __alloc_pages_nodemask+0x2129/0x2730 [ 2727.054010] ? gfp_pfmemalloc_allowed+0x150/0x150 17:10:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0c0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2727.058880] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2727.063757] ? HARDIRQ_verbose+0x10/0x10 [ 2727.067845] ? do_raw_spin_unlock+0x164/0x250 [ 2727.072366] alloc_pages_current+0xe7/0x1e0 [ 2727.076710] kvm_mmu_create+0xd1/0x1c0 [ 2727.080619] kvm_arch_vcpu_init+0x282/0x890 [ 2727.084958] ? alloc_pages_current+0xef/0x1e0 [ 2727.089479] kvm_vcpu_init+0x26d/0x360 [ 2727.093387] vmx_create_vcpu+0xf5/0x2950 [ 2727.097466] ? __mutex_unlock_slowpath+0x75/0x780 [ 2727.102326] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2727.107367] ? alloc_loaded_vmcs+0x240/0x240 [ 2727.111807] kvm_vm_ioctl+0x4ae/0x1430 [ 2727.115717] ? __lock_acquire+0x655/0x42a0 [ 2727.119967] ? kvm_vcpu_release+0xa0/0xa0 [ 2727.124136] ? trace_hardirqs_on+0x10/0x10 [ 2727.128390] ? check_preemption_disabled+0x35/0x240 [ 2727.133443] ? trace_hardirqs_on+0x10/0x10 [ 2727.137698] ? check_preemption_disabled+0x35/0x240 [ 2727.142738] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2727.147692] ? HARDIRQ_verbose+0x10/0x10 [ 2727.151772] ? kvm_vcpu_release+0xa0/0xa0 [ 2727.155941] do_vfs_ioctl+0x75a/0xfe0 [ 2727.159761] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2727.165489] ? ioctl_preallocate+0x1a0/0x1a0 [ 2727.169953] ? security_file_ioctl+0x76/0xb0 [ 2727.174378] ? security_file_ioctl+0x83/0xb0 [ 2727.178808] SyS_ioctl+0x7f/0xb0 [ 2727.182187] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2727.186182] do_syscall_64+0x1d5/0x640 [ 2727.190094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2727.195303] RIP: 0033:0x45cb29 [ 2727.198498] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2727.206220] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2727.213501] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 2727.220783] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2727.228064] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2727.235346] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 17:10:50 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) [ 2727.322241] Mem-Info: [ 2727.324797] active_anon:583171 inactive_anon:25888 isolated_anon:0 [ 2727.324797] active_file:9943 inactive_file:44059 isolated_file:0 [ 2727.324797] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2727.324797] slab_reclaimable:63660 slab_unreclaimable:238229 [ 2727.324797] mapped:66993 shmem:31002 pagetables:26619 bounce:0 [ 2727.324797] free:516678 free_pcp:371 free_cma:0 [ 2727.373971] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 17:10:50 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8000, 0x200000) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x9) r1 = socket$kcm(0x10, 0x7, 0x10) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r3, r5}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000001440)={0xc24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x800}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x0, @dev={[], 0x16}}, {0xa, 0x0, @remote}, {0xa}, {0xa, 0x0, @local}, {0xa, 0x0, @local}, {0xa, 0x0, @link_local}, {0xa, 0x0, @dev={[], 0xd}}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xdb46}, @NL80211_ATTR_BEACON_HEAD={0xad, 0xe, "9921e396bb845d00e3b5a1a3fa12351e48fdb9f0b8e2d4b4ccff89b1597f802d2650ff3906c27d2260ac4fa1fd0b8ba3d159fdc5032ed482cba3a57e26c85b0de368650cff37aa4f901bde45c20c959653cf0143bae3b4d95052e28266a2384aa512a56c14f6153f78af4d3657ccafb3dd2f67ddc58e59aa61f61487d962c4fc4b4d25843e1e57f4492f8434e70493bb7c0a95dafbf49ba0cd9ddeb69e7707c8a3bd08b786bf66bae7"}, @NL80211_ATTR_IE_RIC={0xb8, 0xb2, "8b342f03a7c4d565ee8b8b8b731add48ec776a060cb472c9359bfe100f2456031a9dfaddb32271760f7290eca2dc0e4b337a58235447d5a088632cdcff90418035bcda1cca4480137ab30f81cad7eccbb9fe7dcee22b60da47ae3d1dec7a39cd0924bb3c815f64778368b169b3b82093a62160f2b8fc1464dc694ad18e086c34d731982a75c70636401d3a014763006f2b48299860333046edb401343d18b61aae549dbe7bc15353b9a286403976899ece6d4ace"}, @NL80211_ATTR_FTM_RESPONDER={0x1d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xeb, 0x3, "5da60440136c46178977b4018bee964f67cbd169c3428c16a2baaac3f6ea674156268d5430838414180cba8b3f65ade2e15644d413cc03796de8b384cac9db26d1f7e3496a6918ebe938e1c7a6a90ad2731016141a7962b10a55639df9a045a0491614a1a128998a47a307684e9291db4ee04402857c4f170a5a670fbc50048f9059cb06dc2123065401ec3e5c53290bc843382cba8acb141d0a2970888cd37506be2dfea7637c7ac6324ae02e04bc29ca9a4a4298c528e7fee6a60ce2fd1cc6d6c8718014084ade510ecc92cd1c2f0d1aca4b598a17201e9113351aeb8cf9aeb51aa6bba8503c"}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "37095a4580526e94d19b885d03b18301f0a336a59d146a81852970dc39d956fe154bd0885bb18fe4e5c643dd8ca5888457923cce8e932c76a6abf223a2f2541286064686193323eb84538557d3f06e6590b78f6548f97c1fb9dea9e581dec8c34279295c29c393fc47987fc9afc73b7108a01f594d72db1065c787354874bb9142cfcad5311aa75d1e322f654397a3091c306f91ec584ccb293957cf9119cdc9a3e3fa184e43a0ed6856520afcc6c1a44bdeb5963b5d1574a702361b29be9b3abe27"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6, 0x3, "c200"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x86e, 0x80, "48a3d558b30049c425fb1c524da647d03f8fe5a2382544169eed743e96f5323b36cba294e088b174f8cf6cb8a751459fbac3f83972023bf3fb7b1500c5e7de59ed0734a5809f59b7c19a5100e08c3f3386d1d0beb2ff0f2ef0dc3dbfd6ce710b93700ba64a4725fb48b09e6445a8cc288c86bf8fbdc2b9f19d54062013121184fa244f9c5855905d11c0be5d9367432ad6d0606ad7ff425f21f67db05329085707ea2ab6361d9d7c6942df0c6aa5f98326f163854b2be1324b3c1fced708b6fe11c6d6c16c18cea3a7408215e497a4cab5f2fc97ae0a06543f8bebc46c6bae1d51c5ad50778fd7580c8c7ec6b73b805e71e89bb784ad9b4c481960e2a34ee81ac52d5a70fcd5dde44bdb7362eaccb1faf0a26edc35d424501926e75aafa0cf529982c7115cc2f15833a816e4c722c8a841f5f9a03b43052c3a2a194de7ab0d6e6a550e3bd1382a23f2e22122e2c203a52fb678b4ba89e93708cf66e4cefdbc4d4d511d2949ca202ebf031258ab62c820c0ad16c74e9a84b8e6a1f478267db2266d0dd82e248f5d424fa105892203b5472a9738ba1ede7e00394a9a155ca8b313b33282f04ebdc6863cae9c0635aabb4425967d572cddc98f9f0c34341ff0ac3f093f258770d07e678a1e2c8d3368bf466459bf53e125f77788281e4ad92610ce26dfb68f93f6a2861dee522636750bcd779e388860dd565e8d55003a58fa0b4a34a2034214a3dfcbb18bb003ebbf7e58abb285a63b260e34b3dcf4412b8eb0ab123fe60fc99d2b775a16eda9fefa7e85e9d5dfdc8603c427745c66b11e854a9a2e58d87ea3fe447b85b37fd5a425235a84d7cc67c99e78aa2e45109dcf4d234b48040f2cb5044d0f322422b48b16cdfbdd32f3554f8ee0be1b3341a84ddd9effeb6342f74f000e7c8753599bc96c1c6dea66464b305f8259bd65a1cb70015ca34f5e3db95977953f9a8b4b7aa29bdc39e583f034ef5eebb6627a6e73d5a6b54fb4313cc79f52d811403e707addeb1939c6c9cfe2492ac11cbc913e3f9f45ecba6ab4f618a8718208384786b2b21d50e79e87498e8fd555c47d9b9fa6503ecc13b8a2546ea6fd59c0a06d616bdf517e313b97284e6ef6d62b07d05a880ca1be901e8274f1bf0ac9b67536f2d8d8d058669e0ed69419d0f26a0346da5a14ad18d04a9725576c5d5cd1b4f2221eed9ee4bb82ca0f5c2b3e4a8c95e59622248d3fe887df47c83ca682c385a2a8fa6a804714eeb6e04401d95467351a7fd2545b68667da444501840e61466321809ca1686e0f4e5037e3a552c48a6a1a14047d7db86c2f8a118835b82743bde87838e74a68c59c812f74243af9e0f017019775ee8298a02ad3afe0f8dabba75d219d69ec676fdcbf88b62230abeb234b797f78f1186469ef8f371a76c11bdc21b6143558d1651a36e15f72672bc53d25de25b653004192077984b555c92731aa2d4500b83f2a935fa814b6f8df9ccd5a2805c8c918871601e981fec5e6049335d8ef0cbe722eaded55517b68252df9480cbffe99f7f45549e698bbc560f59566c11cf207b8f6f83208534c2bcea27b42c7b19f8e9185e850d24000b0afb1745e981e2a3e5eb9a0d8683ef4bdb36a07ae3d4891a2b5a53d4c6aae22c51af7d23c37dccd3e0523b5d81ca53dd685a71cde3378e15b0b538cc64a67c7fd0b1fc257646666b325f5e8e5f6ab6fb05b1ba4b7c56d1b1c0ee9168f4c7fc9052e2c332b5fb2f455ac65c7d58fcc8dfcea9dffb1d20f7749db2da40c2488b709f91120cd0810313fdfbed8de92953f40029765e8d8c62a0f8dc758f5cc88d8d660c489e4cff7e379f16870a5467f7360cbf0de18d777b065b3824e6fd99d32481cd383d4f7f6b75c55851404368c3e0081af18873fdd3dc8552d7e1f67dc799bfba9a654633e850d03d068fe22d3fe080d4abf8fcbd4f9c333332c3f2c7838e835d5788200ccd972a25b086d47b1bd63611cb71cef522a033046e0eff458db801506c9353bca4e281ca692969df7bd49654f5587dd82be5a42bea60b5ed28b0af1c4d94ecd1d672d0337f48298fe5c60b659792489bd3a653ba3fa6579b1139bf8b536246e6d618c5aea571adf5a150f788fc42040a5698acd86aa0cd713caff334dbf704e8377d549198ddbefd9db8b94632b34c1858df9abff38ea56d84d5693b08fde21b00082c52a588879e0c3c2b760eb8b8c45e676129193445537784e1c634e0fa6315427d58031d715fbcdee33402efd5470f7dfc0cf64a34b50f2ff2c6dd0de9b75261f3d7f546f6eea33a56128cf748a2981954ea5e7e282d829c73f3ee4dcc4cc9d38fdd692c453e3611885032fa097c995e1f9b85cf1ff3687a3780452900bec10ac31de2436416fc100be0e4ed5f52a64461c61e0793f49cd1e4f0aa62694cf8a67413ae0ae6eab0e49ad6d17a0f06c9bf8b2eb98c6c299aefc223ab81132b3eb892eec7c52946e7ed7060053636cf01027318826b1c8f21f30075abc0c0d1de36ebe835ec6b214ea40a6502be2e93fde7328c5dfc843b7c6e6ab56ca9f9b3838a3ff94d53f95c698a8623878554b3cdc0f6bdbb9950832e5e1feea8c4b3e809b82dbda771300e32452dc0c15200f1d8b2f55799c666fdd05c70f540d370d85b0c79e99ae07387a90f5968246b994c574b3d6966510e837b0a479eb1d9f7c6d93830dbf4b3e51f648e5b80d57bc54852240bb3c366c51962b8dec08d817975f15fb771dcc937e2d470952908b927d39b475c9afed9c02cafbccaa5462b2048a2778268550034d2d51ca58fe8a720b9e82cdaa7d7a0d16a783341f25ff187dc9df4e43bb48d078800d1018e95797736cb72bd00fdc60bb7ffe83eddf359f3dbb182ccdc42eb4b9764b848f6cd2898ebb68361d649ebda94d1fec158f9ef900405ce1bb2d4868c6a0188d40148b545cc59d6447e9fa4ef0b962815da86ce6b2bcc926e9c2f698ff1d426e71b31adcf0a81b591975e75e36dbd267a09b8c63a376f2c448d3457c404b589a3a2a88debc9b8f5cb6d77404ef75c124b626607"}]}, 0xc24}, 0x1, 0x0, 0x0, 0x820}, 0x1c050) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000801000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r6, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETX(r7, 0x5432, &(0x7f0000000280)) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000440)=""/4096) [ 2727.407024] Node 1 active_anon:591936kB inactive_anon:64448kB active_file:39772kB inactive_file:176232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59068kB dirty:84kB writeback:0kB shmem:79544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2727.435291] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2727.467603] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2727.480937] Node 0 DMA32 free:33272kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:216kB local_pcp:104kB free_cma:0kB 17:10:50 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1e) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) 17:10:50 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) write$UHID_INPUT(r1, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001100)={r6, 0x2, 0x200}, 0x8) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f00000010c0)) [ 2727.597045] lowmem_reserve[]: 0 0 0 0 0 [ 2727.601592] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2727.640154] lowmem_reserve[]: 0 0 0 0 0 [ 2727.645659] Node 1 Normal free:2020548kB min:53592kB low:66988kB high:80384kB active_anon:592236kB inactive_anon:64448kB active_file:39772kB inactive_file:176232kB unevictable:0kB writepending:236kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33344kB pagetables:61640kB bounce:0kB free_pcp:852kB local_pcp:592kB free_cma:0kB [ 2727.734101] lowmem_reserve[]: 0 0 0 0 0 [ 2727.738150] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2727.777115] Node 0 DMA32: 1506*4kB (UMEH) 2283*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33264kB [ 2727.802512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2727.813607] Node 1 Normal: 413*4kB (UME) 148*8kB (UME) 413*16kB (UME) 45*32kB (UME) 61*64kB (UM) 15*128kB (UM) 6*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2021700kB [ 2727.832558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2727.842495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2727.853706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2727.870145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2727.888376] 55593 total pagecache pages [ 2727.892810] 0 pages in swap cache [ 2727.896279] Swap cache stats: add 0, delete 0, find 0/0 17:10:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x5, 0x10) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) restart_syscall() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af75000008f900bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0xa, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x1, 0x0, [0x1, 0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0xffffffff]}) [ 2727.918355] Free swap = 0kB [ 2727.921491] Total swap = 0kB [ 2727.924520] 1965979 pages RAM [ 2727.932725] 0 pages HighMem/MovableOnly [ 2727.936735] 338456 pages reserved [ 2727.940189] 0 pages cma reserved 17:10:50 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, 0x1e) connect$pptp(r0, &(0x7f00000004c0)={0x18, 0x2, {0x1000, @local}}, 0x1e) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1, 0xc0, 0xaa}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'sha256-avx2\x00'}}, &(0x7f0000000100)="cb085fe0342cda82144a9f3181f01eee00ecdca1cfce6d7b5e93a03057df1c4b1a8940ab1b3ecbfb01be5a300deec413a02ece32c3e4a80a42db918cc19ece80250494840712d24f2de5bf9a1db459d488acb419c385e1e63d5dc9ad1b06711bdabdf436c1118dcde6b6a9d0c71627748c7a73f185933052162ac84d6d7818e869aeb039a5d3e75f2e00d84efc11fed5e538793a87d06b8d4530329b7aebbf313d06628b43cce306b045efafb65d8f1427ce0b25e41b539ef7d3eacba7a9c142", &(0x7f00000001c0)=""/170) 17:10:50 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000200)=0x65ac) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r6, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 17:10:50 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/nfsfs\x00') getsockopt$sock_int(r1, 0x1, 0x0, 0x0, &(0x7f0000000400)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) recvfrom$l2tp(r2, &(0x7f0000000000)=""/46, 0x2e, 0xfa90841282bef047, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 17:10:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) sysfs$2(0x2, 0x3, &(0x7f0000000240)=""/95) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x110, 0x24, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4f, 0x7, 0x8001, 0x1, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0xfffd, 0x0, 0x6, 0x40, 0xb7e3, 0x2, 0x5, 0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x4, 0x20, 0x1, 0x6, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x58, 0x9, 0x9, 0x0, 0x7, 0x1, 0x8}}, {0x14, 0x2, [0x7ff, 0xfff8, 0x4, 0x3, 0x3, 0x1, 0x7, 0xdabf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x2, 0x0, 0x0, 0xe2, 0x5, 0xa}}, {0x18, 0x2, [0xef, 0x0, 0x8, 0x7, 0x4, 0x20, 0x9, 0x5, 0x4, 0x8]}}]}]}, 0x110}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x40) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) sendmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000000)=@xdp={0x2c, 0xf, r5, 0x21}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="22aeebe27a864bdd6cf3481f86190a7dc269a5637969bc89ff11a64036", 0x1d}, {&(0x7f00000000c0)="1088dd930f41b586852031f80019b15478cdff224a77029aaf85db48fb6ee30382050287b2ea9644cad85d37fddf6a5387f4d971103c8930268ff2258a86a5a48159277026588152416f4aec25db4d8482095b915f9d5addd4c1b46fb7c0308f959cef153a02ee4c991dbe99070fac21d36a81c1f457ff74be64", 0x7a}], 0x2, &(0x7f0000000180)=[{0xa0, 0x112, 0x80000000, "58bb25bcd478fa383a27de803db6da5398c2f30462b5e6efc04147be41733db44c76a85fbe9de1c1aa64c516de101935adeba0b7c6ab0f3b276a8f0c0e8f03a690e8dc5d82c70055d31001431e211bf0bbcd9a7e19421d8b1724013c106bf34ab0dc8e603f1bd5da4acfc6db156dbba5c4b68c53c8a5d48e0d38343a7ec725eadec8c01bd40db7dce6feb53f99a0"}], 0xa0}}, {{&(0x7f0000000240)=@ethernet={0x306, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="c58497d675a44b9f9c825f1265c50d9f469cdd00858ca8d0e09cc7a2f7af2a9686504ff1c0b010534707bc27a561129d732dadb0140965a47cbde910fd1ce7ca3b1d66ede1d0f61de7dca72d92378d3dfc8165690676a215d3f9ea931d42e8546281c4cc01f188a4a945a2853a435b12eeea1ec8d68844dc71ae706f6e3c343ee4d37b8ca012776c061b771a6e0fae9c0b2b4f4070b01b458d166fdb0d96d1a17d4c4643e2f5cc4e60abb39ded1b455c52af60994b0b497077009c64cf19877bb4187779afbab947e183ed0bc3e33b7cdd925658f3", 0xd5}, {&(0x7f0000000440)="6f4152c156efc7e9dfd209db83f74655ffa82c65df2d1925fb25bf20936d88328aaa2bfc118063d50b1b742c2eec0531510b4946cdcf851f7390e66176fb618c58b9a40efd474093eb23", 0x4a}, {&(0x7f00000004c0)="a513c1db5d5f30475b2994520f50609700e7f070c217450439705352fab2cde10c097f56d035b70f1f665ecdd5ccecc82acc6500ea5fac3019e978d3414c3dc63d74817f2781de6d", 0x48}], 0x3, &(0x7f0000000540)=[{0x110, 0x110, 0xfff, "adaa69b494412c8e12c2ad1f2af6307acb009cd299c1a73c400fc9379c95b113098349b08a58c46cfe09b72af2aee9da5cce8b29a1f20aaa17d919e33fd0a01b9d23c2459c343eb85570c81de87238d68bad99c4318f6b0f3ba2bf1bfcc772ad4d0ba27def1a47a2ce9c6a88e75102fd261c05a5faf907b7c623af0d000fe454d06f3928b4ffcb4f0870ca0afa8a00ff0d12c382f7270b30f9c86b1f746f96606bce0b968a67db963d055ca1a72d94efddc4235601a6c9cd87d5f9db66b0ec6d697c96a75b77fa2e28581bbbfe289efe43ba780af3019b041da91ba235aca7233200f42ce264ac429014c968e75ffdc4723eb93015b141d2ca6f0d"}, {0x98, 0x10a, 0x800, "6804ce7ac31606756c5dbf48dde141f14097786729dc13072d97b2cad7ef00ae890d372db01443c3434a97c14631f0c1cae3a11f8b24dc42071c4522edaa65be0c9c9f7ec229e155da5ff936b12fbbfd1440994d39cc59e2a713c0ec7e98ad1b0c21b20fc63774e2e1bdfba8ada83e5ab752eae2f79e572c1093f7be83f2413deaac9272"}, {0x28, 0x1, 0xfffff800, "5b52e0420b96eecf18948e789a6ea0bbeab3104ca2617a"}, {0xb8, 0x3a, 0x3, "074fcbe2faefebdfa4ae03280a824cc5ce2af9849315cc9a83a292cd1b988d9cb08aa5662a25b07ea7908426672ec9f022db6cad7ef274f2b72068bcc9c6233df2a021228c6dfb0cb2d1a4541e828a77dd30e8b27d7711d4b72c77e8c68e1c68ebbfeb862e4c79a5ce139ad7930ed34da1f8befa12ca164dfe1198acbbec76b4d99c2d9b73f0f45d340f95887e2e880857239fb2a5baaf966e6b018052b97c3418ae"}, {0x108, 0x117, 0x8, "5c4910d7eeb87730fcd4ada7af92853f3fea5b1cebe9ab5ce887ec6507ac33056dab59c10a15d4a6883289de1e215f75fcec54c3c576b1df59cf49f5325a68c116cdee882370c9b4436c797db259bf07057ddb5eaacf0d14150ec865e6243a0370838e6a0c90361ce5f71607e44aa8fc30c2487074db2a0868e7e53bd4ab5691996aa1fd67bb8430662932c2422987ab329828925c414fdc43de5e43fe4eaacf986004289993484fb67c4bc03008d24b1deb0a5f70b997999feae18e6b5f87efe2f4b67484a6bd14242d90341ed8069c73972c7d68442d6aa235fc17422af3fd59fd7d8a7d42848d9938623217642446c950"}], 0x390}}], 0x2, 0x20000010) [ 2728.275195] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2728.310526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2728.332762] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2728.433772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2728.505094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:10:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x101200, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000200)={r7, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000240)={r7, 0x4}, 0x8) 17:10:51 executing program 0: r0 = socket$kcm(0x10, 0xd, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000000)=""/42, &(0x7f0000000040)=0x2a) 17:10:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x110, 0x24, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4f, 0x7, 0x8001, 0x1, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0xfffd, 0x0, 0x6, 0x40, 0xb7e3, 0x2, 0x5, 0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x4, 0x20, 0x1, 0x6, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x58, 0x9, 0x9, 0x0, 0x7, 0x1, 0x8}}, {0x14, 0x2, [0x7ff, 0xfff8, 0x4, 0x3, 0x3, 0x1, 0x7, 0xdabf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x2, 0x0, 0x0, 0xe2, 0x5, 0xa}}, {0x18, 0x2, [0xef, 0x0, 0x8, 0x7, 0x4, 0x20, 0x9, 0x5, 0x4, 0x8]}}]}]}, 0x110}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x40) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2728.683978] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2728.720516] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2728.757967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:10:51 executing program 5: socket$pptp(0x18, 0x1, 0x2) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast2}}, 0xfffffffffffffccc) 17:10:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYRES16=r1]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x800000003, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x4, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:10:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x110, 0x24, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4f, 0x7, 0x8001, 0x1, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0xfffd, 0x0, 0x6, 0x40, 0xb7e3, 0x2, 0x5, 0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x4, 0x20, 0x1, 0x6, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x58, 0x9, 0x9, 0x0, 0x7, 0x1, 0x8}}, {0x14, 0x2, [0x7ff, 0xfff8, 0x4, 0x3, 0x3, 0x1, 0x7, 0xdabf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x2, 0x0, 0x0, 0xe2, 0x5, 0xa}}, {0x18, 0x2, [0xef, 0x0, 0x8, 0x7, 0x4, 0x20, 0x9, 0x5, 0x4, 0x8]}}]}]}, 0x110}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x40) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r2, r5}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'bridge_slave_1\x00', {0x6}, 0xff}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2729.021962] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:51 executing program 5: r0 = socket$kcm(0x10, 0xd, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000000)=""/42, &(0x7f0000000040)=0x2a) [ 2729.084042] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8dd4f7937315e89f8f67d3ecfb8418c558e14857f3618189b8218e3d71c6112f8884e57ab53792c3b3e5afa22bcacbb1b5630f18bd116fcd49fc075bfdb9827e6e6543bea35917bf86ae7c88e4df84f4e021b41e8d26fe43c2209cf23e699dabf09a4f3bb6f314aaf6fcae5205f4e2f47a8565ffa9211f0544ad44c8b9c5b995707af9aa8cbe3e9d1e7976e6c280171139764825f7ab56f72ea2f3d9eeda4e2308134191b3824f5452e4742de940cbe8d71e1a0500"/222]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000004c0)=""/196, &(0x7f0000000000)=0xc4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x588}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2729.132283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:10:52 executing program 5: r0 = socket$kcm(0x10, 0xa, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='\xa3\xf5\n\n2\xcaGs\xd8\x84\xff*\x80\xc7KU\x01\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x800, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x6, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3, @ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r3, r5}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x1) rt_sigaction(0x27, &(0x7f0000000200)={0x0, 0x58000001, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xb0, 0x1405, 0x200, 0x70bd25, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000040}, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000400)) 17:10:52 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x61900, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x113, 0x0, &(0x7f00000006c0)="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"}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) [ 2729.269090] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2729.330311] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2729.352378] CPU: 1 PID: 660 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2729.360131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2729.369499] Call Trace: [ 2729.372099] dump_stack+0x1b2/0x283 [ 2729.375741] warn_alloc.cold+0x96/0x1af [ 2729.379737] ? zone_watermark_ok_safe+0x250/0x250 [ 2729.384611] ? wait_for_completion_io+0x10/0x10 [ 2729.389310] __alloc_pages_nodemask+0x2129/0x2730 [ 2729.394200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2729.399068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2729.403943] ? HARDIRQ_verbose+0x10/0x10 [ 2729.408021] ? do_raw_spin_unlock+0x164/0x250 [ 2729.412537] alloc_pages_current+0xe7/0x1e0 [ 2729.416882] kvm_mmu_create+0xd1/0x1c0 [ 2729.420791] kvm_arch_vcpu_init+0x282/0x890 [ 2729.425134] ? alloc_pages_current+0xef/0x1e0 [ 2729.429651] kvm_vcpu_init+0x26d/0x360 [ 2729.433562] vmx_create_vcpu+0xf5/0x2950 [ 2729.437647] ? __mutex_unlock_slowpath+0x75/0x780 [ 2729.442504] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2729.447655] ? alloc_loaded_vmcs+0x240/0x240 [ 2729.452089] kvm_vm_ioctl+0x4ae/0x1430 [ 2729.455999] ? __lock_acquire+0x655/0x42a0 [ 2729.460253] ? kvm_vcpu_release+0xa0/0xa0 [ 2729.464422] ? trace_hardirqs_on+0x10/0x10 [ 2729.468674] ? check_preemption_disabled+0x35/0x240 [ 2729.473714] ? trace_hardirqs_on+0x10/0x10 [ 2729.477969] ? check_preemption_disabled+0x35/0x240 [ 2729.483006] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2729.487957] ? HARDIRQ_verbose+0x10/0x10 [ 2729.492040] ? kvm_vcpu_release+0xa0/0xa0 [ 2729.496204] do_vfs_ioctl+0x75a/0xfe0 [ 2729.500028] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2729.505671] ? ioctl_preallocate+0x1a0/0x1a0 [ 2729.510110] ? security_file_ioctl+0x76/0xb0 [ 2729.514536] ? security_file_ioctl+0x83/0xb0 [ 2729.518959] SyS_ioctl+0x7f/0xb0 [ 2729.522336] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2729.526328] do_syscall_64+0x1d5/0x640 [ 2729.530239] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2729.535528] RIP: 0033:0x45cb29 [ 2729.538726] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:10:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x110, 0x24, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4f, 0x7, 0x8001, 0x1, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0xfffd, 0x0, 0x6, 0x40, 0xb7e3, 0x2, 0x5, 0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x4, 0x20, 0x1, 0x6, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x58, 0x9, 0x9, 0x0, 0x7, 0x1, 0x8}}, {0x14, 0x2, [0x7ff, 0xfff8, 0x4, 0x3, 0x3, 0x1, 0x7, 0xdabf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x2, 0x0, 0x0, 0xe2, 0x5, 0xa}}, {0x18, 0x2, [0xef, 0x0, 0x8, 0x7, 0x4, 0x20, 0x9, 0x5, 0x4, 0x8]}}]}]}, 0x110}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x40) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x10) [ 2729.546446] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2729.553726] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2729.561008] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2729.568292] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2729.575574] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 17:10:52 executing program 5 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2729.661742] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2729.690087] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2729.758526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:10:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r6, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x200080c0) [ 2729.908316] Mem-Info: 17:10:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x110, 0x24, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4f, 0x7, 0x8001, 0x1, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0xfffd, 0x0, 0x6, 0x40, 0xb7e3, 0x2, 0x5, 0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x4, 0x20, 0x1, 0x6, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x58, 0x9, 0x9, 0x0, 0x7, 0x1, 0x8}}, {0x14, 0x2, [0x7ff, 0xfff8, 0x4, 0x3, 0x3, 0x1, 0x7, 0xdabf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x2, 0x0, 0x0, 0xe2, 0x5, 0xa}}, {0x18, 0x2, [0xef, 0x0, 0x8, 0x7, 0x4, 0x20, 0x9, 0x5, 0x4, 0x8]}}]}]}, 0x110}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x40) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2729.943957] active_anon:583240 inactive_anon:25890 isolated_anon:0 [ 2729.943957] active_file:9943 inactive_file:44070 isolated_file:0 [ 2729.943957] unevictable:0 dirty:130 writeback:0 unstable:0 [ 2729.943957] slab_reclaimable:63653 slab_unreclaimable:238106 [ 2729.943957] mapped:67238 shmem:31004 pagetables:26693 bounce:0 [ 2729.943957] free:516625 free_pcp:333 free_cma:0 [ 2730.042434] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2730.072219] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2730.093227] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2730.112079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2730.246511] Node 1 active_anon:592112kB inactive_anon:64456kB active_file:39772kB inactive_file:176276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59148kB dirty:516kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2730.306219] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:10:53 executing program 0: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="08af7500000800f0babbbb0180c2000001000000004c27aaaaaba1aaaabb8d84d2c6715635a8a84e69d39a7441a98e6a79a7ae85926a93be6900738a1d65d5fd9bbd649cbf9c9138670a7c814cfb780177b8483ae1550a7de247c7da536e81ce8e50f854b08d5486d8cde28abbfa776f12f7cba35ac36f32e2a8d5783d5c747faa50262aa2c8a62854c0b19ff9af4b8aeff0011c2838"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x10000008, 0x1006, 0x7c}, 0x0, 0x0, r0, 0x1) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = socket$kcm(0x11, 0xb, 0x0) sendmsg(r2, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) dup(r3) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x4, 0xaf, &(0x7f0000000000)="8c0a2623b9ed0f7ee513c83e4aa170729803b152425024bb430fd68021b4e9a7a0a30602aad1a2ceb34a6a07acc03114e8b2649183c88ab9ac0e12e3490b48e2aeda519ee8ce4f077508a4523c307a0568b0aa96f2d285d0a589f96c58e20788e13350977744ac426305f7602479cfa758bb598a41d2d2802783f034774501822a44e6ad7c880894d4e8db0d3d32e64a434dc583b87c4827d419e4190f855df9bec6e9cdd7ce74045a00dfa1d7982a", 0x9, 0x5, 0x0, 0x7, 0x8, 0x3, 0x10000, 'syz1\x00'}) 17:10:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x110, 0x24, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4f, 0x7, 0x8001, 0x1, 0x4, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0xfffd, 0x0, 0x6, 0x40, 0xb7e3, 0x2, 0x5, 0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x4, 0x20, 0x1, 0x6, 0x1000}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x58, 0x9, 0x9, 0x0, 0x7, 0x1, 0x8}}, {0x14, 0x2, [0x7ff, 0xfff8, 0x4, 0x3, 0x3, 0x1, 0x7, 0xdabf]}}, {{0x1c, 0x1, {0x1, 0x5, 0x2, 0x0, 0x0, 0xe2, 0x5, 0xa}}, {0x18, 0x2, [0xef, 0x0, 0x8, 0x7, 0x4, 0x20, 0x9, 0x5, 0x4, 0x8]}}]}]}, 0x110}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2730.352539] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2730.357640] Node 0 DMA32 free:33148kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:268kB local_pcp:160kB free_cma:0kB [ 2730.415033] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:53 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x400a41) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0xa, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/124) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2730.459222] lowmem_reserve[]: 0 0 0 0 0 [ 2730.478104] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2730.490155] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2730.517373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2730.539820] lowmem_reserve[]: 0 0 0 0 0 [ 2730.553292] Node 1 Normal free:2022808kB min:53592kB low:66988kB high:80384kB active_anon:592212kB inactive_anon:64456kB active_file:39772kB inactive_file:176276kB unevictable:0kB writepending:516kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33376kB pagetables:61640kB bounce:0kB free_pcp:844kB local_pcp:660kB free_cma:0kB [ 2730.591860] lowmem_reserve[]: 0 0 0 0 0 [ 2730.596352] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2730.624395] Node 0 DMA32: 1475*4kB (UMEH) 2283*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33140kB 17:10:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x80000003, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x4002e, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x10) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @null, @rose, @null, @null, @default, @remote, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$sock_int(r2, 0x1, 0x9, 0x0, &(0x7f0000000400)) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1020}, 0x0, 0xf, 0xffffffffffffffff, 0xc) r4 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4, r6}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e22, 0x80000001, @mcast1, 0xd3}, {0xa, 0x4e23, 0x9, @remote, 0x101}, 0x3, [0x3, 0x4, 0x200, 0xebf, 0x9, 0x0, 0x38e, 0x3]}, 0x5c) [ 2730.666761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2730.693578] Node 1 Normal: 181*4kB (UME) 134*8kB (UME) 394*16kB (UME) 113*32kB (UME) 60*64kB (UM) 13*128kB (UM) 5*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2021956kB [ 2730.733578] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.745470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.756023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2730.766646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2730.776147] 55599 total pagecache pages [ 2730.780391] 0 pages in swap cache [ 2730.790026] Swap cache stats: add 0, delete 0, find 0/0 [ 2730.797369] Free swap = 0kB [ 2730.801256] Total swap = 0kB [ 2730.807807] 1965979 pages RAM [ 2730.817509] 0 pages HighMem/MovableOnly [ 2730.826799] 338456 pages reserved [ 2730.850544] 0 pages cma reserved 17:10:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f00000001c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000240)="9643ec6d1005504ad06bd659873933c728dd3133122edcbff72b237c5d3c2ba44b397d543046e029c9862862", 0x2c, 0x0, 0x0, 0x3, r3}, &(0x7f0000000300)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = getpid() ptrace$pokeuser(0x6, r5, 0xc2e5, 0xd9b) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000340)={0x8, 0x0, 0x3f, 0x1}, 0x10) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 17:10:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2730.934087] FAULT_INJECTION: forcing a failure. [ 2730.934087] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.961752] CPU: 1 PID: 685 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2730.969506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2730.978871] Call Trace: [ 2730.981478] dump_stack+0x1b2/0x283 [ 2730.985131] should_fail.cold+0x10a/0x154 [ 2730.989305] should_failslab+0xd6/0x130 [ 2730.993297] kmem_cache_alloc+0x28e/0x3c0 [ 2730.997470] vmx_create_vcpu+0x86/0x2950 [ 2731.001551] ? __mutex_unlock_slowpath+0x75/0x780 [ 2731.006415] ? alloc_loaded_vmcs+0x240/0x240 [ 2731.010847] kvm_vm_ioctl+0x4ae/0x1430 [ 2731.014752] ? __lock_acquire+0x655/0x42a0 [ 2731.019004] ? kvm_vcpu_release+0xa0/0xa0 [ 2731.019898] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2731.023174] ? trace_hardirqs_on+0x10/0x10 [ 2731.023185] ? check_preemption_disabled+0x35/0x240 [ 2731.023198] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2731.023212] ? proc_tid_io_accounting+0x20/0x20 [ 2731.046308] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2731.050348] ? HARDIRQ_verbose+0x10/0x10 [ 2731.050364] ? kvm_vcpu_release+0xa0/0xa0 [ 2731.066888] do_vfs_ioctl+0x75a/0xfe0 [ 2731.070709] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2731.075294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2731.076348] ? ioctl_preallocate+0x1a0/0x1a0 [ 2731.076371] ? security_file_ioctl+0x76/0xb0 [ 2731.093751] ? security_file_ioctl+0x83/0xb0 [ 2731.098174] SyS_ioctl+0x7f/0xb0 [ 2731.101551] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2731.105537] do_syscall_64+0x1d5/0x640 [ 2731.109443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2731.114653] RIP: 0033:0x45cb29 [ 2731.117852] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2731.125572] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2731.132856] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2731.140135] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2731.147418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2731.154708] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:10:54 executing program 0: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="08af750000080000bbbbbb0100000100008d000000000000a44e6fdb000db454697e058a2955d84ae6f0143ce8aa8c6993123deaaf85db8ec4a8345788ea52166d75"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r6, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRESHEX=r6, @ANYBLOB="5092f09535e6d0c8b471d4eceae1ec8ac064ad34cd69fab888134c3f38fef85ebe60c704f7c9c33b88844bc73585f3864cb544dccef654fe590bbe37607b7ba9ada83d089b4a70e4c699233e09eb3839502a85992c23df12551b195996088905c8b5dcc7d3719654c3ea9227af7ce0a1291274ea403ca9375eded2760dbf8f83f3648d5a69db60064ec93c7a35a78cf6ef9d200690a7034bb234b0f95b352940aabf8e1291989724354bfd765a4acfebe892c03316628b9a9577119425d0e9edddfa0ca467320c9050ecef1f948bc5d648d06dee53313b855bfc0dfdfc93bb05ceea1cd02c66c1", @ANYRESHEX, @ANYRES64]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x1, 0x6, 0x2017, 0x8, 0x4, 0x0, 0x0, 0x6}}) 17:10:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff010000000b00010068667363000000000800028e82d90bb0ff3b4ad1"], 0x38}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2731.339965] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2731.379224] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2731.432758] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:10:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2731.578968] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2731.598324] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:55 executing program 5 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:10:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:10:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000580)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x3, 0x4, 0x64, 0x80000001, 0x6}, &(0x7f0000000640)=0x98) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:10:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000200)={r5, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r5, 0x800, 0x5, 0x1ff}, &(0x7f00000000c0)=0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x61900, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x113, 0x0, &(0x7f00000006c0)="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"}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x106}, 0x0, 0x0, &(0x7f0000000480)={0x5, 0xb, 0xf0d, 0x7}, &(0x7f00000004c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x4}}, 0x10) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x141040, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a0000008400000048a19d7c9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10, r7, r8}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r9, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r10}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r10}, 0xc) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 17:10:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) [ 2732.979544] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) connect(r0, &(0x7f0000000000)=@rc={0x1f, @none, 0x3}, 0x80) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x200000) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x1c7701, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000100)) 17:10:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x1f, @loopback, 0xea2}, 0x1c) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbaaaaaba1aaaabb8d"]) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000140)) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/68, &(0x7f00000000c0)=0x44) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000007c0)={0x9, &(0x7f0000000240)=""/138, &(0x7f0000001900)=[{0x3, 0xb9, 0x4, &(0x7f0000000300)=""/185}, {0x10000, 0x55, 0x0, &(0x7f0000000180)=""/85}, {0x3, 0xd4, 0x7fff, &(0x7f00000004c0)=""/212}, {0x6, 0x40, 0x6, &(0x7f00000003c0)=""/64}, {0xbb07, 0x1000, 0xffffff7f, &(0x7f0000000900)=""/4096}, {0x80, 0xb4, 0x400, &(0x7f00000005c0)=""/180}, {0xfffffff8, 0x17, 0x6, &(0x7f0000000440)=""/23}, {0x9, 0xa2, 0x80, &(0x7f0000000680)=""/162}, {0x6, 0x61, 0x8, &(0x7f0000000740)=""/97}]}) [ 2733.044023] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:10:55 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xd4f4, 0x690100) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x4, 0x7ff, 0x100000}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c200cf310001000000004c27aaaa0da1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000440)="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") [ 2733.195451] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2733.212020] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2733.230152] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2733.238133] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2733.253975] CPU: 1 PID: 797 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2733.261724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.271062] Call Trace: [ 2733.273639] dump_stack+0x1b2/0x283 [ 2733.277251] warn_alloc.cold+0x96/0x1af [ 2733.281207] ? zone_watermark_ok_safe+0x250/0x250 [ 2733.286038] ? wait_for_completion_io+0x10/0x10 [ 2733.290694] __alloc_pages_nodemask+0x2129/0x2730 [ 2733.295532] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2733.300364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2733.305196] ? HARDIRQ_verbose+0x10/0x10 [ 2733.309240] ? lock_downgrade+0x6e0/0x6e0 [ 2733.313376] alloc_pages_current+0xe7/0x1e0 [ 2733.317686] kvm_mmu_create+0xd1/0x1c0 [ 2733.321557] kvm_arch_vcpu_init+0x282/0x890 [ 2733.325863] ? alloc_pages_current+0xef/0x1e0 [ 2733.330348] kvm_vcpu_init+0x26d/0x360 [ 2733.334224] vmx_create_vcpu+0xf5/0x2950 [ 2733.338270] ? __mutex_unlock_slowpath+0x75/0x780 [ 2733.343094] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2733.348094] ? alloc_loaded_vmcs+0x240/0x240 [ 2733.352487] kvm_vm_ioctl+0x4ae/0x1430 [ 2733.356359] ? __lock_acquire+0x655/0x42a0 [ 2733.360573] ? kvm_vcpu_release+0xa0/0xa0 [ 2733.364707] ? trace_hardirqs_on+0x10/0x10 [ 2733.368925] ? check_preemption_disabled+0x35/0x240 [ 2733.373925] ? trace_hardirqs_on+0x10/0x10 [ 2733.378143] ? check_preemption_disabled+0x35/0x240 [ 2733.383142] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2733.388058] ? HARDIRQ_verbose+0x10/0x10 [ 2733.392103] ? kvm_vcpu_release+0xa0/0xa0 [ 2733.396237] do_vfs_ioctl+0x75a/0xfe0 [ 2733.400022] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2733.405645] ? ioctl_preallocate+0x1a0/0x1a0 [ 2733.410043] ? security_file_ioctl+0x76/0xb0 [ 2733.414430] ? security_file_ioctl+0x83/0xb0 [ 2733.418840] SyS_ioctl+0x7f/0xb0 [ 2733.422186] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2733.426145] do_syscall_64+0x1d5/0x640 [ 2733.430029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2733.435201] RIP: 0033:0x45cb29 [ 2733.438372] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2733.446071] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2733.453326] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2733.460576] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2733.467830] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2733.475083] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 17:10:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2733.628292] Mem-Info: [ 2733.633834] active_anon:583256 inactive_anon:25891 isolated_anon:0 [ 2733.633834] active_file:9944 inactive_file:44076 isolated_file:0 [ 2733.633834] unevictable:0 dirty:36 writeback:25 unstable:0 [ 2733.633834] slab_reclaimable:63711 slab_unreclaimable:238122 [ 2733.633834] mapped:67250 shmem:31004 pagetables:26702 bounce:0 [ 2733.633834] free:516450 free_pcp:420 free_cma:0 [ 2733.675448] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2733.688089] FAULT_INJECTION: forcing a failure. [ 2733.688089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2733.711633] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2733.715128] CPU: 0 PID: 804 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2733.729083] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2733.731144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2733.731150] Call Trace: [ 2733.731168] dump_stack+0x1b2/0x283 [ 2733.731185] should_fail.cold+0x10a/0x154 [ 2733.731201] __alloc_pages_nodemask+0x22b/0x2730 [ 2733.731210] ? __lock_acquire+0x655/0x42a0 [ 2733.731223] ? __lock_acquire+0x655/0x42a0 [ 2733.731232] ? mark_held_locks+0xa6/0xf0 [ 2733.731242] ? retint_kernel+0x2d/0x2d [ 2733.731253] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2733.731264] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2733.731276] ? trace_hardirqs_on+0x10/0x10 [ 2733.731289] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2733.731299] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2733.731312] ? check_preemption_disabled+0x35/0x240 [ 2733.765400] Node 1 active_anon:592176kB inactive_anon:64460kB active_file:39772kB inactive_file:176304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59196kB dirty:40kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2733.768301] ? retint_kernel+0x2d/0x2d [ 2733.774751] Node 0 [ 2733.776562] cache_grow_begin+0x91/0x410 [ 2733.784590] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2733.785434] cache_alloc_refill+0x28c/0x360 [ 2733.792449] lowmem_reserve[]: [ 2733.794477] kmem_cache_alloc+0x333/0x3c0 [ 2733.799458] 0 [ 2733.804203] vmx_create_vcpu+0x86/0x2950 [ 2733.804221] ? alloc_loaded_vmcs+0x240/0x240 [ 2733.804232] ? kvm_arch_vcpu_create+0x79/0xb0 [ 2733.804246] kvm_vm_ioctl+0x4ae/0x1430 [ 2733.804259] ? __lock_acquire+0x655/0x42a0 [ 2733.804269] ? kvm_vcpu_release+0xa0/0xa0 [ 2733.804280] ? retint_kernel+0x2d/0x2d [ 2733.804291] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2733.804302] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2733.804315] ? check_preemption_disabled+0x35/0x240 [ 2733.804324] ? retint_kernel+0x2d/0x2d [ 2733.804340] ? retint_kernel+0x2d/0x2d [ 2733.822203] 2559 [ 2733.837262] ? kvm_vcpu_release+0xa0/0xa0 [ 2733.837274] do_vfs_ioctl+0x75a/0xfe0 [ 2733.837287] ? check_preemption_disabled+0x35/0x240 [ 2733.837296] ? ioctl_preallocate+0x1a0/0x1a0 [ 2733.837315] ? selinux_file_ioctl+0x103/0x560 [ 2733.837326] ? security_file_ioctl+0x36/0xb0 [ 2733.837334] ? security_file_ioctl+0x83/0xb0 [ 2733.837345] SyS_ioctl+0x7f/0xb0 [ 2733.837353] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2733.837365] do_syscall_64+0x1d5/0x640 [ 2733.837382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2733.837391] RIP: 0033:0x45cb29 [ 2733.837395] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2733.837405] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2733.837410] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2733.837417] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2733.837422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2733.837431] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2733.859384] 2559 [ 2734.006245] syz-executor.5: [ 2734.015951] 2559 [ 2734.043838] page allocation failure: order:0 [ 2734.045942] 2559 [ 2734.046806] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2734.057916] (null) [ 2734.059238] Node 0 DMA32 free:33016kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:340kB local_pcp:152kB free_cma:0kB [ 2734.059267] lowmem_reserve[]: [ 2734.062938] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2734.099936] 0 0 0 0 0 [ 2734.102554] CPU: 0 PID: 804 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2734.103652] Node 0 [ 2734.111281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2734.111286] Call Trace: [ 2734.111306] dump_stack+0x1b2/0x283 [ 2734.111321] warn_alloc.cold+0x96/0x1af [ 2734.111331] ? zone_watermark_ok_safe+0x250/0x250 [ 2734.111349] ? wait_for_completion_io+0x10/0x10 [ 2734.111363] __alloc_pages_nodemask+0x2129/0x2730 [ 2734.111389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2734.111401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2734.111412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2734.111438] alloc_pages_current+0xe7/0x1e0 [ 2734.111451] kvm_mmu_create+0xd1/0x1c0 [ 2734.111464] kvm_arch_vcpu_init+0x282/0x890 [ 2734.111476] ? alloc_pages_current+0xef/0x1e0 [ 2734.118442] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2734.123039] kvm_vcpu_init+0x26d/0x360 [ 2734.123053] vmx_create_vcpu+0xf5/0x2950 [ 2734.123070] ? alloc_loaded_vmcs+0x240/0x240 [ 2734.123081] ? kvm_arch_vcpu_create+0x79/0xb0 [ 2734.123094] kvm_vm_ioctl+0x4ae/0x1430 [ 2734.123106] ? __lock_acquire+0x655/0x42a0 [ 2734.123115] ? kvm_vcpu_release+0xa0/0xa0 [ 2734.123128] ? retint_kernel+0x2d/0x2d [ 2734.126123] lowmem_reserve[]: [ 2734.129309] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2734.129320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2734.129333] ? check_preemption_disabled+0x35/0x240 [ 2734.138581] 0 [ 2734.142769] ? retint_kernel+0x2d/0x2d [ 2734.142784] ? retint_kernel+0x2d/0x2d [ 2734.142797] ? kvm_vcpu_release+0xa0/0xa0 [ 2734.142808] do_vfs_ioctl+0x75a/0xfe0 [ 2734.142820] ? check_preemption_disabled+0x35/0x240 [ 2734.142828] ? ioctl_preallocate+0x1a0/0x1a0 [ 2734.142846] ? selinux_file_ioctl+0x103/0x560 [ 2734.147999] 0 [ 2734.152500] ? security_file_ioctl+0x36/0xb0 [ 2734.152509] ? security_file_ioctl+0x83/0xb0 [ 2734.152520] SyS_ioctl+0x7f/0xb0 [ 2734.152528] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2734.152540] do_syscall_64+0x1d5/0x640 [ 2734.152556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2734.152564] RIP: 0033:0x45cb29 [ 2734.152569] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:10:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:10:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESDEC=r4, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESDEC=r3]) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xd9b) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0x92) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d534511d0492fd421"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2734.152580] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2734.152586] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2734.152592] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2734.152597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2734.152603] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2734.363307] 0 0 0 [ 2734.365963] Node 1 Normal free:2019704kB min:53592kB low:66988kB high:80384kB active_anon:592196kB inactive_anon:64456kB active_file:39772kB inactive_file:176320kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33312kB pagetables:61888kB bounce:0kB free_pcp:1048kB local_pcp:668kB free_cma:0kB [ 2734.414860] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2734.436806] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2734.454619] lowmem_reserve[]: 0 0 0 0 0 [ 2734.473222] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2734.507179] Node 0 DMA32: 1444*4kB (UMEH) 2281*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33000kB [ 2734.527802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2734.549614] Node 1 Normal: 182*4kB (UME) 393*8kB (UME) 209*16kB (UME) 115*32kB (UME) 62*64kB (UM) 15*128kB (UM) 5*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2021520kB [ 2734.577653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2734.586992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2734.618474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2734.647458] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2734.679780] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2734.684131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2734.690559] CPU: 0 PID: 858 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2734.701326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2734.707859] 55609 total pagecache pages [ 2734.710685] Call Trace: [ 2734.710704] dump_stack+0x1b2/0x283 [ 2734.710720] warn_alloc.cold+0x96/0x1af [ 2734.710730] ? zone_watermark_ok_safe+0x250/0x250 [ 2734.710747] ? wait_for_completion_io+0x10/0x10 [ 2734.710762] __alloc_pages_nodemask+0x2129/0x2730 [ 2734.710786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2734.714938] 0 pages in swap cache [ 2734.717313] ? check_preemption_disabled+0x35/0x240 [ 2734.717340] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 2734.726409] Swap cache stats: add 0, delete 0, find 0/0 [ 2734.729756] alloc_pages_current+0xe7/0x1e0 [ 2734.729771] kvm_mmu_create+0xd1/0x1c0 [ 2734.736286] Free swap = 0kB [ 2734.739264] kvm_arch_vcpu_init+0x282/0x890 [ 2734.739277] ? alloc_pages_current+0xef/0x1e0 [ 2734.739289] kvm_vcpu_init+0x26d/0x360 [ 2734.746532] Total swap = 0kB [ 2734.747573] vmx_create_vcpu+0xf5/0x2950 [ 2734.754860] 1965979 pages RAM [ 2734.757463] ? alloc_loaded_vmcs+0x240/0x240 [ 2734.757475] ? vmx_create_vcpu+0x2/0x2950 [ 2734.764913] 0 pages HighMem/MovableOnly [ 2734.767171] kvm_vm_ioctl+0x4ae/0x1430 [ 2734.767194] ? __lock_acquire+0x655/0x42a0 [ 2734.772847] 338456 pages reserved [ 2734.774069] ? kvm_vcpu_release+0xa0/0xa0 [ 2734.774084] ? trace_hardirqs_on+0x10/0x10 [ 2734.778525] 0 pages cma reserved [ 2734.782868] ? check_preemption_disabled+0x35/0x240 [ 2734.782884] ? trace_hardirqs_on+0x10/0x10 [ 2734.782891] ? check_preemption_disabled+0x35/0x240 [ 2734.782902] ? retint_kernel+0x2d/0x2d [ 2734.782913] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2734.782923] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2734.782935] ? kvm_vcpu_release+0xa0/0xa0 [ 2734.782946] do_vfs_ioctl+0x75a/0xfe0 [ 2734.782958] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2734.782968] ? ioctl_preallocate+0x1a0/0x1a0 [ 2734.782988] ? security_file_ioctl+0x76/0xb0 [ 2734.883075] ? security_file_ioctl+0x83/0xb0 [ 2734.887482] SyS_ioctl+0x7f/0xb0 [ 2734.890839] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2734.894805] do_syscall_64+0x1d5/0x640 [ 2734.898683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2734.903868] RIP: 0033:0x45cb29 [ 2734.907047] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2734.914748] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2734.922012] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2734.929271] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2734.936526] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 17:10:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:57 executing program 0: socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1f}, @in={0x2, 0x4e21, @private=0xa010102}], 0x2c) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80002, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000140)={0x8001, 0x11, 0x0, r2}) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r4, 0xd, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x5, r4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000400)) 17:10:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:10:57 executing program 3: socketpair(0xf, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000040)='\xda\x11\xb8#\xcd\xa3C&M\x9a\xdd$?8|\x94\xaf`\xf9oB\x17\x84u\xaf:\x8e\xb6\xd8\xd6\x1e8\x1f1\xea\x91,\xb2\xb7\xfa\x1d\xf3\xa5\xbc\xd2\xfd\xde\x88D\xb6\xb6-TC\"n5\x100\x83\x06\xab\xf3?\x1e\x10\x1fy#@\x94vm\xb0\x8bN\x85\xc9\b\x13`.@\xbb\xe8w\x8dOB\xcf\xc7\xdb)\x12\xc7\xf9\xd2d\xeb1C\xb4\xd3I*\bn0\a\x18\x0f)\xc1j\x19<}\x9e\xa1\xc5x\xb3\xbck\xea4R\xb9\xa6s\x93\xb7\x00\xbai*\xa4\x0f\x80\x9a@e\xa0\xd7k\x93\xc99P\t\xab`\x15\xb1\r\xe7k@^\x04\xd4\x83\x91\x8a\xd6.\xec\xe2H\xf7%\xbc\xec\xf43\xdd\x06\x9d- NMh\xe3\fK)M') sendmsg$tipc(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="5d410c89d8f89f4429e8a2e698fabead9aa08241383f4d932b45f3aa966a4b38329d1d081d9a672003b6b1a32c5f5bbae5cb87be16154e68e5143eb64b27f0970b615a63b744659cd4e39efbfc2b984b2ee1f4a1", 0x54}, {&(0x7f0000000300)="bf6cd93eb9c84330b39145ae9bdd54f8d9cfec20cc7e00e0df700ac432dd7c2fa99c30dd1d710101ef1d8038fdb84f952369ff14ebc67695ce9f0a5ead648e99c665023598514a095aaaa1d9ee839454cb4c0a62d78e9417b7b01debe2ef05d5aa3422ac114106e00296dea7f33724c500755394fbb74a780a8da94c764b288afe56fccc8841d27796ac4183a4", 0x8d}, {&(0x7f0000000440)="1d077904a39d6a6697d3b0d10e3c006565b3c5d3bbbb7dc58ee402611a5ca561e4a9c14c79a09e4713ff3933a899b0bfa4e77e53ade805eb6309c327ec7986890c97f1807bfc6faaa9bbf1ed5c7e404e3ce03973ec682bfb7548016de5d18af4ea7a0270776f97c2a882b59c56fd740889d864c199a670cf47ebb5337afd68a15bdcb2fa0c2c11a4d55605d953cd6f7f09998470bca68fb803ad144dea80775a53e8d5ad72ccd1fa70313405adacf3dd4cfb3f1d4c0af76126fa51c158cb5833569962e0bedc070037afedc34824", 0xce}, {&(0x7f0000000600)="d2f8fea1f59fb490dbf0b2614fa091232ffd2ac07270469cea0e6bf73506eba12a881a8ece1b35aa4e427c95a05397bb056f0bf54aacecb3134be3491c52983a073bcbbd4911fd1d978e1afcb24b80ffa61966ab264f46ffdfedadc2300eb2494fea20514e242fd1ea2d2515f091d57c90dbb231b486330cb1562b0bf8c5afd6c012833182d798be099b8e29bce28082a57be02bff3b214b21a57549d70b67c38cb76ade32eceb1fe98e3f744e9cb931717b4a5993651d6ae86ef76cb94bfbcda0d05d9177784ad772740ef7ee358f82c04b279d1c0249", 0xd7}, {&(0x7f00000003c0)="d264ffcee04068278cf99abd6806d28b97bcf1128fb22f9a3a1a77a3439008eff389925917a030d71ca9010cba927c5d89a19c1d", 0x34}, {&(0x7f0000000700)="f2c57da1d67f249a9f238fdd7e492e540d1b9bc1735f641c220b2446ca2a55a13e73e00563ead4b4acf0e0243a1afcbd3a075c4053069655ed3966dd701de5456a135a5261c9ad3b8270090188f5b422532aa8b10751dddd86e0e4e6f60e289ce4e5d79bc72fbd7b37a3713e7b8f2c795d64f4032c1cdf4e35fac9e7c7e3b64fc5b5209be96e6c6fdaaaca292148344778379ca8c4ca064d82c0d1ef39f01185d9310b7c7a00ea581d36d9250e41a0b0c429335f7fc8272d0f5a70f2425893be214b59", 0xc3}, {&(0x7f0000000540)="06c860d08d383c726fbc343790c81777929f3c19a3eef3b85a42d99efb905c65eb", 0x21}], 0x7, &(0x7f0000000880)="31fa9b6816f133e08a47ea2f453b69f0f134b5f4532be449bba5e2119756b057101c26071834af6c0c5ad92c38e889a30738d23103027fe76dbce4919821d0b81723172594be8b7ed8668ae4267605bb385890b35f9ef9e464408ab68318365efaa148f0de430b09fa06f1a49eede3bfa993ac25b24c139d18f8a33ceb487d16ebd29739b1b773b3f3d1717d00f7cd44c4d53694", 0x94, 0x8c0}, 0x24040854) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) r4 = dup3(r0, r3, 0x0) accept4$llc(r4, &(0x7f0000000940), &(0x7f0000000980)=0x10, 0x80000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={r5, r6/1000+10000}, 0x10) lchown(&(0x7f0000000140)='./bus\x00', r2, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000000c0)={0xc021, 0x3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2734.943784] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2734.978922] warn_alloc_show_mem: 1 callbacks suppressed [ 2734.978946] Mem-Info: [ 2735.000480] active_anon:583233 inactive_anon:25890 isolated_anon:0 [ 2735.000480] active_file:9944 inactive_file:44094 isolated_file:0 [ 2735.000480] unevictable:0 dirty:31 writeback:0 unstable:0 [ 2735.000480] slab_reclaimable:63735 slab_unreclaimable:237998 17:10:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6041, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x21, "c5d1c59b47c8c8663b614f83f120dfaede2dd192f5cb89c2acafd33ce540c34141"}, &(0x7f00000000c0)=0x45) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:10:57 executing program 0: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000400)) chmod(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x4, 0x3}, {0x7, 0x9}]}, 0x14, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) [ 2735.000480] mapped:67024 shmem:31004 pagetables:26728 bounce:0 [ 2735.000480] free:516629 free_pcp:294 free_cma:0 [ 2735.038112] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2735.076091] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2735.103423] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2735.159635] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2735.189812] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2735.195664] CPU: 0 PID: 902 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2735.203391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2735.212755] Call Trace: [ 2735.215354] dump_stack+0x1b2/0x283 [ 2735.218998] warn_alloc.cold+0x96/0x1af [ 2735.222981] ? zone_watermark_ok_safe+0x250/0x250 [ 2735.227837] ? wait_for_completion_io+0x10/0x10 [ 2735.232526] __alloc_pages_nodemask+0x2129/0x2730 [ 2735.237400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.242250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.247110] ? HARDIRQ_verbose+0x10/0x10 [ 2735.251174] ? do_raw_spin_unlock+0x164/0x250 [ 2735.255683] alloc_pages_current+0xe7/0x1e0 [ 2735.260010] kvm_mmu_create+0xd1/0x1c0 [ 2735.263899] kvm_arch_vcpu_init+0x282/0x890 [ 2735.268220] ? alloc_pages_current+0xef/0x1e0 [ 2735.272720] kvm_vcpu_init+0x26d/0x360 [ 2735.276614] vmx_create_vcpu+0xf5/0x2950 [ 2735.280684] ? __mutex_unlock_slowpath+0x75/0x780 [ 2735.285529] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2735.290554] ? alloc_loaded_vmcs+0x240/0x240 [ 2735.294972] kvm_vm_ioctl+0x4ae/0x1430 [ 2735.298863] ? __lock_acquire+0x655/0x42a0 [ 2735.303106] ? kvm_vcpu_release+0xa0/0xa0 [ 2735.307249] ? trace_hardirqs_on+0x10/0x10 [ 2735.311476] ? check_preemption_disabled+0x35/0x240 [ 2735.312218] Node 1 active_anon:592284kB inactive_anon:64456kB active_file:39772kB inactive_file:176380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59196kB dirty:244kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2735.316494] ? trace_hardirqs_on+0x10/0x10 [ 2735.316504] ? check_preemption_disabled+0x35/0x240 [ 2735.316517] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2735.316531] ? HARDIRQ_verbose+0x10/0x10 [ 2735.316546] ? kvm_vcpu_release+0xa0/0xa0 [ 2735.350985] Node 0 [ 2735.353783] do_vfs_ioctl+0x75a/0xfe0 [ 2735.353800] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2735.353816] ? ioctl_preallocate+0x1a0/0x1a0 [ 2735.353838] ? security_file_ioctl+0x76/0xb0 [ 2735.353852] ? security_file_ioctl+0x83/0xb0 [ 2735.359041] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2735.362817] SyS_ioctl+0x7f/0xb0 [ 2735.362827] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2735.362841] do_syscall_64+0x1d5/0x640 [ 2735.362857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2735.362865] RIP: 0033:0x45cb29 [ 2735.362870] RSP: 002b:00007fab435eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2735.362880] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2735.362885] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2735.362892] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.362898] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2735.362904] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab435ef6d4 [ 2735.526817] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2735.528411] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2735.547941] Node 0 DMA32 free:33000kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 2735.578118] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2735.578891] lowmem_reserve[]: [ 2735.589490] CPU: 0 PID: 895 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2735.596121] 0 [ 2735.600314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2735.600319] Call Trace: [ 2735.600336] dump_stack+0x1b2/0x283 [ 2735.600350] warn_alloc.cold+0x96/0x1af [ 2735.600361] ? zone_watermark_ok_safe+0x250/0x250 [ 2735.600380] ? wait_for_completion_io+0x10/0x10 [ 2735.600398] __alloc_pages_nodemask+0x2129/0x2730 [ 2735.600425] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.600436] ? mark_held_locks+0xa6/0xf0 [ 2735.600447] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.600478] alloc_pages_current+0xe7/0x1e0 [ 2735.600493] kvm_mmu_create+0xd1/0x1c0 [ 2735.603061] 0 [ 2735.611627] kvm_arch_vcpu_init+0x282/0x890 [ 2735.611640] ? alloc_pages_current+0xef/0x1e0 [ 2735.611652] kvm_vcpu_init+0x26d/0x360 [ 2735.611664] vmx_create_vcpu+0xf5/0x2950 [ 2735.611678] ? __mutex_unlock_slowpath+0x75/0x780 [ 2735.611688] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2735.611700] ? alloc_loaded_vmcs+0x240/0x240 [ 2735.611717] kvm_vm_ioctl+0x4ae/0x1430 [ 2735.611728] ? __lock_acquire+0x655/0x42a0 [ 2735.611737] ? kvm_vcpu_release+0xa0/0xa0 [ 2735.611747] ? trace_hardirqs_on+0x10/0x10 [ 2735.611757] ? check_preemption_disabled+0x35/0x240 [ 2735.611770] ? trace_hardirqs_on+0x10/0x10 [ 2735.611779] ? check_preemption_disabled+0x35/0x240 [ 2735.615102] 0 [ 2735.617964] ? retint_kernel+0x2d/0x2d [ 2735.617976] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2735.617988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2735.618003] ? kvm_vcpu_release+0xa0/0xa0 [ 2735.622289] 0 [ 2735.626812] do_vfs_ioctl+0x75a/0xfe0 [ 2735.626828] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2735.626840] ? ioctl_preallocate+0x1a0/0x1a0 [ 2735.626861] ? security_file_ioctl+0x76/0xb0 [ 2735.626872] ? security_file_ioctl+0x83/0xb0 [ 2735.632212] 0 [ 2735.636362] SyS_ioctl+0x7f/0xb0 [ 2735.636372] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2735.636387] do_syscall_64+0x1d5/0x640 [ 2735.636405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2735.636415] RIP: 0033:0x45cb29 [ 2735.658293] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2735.658305] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2735.658311] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2735.658318] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2735.658323] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2735.658335] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2735.667696] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2735.872684] lowmem_reserve[]: 0 0 0 0 0 [ 2735.873869] syz-executor.4: [ 2735.876754] Node 1 [ 2735.876872] page allocation failure: order:0 [ 2735.879782] Normal free:2021048kB min:53592kB low:66988kB high:80384kB active_anon:592056kB inactive_anon:64456kB active_file:39772kB inactive_file:176412kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33280kB pagetables:61536kB bounce:0kB free_pcp:1276kB local_pcp:712kB free_cma:0kB [ 2735.879786] lowmem_reserve[]: 0 0 0 0 0 [ 2735.879811] Node 0 [ 2735.890735] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2735.917006] DMA: [ 2735.927223] (null) [ 2735.928620] 16*4kB [ 2735.932789] syz-executor.4 cpuset= [ 2735.932888] (UMH) [ 2735.935138] / [ 2735.938671] 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2735.946718] mems_allowed=0-1 [ 2735.961866] Node 0 DMA32: 1444*4kB (UMEH) 2281*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33000kB [ 2735.968268] CPU: 0 PID: 895 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2735.979013] Node 0 [ 2735.985453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2735.985457] Call Trace: [ 2735.985474] dump_stack+0x1b2/0x283 [ 2735.985489] warn_alloc.cold+0x96/0x1af [ 2735.985498] ? zone_watermark_ok_safe+0x250/0x250 [ 2735.985516] ? wait_for_completion_io+0x10/0x10 [ 2735.985530] __alloc_pages_nodemask+0x2129/0x2730 [ 2735.985560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.985570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2735.985592] ? check_preemption_disabled+0x35/0x240 [ 2735.992574] Normal: [ 2735.997173] alloc_pages_current+0xe7/0x1e0 [ 2735.997190] kvm_mmu_create+0xd1/0x1c0 [ 2735.997203] kvm_arch_vcpu_init+0x282/0x890 [ 2735.999873] 0*4kB [ 2736.003381] ? alloc_pages_current+0xef/0x1e0 [ 2736.003393] kvm_vcpu_init+0x26d/0x360 [ 2736.003406] vmx_create_vcpu+0xf5/0x2950 [ 2736.003420] ? __mutex_unlock_slowpath+0x75/0x780 [ 2736.003431] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2736.003444] ? alloc_loaded_vmcs+0x240/0x240 [ 2736.003459] kvm_vm_ioctl+0x4ae/0x1430 [ 2736.003470] ? __lock_acquire+0x655/0x42a0 [ 2736.003480] ? kvm_vcpu_release+0xa0/0xa0 [ 2736.003491] ? trace_hardirqs_on+0x10/0x10 [ 2736.010235] 0*8kB [ 2736.012279] ? check_preemption_disabled+0x35/0x240 [ 2736.012295] ? trace_hardirqs_on+0x10/0x10 [ 2736.012305] ? check_preemption_disabled+0x35/0x240 [ 2736.019289] 0*16kB [ 2736.021795] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2736.021807] ? HARDIRQ_verbose+0x10/0x10 [ 2736.021818] ? kvm_vcpu_release+0xa0/0xa0 [ 2736.021831] do_vfs_ioctl+0x75a/0xfe0 [ 2736.021843] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2736.021853] ? ioctl_preallocate+0x1a0/0x1a0 [ 2736.021874] ? security_file_ioctl+0x76/0xb0 [ 2736.030158] 0*32kB [ 2736.031533] ? security_file_ioctl+0x83/0xb0 [ 2736.031545] SyS_ioctl+0x7f/0xb0 [ 2736.031559] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2736.037749] 0*64kB [ 2736.038874] do_syscall_64+0x1d5/0x640 [ 2736.038894] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2736.049087] 0*128kB [ 2736.051372] RIP: 0033:0x45cb29 [ 2736.051376] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2736.051386] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2736.051391] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2736.051396] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2736.051402] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2736.051408] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2736.057402] warn_alloc_show_mem: 2 callbacks suppressed [ 2736.057407] Mem-Info: [ 2736.061544] 0*256kB [ 2736.062360] active_anon:583201 inactive_anon:25890 isolated_anon:0 [ 2736.062360] active_file:9944 inactive_file:44103 isolated_file:0 [ 2736.062360] unevictable:0 dirty:26 writeback:0 unstable:0 [ 2736.062360] slab_reclaimable:63724 slab_unreclaimable:238640 [ 2736.062360] mapped:67033 shmem:31004 pagetables:26667 bounce:0 [ 2736.062360] free:516095 free_pcp:402 free_cma:0 [ 2736.069792] 0*512kB [ 2736.071816] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2736.085348] 0*1024kB [ 2736.089170] Node 1 active_anon:592056kB inactive_anon:64456kB active_file:39772kB inactive_file:176412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59228kB dirty:100kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2736.099305] 0*2048kB [ 2736.106272] Node 0 [ 2736.108769] 0*4096kB [ 2736.113922] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2736.122772] = 0kB [ 2736.125566] lowmem_reserve[]: [ 2736.129486] Node 1 [ 2736.133407] 0 [ 2736.144956] Normal: [ 2736.148175] 2559 [ 2736.158070] 262*4kB [ 2736.162105] 2559 [ 2736.169826] (UME) [ 2736.173550] 2559 [ 2736.177099] 257*8kB [ 2736.179119] 2559 [ 2736.191807] (UME) [ 2736.204786] 240*16kB [ 2736.209334] Node 0 [ 2736.218107] (UME) [ 2736.224559] DMA32 free:33000kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:184kB free_cma:0kB [ 2736.235737] 130*32kB [ 2736.269087] lowmem_reserve[]: [ 2736.275230] (UME) [ 2736.299618] 0 [ 2736.305722] 63*64kB [ 2736.330314] 0 [ 2736.337826] (UM) [ 2736.363491] 0 [ 2736.370028] 12*128kB [ 2736.372756] 0 [ 2736.375459] (UM) [ 2736.376091] 0 [ 2736.378526] 6*256kB [ 2736.387509] (UME) [ 2736.389183] Node 0 [ 2736.391688] 5*512kB [ 2736.395124] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2736.396194] (UME) [ 2736.398215] lowmem_reserve[]: [ 2736.432024] 16*1024kB [ 2736.435958] 0 [ 2736.436366] (UME) [ 2736.438632] 0 [ 2736.443174] 7*2048kB [ 2736.446624] 0 [ 2736.446973] (UM) [ 2736.448762] 0 [ 2736.453642] 481*4096kB [ 2736.456829] 0 [ 2736.457248] (M) [ 2736.464468] = 2021664kB [ 2736.488467] Node 1 [ 2736.494362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.494871] Normal free:2021976kB min:53592kB low:66988kB high:80384kB active_anon:592056kB inactive_anon:64456kB active_file:39772kB inactive_file:176412kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33184kB pagetables:61536kB bounce:0kB free_pcp:1216kB local_pcp:604kB free_cma:0kB [ 2736.496522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.498775] lowmem_reserve[]: [ 2736.503359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.504931] 0 [ 2736.506868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.508722] 0 [ 2736.516964] 55632 total pagecache pages [ 2736.517866] 0 [ 2736.522039] 0 pages in swap cache [ 2736.529014] 0 [ 2736.564887] Swap cache stats: add 0, delete 0, find 0/0 [ 2736.567479] 0 [ 2736.571864] Free swap = 0kB [ 2736.586832] Total swap = 0kB [ 2736.589825] Node 0 [ 2736.593215] 1965979 pages RAM [ 2736.595651] DMA: [ 2736.597399] 0 pages HighMem/MovableOnly [ 2736.600980] 16*4kB [ 2736.608386] 338456 pages reserved [ 2736.610097] (UMH) [ 2736.615023] 0 pages cma reserved [ 2736.616083] 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2736.653208] Node 0 DMA32: 1444*4kB (UMEH) 2281*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33000kB [ 2736.667772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 17:10:59 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x3}, 0x6, 0x1, &(0x7f0000000100)="562140158317e77d809bf39607c3e47210dd3b8d340578912467c91deac3c81940e9ad2c48230724506cecb38ed95dae2042fb756b8f0d26f4a06a72b0661d7f00588da216e04a1a1534b0e75992f30fb320ca9c6499ca6626f2b273307384a0fd3701137dda9fa922c64850116d0486b55ac0816dbefdbad67a43526361fd5f6c906cd70db71d8b54acc37bfa3564d6c4", 0x91, 0x74, 0x3, 0x0, 0x4, 0x8001, &(0x7f0000000240)="a23e1e965a03c80ff2e7ef2affc245c1013065931d9bd12c3cb5996f82fbac05c58bbfde04522b5b9bdaa727491a879fc9be4088064c73ea17e33a9338e12cdefeea80d0"}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000000000000004000000000000833247d8e685f45ef4a85f309aceb06539924807e9caab4693e63bfa9081943aa191c6ea981704ed76b981379c234eb9c4b7de991725d28074439fb92ddb7ce3e5068477d49721a7eb1d2e7dd0c700dd5fa066dee2048b9b7128fd", @ANYRES32=r3, @ANYBLOB="000000000000000100000a00ee4434cd18f173e7578048db7aed0b3fd620c8c6bd1668bdd72012997f816f6f2c549aa947ea8afe8848ecdde92c8624eaa51cb69f", @ANYRES32], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000191140219d428d6d99ba613523f49b5b81", @ANYRESHEX, @ANYBLOB="00000000040000004d6d4ba8afcec76fd8d95d21c06872c9b689cba4895c7f227a45de0dd0bcf13117f39b6613e34e80178f45b2ccdc5683b6041b9fbb8b23b95152f5b394edf75877d23874c4b375567441887798972b980a14f5d7a261238767bb6e89eae74296db52baf9e6a58417b1dc758921e68115b3fce3f9336416892396e87da951cc56c76d3e51572f0849dfcd6a1354d920daf950e69c7ddeabfe97702a0b58a3a4cfac02bc"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002a00000225bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="1a059e2d2c2d4416215602054ee6260400ffff030001000500e0bf"], 0x24}, 0x1, 0x0, 0x0, 0x20024000}, 0x40400c1) ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5}}, 0x30) 17:10:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @remote, 0x1, @netrom}, &(0x7f0000000100)=0x1c, 0x80000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:10:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockname$netlink(r3, &(0x7f00000001c0), &(0x7f0000000240)=0xc) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:10:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)={0x2, 0x8000, 0xfffffff9}) 17:10:59 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x321081, 0x52) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r4, 0x7}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x9, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x3}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb5, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 2736.678772] Node 1 Normal: 277*4kB (UME) 201*8kB (UME) 247*16kB (UME) 147*32kB (UME) 63*64kB (UM) 12*128kB (UM) 6*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2021932kB [ 2736.719839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:10:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x1050, 0x12, 0x800, 0x70bd28, 0x25dfdbfd, {0x22, 0x7f, 0x6, 0x0, {0x4e23, 0x4e21, [0xcec9c233, 0x6, 0x1, 0x1], [0x3, 0x1, 0x9, 0x8], 0x0, [0x4, 0x81]}, 0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 2736.750935] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2736.774034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.792821] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:10:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2736.795774] syz-executor.2: [ 2736.822324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.832936] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2736.876881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2736.903729] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2736.915273] 55644 total pagecache pages 17:10:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fchown(r3, r4, r6) dup(r2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2736.925444] CPU: 1 PID: 933 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2736.932093] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2736.933185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.933190] Call Trace: [ 2736.933212] dump_stack+0x1b2/0x283 [ 2736.944871] 0 pages in swap cache [ 2736.950871] warn_alloc.cold+0x96/0x1af [ 2736.950882] ? zone_watermark_ok_safe+0x250/0x250 [ 2736.950901] ? wait_for_completion_io+0x10/0x10 [ 2736.950916] __alloc_pages_nodemask+0x2129/0x2730 [ 2736.950940] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2736.966591] Swap cache stats: add 0, delete 0, find 0/0 [ 2736.969366] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2736.969388] ? HARDIRQ_verbose+0x10/0x10 [ 2736.975417] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 2736.978882] ? do_raw_spin_unlock+0x164/0x250 [ 2736.978897] alloc_pages_current+0xe7/0x1e0 [ 2736.978912] kvm_mmu_create+0xd1/0x1c0 [ 2736.991004] Free swap = 0kB [ 2736.993931] kvm_arch_vcpu_init+0x282/0x890 17:10:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r3, r5}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r6, 0x1) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000140)=""/19) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2736.993943] ? alloc_pages_current+0xef/0x1e0 [ 2736.993956] kvm_vcpu_init+0x26d/0x360 [ 2737.006287] Total swap = 0kB [ 2737.006339] vmx_create_vcpu+0xf5/0x2950 [ 2737.026039] 1965979 pages RAM [ 2737.026329] ? __mutex_unlock_slowpath+0x75/0x780 [ 2737.037969] 0 pages HighMem/MovableOnly [ 2737.041730] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2737.041745] ? alloc_loaded_vmcs+0x240/0x240 [ 2737.041762] kvm_vm_ioctl+0x4ae/0x1430 [ 2737.041775] ? __lock_acquire+0x655/0x42a0 [ 2737.041784] ? kvm_vcpu_release+0xa0/0xa0 [ 2737.041795] ? trace_hardirqs_on+0x10/0x10 [ 2737.051229] 338456 pages reserved [ 2737.053671] ? check_preemption_disabled+0x35/0x240 [ 2737.053692] ? trace_hardirqs_on+0x10/0x10 [ 2737.072905] 0 pages cma reserved [ 2737.075305] ? check_preemption_disabled+0x35/0x240 [ 2737.075319] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2737.075332] ? HARDIRQ_verbose+0x10/0x10 [ 2737.109633] ? kvm_vcpu_release+0xa0/0xa0 [ 2737.113791] do_vfs_ioctl+0x75a/0xfe0 [ 2737.117601] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2737.123230] ? ioctl_preallocate+0x1a0/0x1a0 [ 2737.127658] ? security_file_ioctl+0x76/0xb0 [ 2737.132072] ? security_file_ioctl+0x83/0xb0 [ 2737.136491] SyS_ioctl+0x7f/0xb0 [ 2737.139864] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2737.143846] do_syscall_64+0x1d5/0x640 [ 2737.147748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2737.152936] RIP: 0033:0x45cb29 [ 2737.156123] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2737.163835] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2737.170841] syz-executor.5: 17:10:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x20000, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:10:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000280)=0x9, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:10:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7, 0x18803) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x1d, 0x18, "9630d396d75560b410d5b6609bdc9bddfd108ac78259da8f07611785cf70a7a672f166e6b95d64b8b6e6e3c6eed2f6af5aa76b7a15749cf38d08eec15d7fa081", "3894d6f2becc64c8471bf2eaa13a1a6b590af2c6313f1ea51f2344fc69419ad3", [0xffffffff, 0x800]}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2737.171104] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2737.171111] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2737.171117] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2737.171123] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2737.179040] Mem-Info: [ 2737.236835] active_anon:583216 inactive_anon:25890 isolated_anon:0 [ 2737.236835] active_file:9943 inactive_file:44116 isolated_file:0 [ 2737.236835] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2737.236835] slab_reclaimable:63703 slab_unreclaimable:238564 [ 2737.236835] mapped:67057 shmem:31004 pagetables:26729 bounce:0 [ 2737.236835] free:516052 free_pcp:303 free_cma:0 [ 2737.246186] page allocation failure: order:0 [ 2737.278613] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:11:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2737.330452] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2737.361057] Node 1 active_anon:592316kB inactive_anon:64456kB active_file:39772kB inactive_file:176460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60024kB dirty:116kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2737.401074] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2737.407396] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request 17:11:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2737.427816] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2737.443472] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2737.486555] CPU: 0 PID: 931 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2737.494294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2737.496090] lowmem_reserve[]: [ 2737.503644] Call Trace: [ 2737.503666] dump_stack+0x1b2/0x283 [ 2737.503681] warn_alloc.cold+0x96/0x1af [ 2737.503691] ? zone_watermark_ok_safe+0x250/0x250 [ 2737.503708] ? wait_for_completion_io+0x10/0x10 [ 2737.503722] __alloc_pages_nodemask+0x2129/0x2730 [ 2737.503746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2737.503757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2737.503778] ? HARDIRQ_verbose+0x10/0x10 [ 2737.503786] ? check_preemption_disabled+0x35/0x240 [ 2737.503800] alloc_pages_current+0xe7/0x1e0 [ 2737.534750] 0 [ 2737.536214] kvm_mmu_create+0xd1/0x1c0 [ 2737.536229] kvm_arch_vcpu_init+0x282/0x890 [ 2737.556974] 2559 [ 2737.560088] ? alloc_pages_current+0xef/0x1e0 [ 2737.560105] kvm_vcpu_init+0x26d/0x360 [ 2737.560117] vmx_create_vcpu+0xf5/0x2950 [ 2737.560132] ? __mutex_unlock_slowpath+0x75/0x780 [ 2737.560141] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2737.560152] ? alloc_loaded_vmcs+0x240/0x240 [ 2737.560168] kvm_vm_ioctl+0x4ae/0x1430 [ 2737.560180] ? __lock_acquire+0x655/0x42a0 [ 2737.560190] ? kvm_vcpu_release+0xa0/0xa0 [ 2737.560200] ? trace_hardirqs_on+0x10/0x10 [ 2737.560211] ? check_preemption_disabled+0x35/0x240 [ 2737.588104] 2559 [ 2737.588806] ? trace_hardirqs_on+0x10/0x10 [ 2737.588818] ? check_preemption_disabled+0x35/0x240 [ 2737.605570] 2559 [ 2737.609671] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2737.609687] ? HARDIRQ_verbose+0x10/0x10 [ 2737.609697] ? kvm_vcpu_release+0xa0/0xa0 [ 2737.609708] do_vfs_ioctl+0x75a/0xfe0 [ 2737.645335] 2559 [ 2737.645496] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2737.653158] ? ioctl_preallocate+0x1a0/0x1a0 [ 2737.653670] Node 0 [ 2737.657577] ? security_file_ioctl+0x76/0xb0 [ 2737.657587] ? security_file_ioctl+0x83/0xb0 [ 2737.657602] SyS_ioctl+0x7f/0xb0 [ 2737.669817] DMA32 free:33000kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 2737.671969] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2737.671983] do_syscall_64+0x1d5/0x640 [ 2737.672001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2737.672010] RIP: 0033:0x45cb29 [ 2737.672015] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2737.672026] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2737.672033] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 2737.672040] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2737.672046] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2737.672051] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2737.772554] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2737.783645] lowmem_reserve[]: 0 0 0 0 0 [ 2737.787666] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2737.814744] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2737.820495] CPU: 1 PID: 965 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2737.828215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2737.837578] Call Trace: [ 2737.840187] dump_stack+0x1b2/0x283 [ 2737.843834] warn_alloc.cold+0x96/0x1af [ 2737.847825] ? zone_watermark_ok_safe+0x250/0x250 [ 2737.852694] ? wait_for_completion_io+0x10/0x10 [ 2737.857383] __alloc_pages_nodemask+0x2129/0x2730 [ 2737.862256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2737.867117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2737.871991] ? HARDIRQ_verbose+0x10/0x10 [ 2737.876067] ? do_raw_spin_unlock+0x164/0x250 [ 2737.880584] alloc_pages_current+0xe7/0x1e0 [ 2737.884929] kvm_mmu_create+0xd1/0x1c0 [ 2737.888831] kvm_arch_vcpu_init+0x282/0x890 [ 2737.893162] ? alloc_pages_current+0xef/0x1e0 [ 2737.897672] kvm_vcpu_init+0x26d/0x360 [ 2737.901577] vmx_create_vcpu+0xf5/0x2950 [ 2737.905655] ? __mutex_unlock_slowpath+0x75/0x780 [ 2737.910504] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2737.915535] ? alloc_loaded_vmcs+0x240/0x240 [ 2737.919961] kvm_vm_ioctl+0x4ae/0x1430 [ 2737.923874] ? __lock_acquire+0x655/0x42a0 [ 2737.928127] ? kvm_vcpu_release+0xa0/0xa0 [ 2737.932288] ? trace_hardirqs_on+0x10/0x10 [ 2737.936541] ? check_preemption_disabled+0x35/0x240 [ 2737.941580] ? trace_hardirqs_on+0x10/0x10 [ 2737.945830] ? check_preemption_disabled+0x35/0x240 [ 2737.950864] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2737.955818] ? HARDIRQ_verbose+0x10/0x10 [ 2737.959898] ? kvm_vcpu_release+0xa0/0xa0 [ 2737.964064] do_vfs_ioctl+0x75a/0xfe0 [ 2737.967883] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2737.973523] ? ioctl_preallocate+0x1a0/0x1a0 [ 2737.977964] ? security_file_ioctl+0x76/0xb0 [ 2737.982386] ? security_file_ioctl+0x83/0xb0 [ 2737.986809] SyS_ioctl+0x7f/0xb0 [ 2737.990189] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2737.994183] do_syscall_64+0x1d5/0x640 [ 2737.998090] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2738.003292] RIP: 0033:0x45cb29 [ 2738.006487] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2738.014207] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2738.021493] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2738.028775] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2738.036055] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2738.043334] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2738.060804] lowmem_reserve[]: 0 0 0 0 0 [ 2738.064842] Node 1 Normal free:2021220kB min:53592kB low:66988kB high:80384kB active_anon:592124kB inactive_anon:64456kB active_file:39772kB inactive_file:176460kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33280kB pagetables:61600kB bounce:0kB free_pcp:1332kB local_pcp:616kB free_cma:0kB [ 2738.119997] lowmem_reserve[]: 0 0 0 0 0 [ 2738.124055] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2738.141278] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2738.156491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2738.169882] Node 1 Normal: 286*4kB (UME) 169*8kB (UME) 107*16kB (UME) 158*32kB (UME) 61*64kB (UM) 18*128kB (UM) 7*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2020720kB [ 2738.187743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2738.198418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2738.207785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2738.217405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2738.226867] 55656 total pagecache pages [ 2738.231718] 0 pages in swap cache [ 2738.235186] Swap cache stats: add 0, delete 0, find 0/0 [ 2738.241769] Free swap = 0kB [ 2738.244800] Total swap = 0kB [ 2738.247817] 1965979 pages RAM [ 2738.252505] 0 pages HighMem/MovableOnly [ 2738.256498] 338456 pages reserved [ 2738.261275] 0 pages cma reserved 17:11:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0xe, 0x4) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:01 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0xfff, 0x420a, 0x5, 0xffffffff, r6}, &(0x7f00000003c0)=0x10) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="312230ae9ad9da767fba70b39da4fcf2d80defc417b962a896f2e82a24d74a4a7a45cb1ab6009928af75000008"]) perf_event_open(&(0x7f0000000880)={0x5, 0x70, 0x8, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1600, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x1, @perf_config_ext={0x0, 0x8}, 0x40004, 0x0, 0x8, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x7, r4, 0x1) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r7, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000280)={0xa0, 0x0, 0x7, {{0x0, 0x0, 0x80000001, 0x26b24145, 0xfffffc01, 0x2, {0x2, 0x9, 0x8, 0x6848, 0x7fff, 0x20, 0x9, 0x4, 0xc5f, 0x48, 0x0, r7, r8, 0x2}}}}, 0xa0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2738.277937] warn_alloc_show_mem: 1 callbacks suppressed [ 2738.277942] Mem-Info: [ 2738.287882] active_anon:583191 inactive_anon:25890 isolated_anon:0 [ 2738.287882] active_file:9944 inactive_file:44127 isolated_file:0 [ 2738.287882] unevictable:0 dirty:8 writeback:0 unstable:0 [ 2738.287882] slab_reclaimable:63669 slab_unreclaimable:238542 [ 2738.287882] mapped:67091 shmem:31004 pagetables:26670 bounce:0 [ 2738.287882] free:516211 free_pcp:374 free_cma:0 [ 2738.389370] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2738.404321] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2738.433973] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2738.439445] CPU: 1 PID: 995 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2738.447170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2738.456534] Call Trace: [ 2738.459261] dump_stack+0x1b2/0x283 [ 2738.462911] warn_alloc.cold+0x96/0x1af [ 2738.466905] ? zone_watermark_ok_safe+0x250/0x250 [ 2738.471768] ? wait_for_completion_io+0x10/0x10 [ 2738.476459] __alloc_pages_nodemask+0x2129/0x2730 [ 2738.481332] ? retint_kernel+0x2d/0x2d [ 2738.485232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2738.490091] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2738.495129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2738.499905] ? check_preemption_disabled+0x35/0x240 [ 2738.504937] ? retint_kernel+0x2d/0x2d [ 2738.508859] alloc_pages_current+0xe7/0x1e0 [ 2738.513199] kvm_mmu_create+0xd1/0x1c0 [ 2738.517103] kvm_arch_vcpu_init+0x282/0x890 [ 2738.521437] ? alloc_pages_current+0xef/0x1e0 [ 2738.525947] kvm_vcpu_init+0x26d/0x360 [ 2738.529855] vmx_create_vcpu+0xf5/0x2950 [ 2738.533936] ? __mutex_unlock_slowpath+0x75/0x780 [ 2738.538800] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2738.543851] ? alloc_loaded_vmcs+0x240/0x240 [ 2738.548286] kvm_vm_ioctl+0x4ae/0x1430 [ 2738.552189] ? __lock_acquire+0x655/0x42a0 [ 2738.556435] ? kvm_vcpu_release+0xa0/0xa0 [ 2738.560597] ? retint_kernel+0x2d/0x2d [ 2738.564498] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2738.569525] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2738.574294] ? check_preemption_disabled+0x35/0x240 [ 2738.579324] ? retint_kernel+0x2d/0x2d [ 2738.583241] ? selinux_file_ioctl+0x19a/0x560 [ 2738.587749] ? selinux_file_ioctl+0x22c/0x560 [ 2738.592256] ? kvm_vcpu_release+0xa0/0xa0 [ 2738.596412] do_vfs_ioctl+0x75a/0xfe0 [ 2738.600227] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2738.605870] ? ioctl_preallocate+0x1a0/0x1a0 [ 2738.610306] ? security_file_ioctl+0x76/0xb0 [ 2738.614733] ? security_file_ioctl+0x83/0xb0 [ 2738.619153] SyS_ioctl+0x7f/0xb0 [ 2738.622531] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2738.626524] do_syscall_64+0x1d5/0x640 [ 2738.630436] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2738.635653] RIP: 0033:0x45cb29 [ 2738.638850] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2738.646572] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2738.653853] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2738.661134] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2738.668415] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2738.675704] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2738.712187] Node 1 active_anon:592216kB inactive_anon:64456kB active_file:39772kB inactive_file:176508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59460kB dirty:32kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2738.741627] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2738.770285] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2738.775354] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 2738.806391] lowmem_reserve[]: 0 0 0 0 0 [ 2738.811752] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2738.839580] lowmem_reserve[]: 0 0 0 0 0 [ 2738.844892] Node 1 Normal free:2020544kB min:53592kB low:66988kB high:80384kB active_anon:592216kB inactive_anon:64456kB active_file:39772kB inactive_file:176508kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33408kB pagetables:61696kB bounce:0kB free_pcp:1048kB local_pcp:348kB free_cma:0kB [ 2738.876963] lowmem_reserve[]: 0 0 0 0 0 [ 2738.882138] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2738.900586] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2738.915392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2738.929534] Node 1 Normal: 260*4kB (UME) 190*8kB (UME) 77*16kB (UME) 160*32kB (UME) 60*64kB (UM) 19*128kB (UM) 7*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2020432kB [ 2738.954988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2738.964966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2738.976427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2738.986462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2738.996348] 55656 total pagecache pages [ 2739.008293] 0 pages in swap cache [ 2739.022434] Swap cache stats: add 0, delete 0, find 0/0 [ 2739.057631] Free swap = 0kB [ 2739.070052] Total swap = 0kB [ 2739.077162] 1965979 pages RAM [ 2739.089417] 0 pages HighMem/MovableOnly [ 2739.108663] 338456 pages reserved [ 2739.127801] 0 pages cma reserved [ 2739.563028] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2739.587753] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2739.596250] CPU: 0 PID: 931 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2739.603989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2739.610591] syz-executor.4: [ 2739.613338] Call Trace: [ 2739.613359] dump_stack+0x1b2/0x283 [ 2739.616361] page allocation failure: order:0 [ 2739.618935] warn_alloc.cold+0x96/0x1af [ 2739.623738] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2739.626935] ? zone_watermark_ok_safe+0x250/0x250 [ 2739.626957] ? wait_for_completion_io+0x10/0x10 [ 2739.631126] (null) [ 2739.636814] __alloc_pages_nodemask+0x2129/0x2730 [ 2739.636851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2739.642098] syz-executor.4 cpuset= [ 2739.646310] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2739.646333] ? HARDIRQ_verbose+0x10/0x10 [ 2739.648548] / [ 2739.653288] ? do_raw_spin_unlock+0x164/0x250 [ 2739.658546] mems_allowed=0-1 [ 2739.661631] alloc_pages_current+0xe7/0x1e0 [ 2739.661648] kvm_mmu_create+0xd1/0x1c0 [ 2739.661659] kvm_arch_vcpu_init+0x282/0x890 [ 2739.661667] ? alloc_pages_current+0xef/0x1e0 [ 2739.661679] kvm_vcpu_init+0x26d/0x360 [ 2739.661692] vmx_create_vcpu+0xf5/0x2950 [ 2739.704818] ? __mutex_unlock_slowpath+0x75/0x780 [ 2739.709647] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2739.714652] ? alloc_loaded_vmcs+0x240/0x240 [ 2739.719051] kvm_vm_ioctl+0x4ae/0x1430 [ 2739.722924] ? __lock_acquire+0x655/0x42a0 [ 2739.727142] ? kvm_vcpu_release+0xa0/0xa0 [ 2739.731276] ? trace_hardirqs_on+0x10/0x10 [ 2739.735492] ? check_preemption_disabled+0x35/0x240 [ 2739.740494] ? trace_hardirqs_on+0x10/0x10 [ 2739.744720] ? check_preemption_disabled+0x35/0x240 [ 2739.749737] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2739.754670] ? HARDIRQ_verbose+0x10/0x10 [ 2739.758731] ? kvm_vcpu_release+0xa0/0xa0 [ 2739.762872] do_vfs_ioctl+0x75a/0xfe0 [ 2739.766671] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2739.772282] ? ioctl_preallocate+0x1a0/0x1a0 [ 2739.776681] ? security_file_ioctl+0x76/0xb0 [ 2739.781073] ? security_file_ioctl+0x83/0xb0 [ 2739.785465] SyS_ioctl+0x7f/0xb0 [ 2739.788812] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2739.792774] do_syscall_64+0x1d5/0x640 [ 2739.796648] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2739.801816] RIP: 0033:0x45cb29 [ 2739.804989] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2739.812678] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2739.819932] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 2739.827186] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2739.834438] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2739.841693] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2739.848962] CPU: 1 PID: 965 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2739.851781] warn_alloc_show_mem: 1 callbacks suppressed [ 2739.851784] Mem-Info: [ 2739.856675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2739.856680] Call Trace: [ 2739.856698] dump_stack+0x1b2/0x283 [ 2739.856716] warn_alloc.cold+0x96/0x1af [ 2739.856727] ? zone_watermark_ok_safe+0x250/0x250 [ 2739.856748] ? wait_for_completion_io+0x10/0x10 [ 2739.856762] __alloc_pages_nodemask+0x2129/0x2730 [ 2739.856785] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2739.856797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2739.862435] active_anon:583183 inactive_anon:25890 isolated_anon:0 [ 2739.862435] active_file:9944 inactive_file:44137 isolated_file:0 [ 2739.862435] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2739.862435] slab_reclaimable:63665 slab_unreclaimable:238633 [ 2739.862435] mapped:67080 shmem:31004 pagetables:26643 bounce:0 [ 2739.862435] free:516223 free_pcp:322 free_cma:0 [ 2739.864549] ? HARDIRQ_verbose+0x10/0x10 [ 2739.864561] ? do_raw_spin_unlock+0x164/0x250 [ 2739.864578] alloc_pages_current+0xe7/0x1e0 [ 2739.864594] kvm_mmu_create+0xd1/0x1c0 [ 2739.864608] kvm_arch_vcpu_init+0x282/0x890 [ 2739.864618] ? alloc_pages_current+0xef/0x1e0 [ 2739.864632] kvm_vcpu_init+0x26d/0x360 [ 2739.864645] vmx_create_vcpu+0xf5/0x2950 [ 2739.864660] ? __mutex_unlock_slowpath+0x75/0x780 [ 2739.864670] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2739.864688] ? alloc_loaded_vmcs+0x240/0x240 [ 2739.864704] kvm_vm_ioctl+0x4ae/0x1430 [ 2739.874327] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2739.876605] ? __lock_acquire+0x655/0x42a0 [ 2739.876617] ? kvm_vcpu_release+0xa0/0xa0 [ 2739.876629] ? trace_hardirqs_on+0x10/0x10 [ 2739.876639] ? check_preemption_disabled+0x35/0x240 [ 2739.876655] ? trace_hardirqs_on+0x10/0x10 [ 2739.876664] ? check_preemption_disabled+0x35/0x240 [ 2739.876677] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2739.876690] ? HARDIRQ_verbose+0x10/0x10 [ 2739.880545] Node 1 active_anon:591984kB inactive_anon:64456kB active_file:39772kB inactive_file:176548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59416kB dirty:24kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2739.884250] ? kvm_vcpu_release+0xa0/0xa0 [ 2739.884263] do_vfs_ioctl+0x75a/0xfe0 [ 2739.884276] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2739.884288] ? ioctl_preallocate+0x1a0/0x1a0 [ 2739.884311] ? security_file_ioctl+0x76/0xb0 [ 2739.884321] ? security_file_ioctl+0x83/0xb0 [ 2739.889373] Node 0 [ 2739.893891] SyS_ioctl+0x7f/0xb0 [ 2739.893900] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2739.893913] do_syscall_64+0x1d5/0x640 [ 2739.893929] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2739.893938] RIP: 0033:0x45cb29 [ 2739.893943] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2739.893956] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2739.893961] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2739.893967] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2739.893973] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2739.893979] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2740.182241] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2740.208456] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2740.213693] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:184kB free_cma:0kB [ 2740.243070] lowmem_reserve[]: 0 0 0 0 0 [ 2740.247242] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2740.272932] lowmem_reserve[]: 0 0 0 0 0 [ 2740.277080] Node 1 Normal free:2020236kB min:53592kB low:66988kB high:80384kB active_anon:591884kB inactive_anon:64456kB active_file:39772kB inactive_file:176572kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33056kB pagetables:61336kB bounce:0kB free_pcp:1108kB local_pcp:464kB free_cma:0kB [ 2740.307576] lowmem_reserve[]: 0 0 0 0 0 [ 2740.311847] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2740.328109] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2740.342588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2740.353472] Node 1 Normal: 343*4kB (UME) 299*8kB (UME) 40*16kB (UME) 203*32kB (UME) 59*64kB (UM) 15*128kB (UM) 7*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2021844kB [ 2740.371358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2740.380352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2740.389051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2740.398069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2740.406791] 55674 total pagecache pages [ 2740.410883] 0 pages in swap cache [ 2740.414383] Swap cache stats: add 0, delete 0, find 0/0 [ 2740.419850] Free swap = 0kB [ 2740.422944] Total swap = 0kB [ 2740.425985] 1965979 pages RAM [ 2740.429102] 0 pages HighMem/MovableOnly [ 2740.433172] 338456 pages reserved [ 2740.436659] 0 pages cma reserved 17:11:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockname$netlink(r3, &(0x7f0000000000), &(0x7f00000000c0)=0xc) getitimer(0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:03 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = shmget$private(0x0, 0xc000, 0x0, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x7000) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x180, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x200c0) getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f0000000080)=0xfffffffffffffe1b) 17:11:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff, r5}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="04000000e3a7cd4821000000913342b32974f3a21cbd0852c77a07544970fde423c0a098b1d725fa14eb0a11543315869f8b35de7c33a7819f1fd65d364e708905be92eb33eb923352da66070f96f0f81ddcbc6e0614a7705acfe62be838b0e2cc3b4b51c498cd3059581f95d6ea5009a8872b4577f0d13d961a4875011f8e080abe8db07064a9c3d085ac87383c5b25866c770996dd375d70e59de51206ad5f48c7a69d0aad5d161fef17d546e7ed453f7e78cfdbd66dc5f08c8ec1f085536e438701b83209749d7aa800bd85944148444b1734a07518f8e0e3d42c06a84b08f6d27c33e59976792922035fed46d1a2e63d2d5a33187f9bfa9e29caeb2cdf7da9ee828374debf73464d4f629e3d298a66d5b755151bac34310b9f37890c9def5fb2bdc974dea74529a6a7fae31aa0b4712dec8180595dccc4e32215abadf65922c0083b357c258ac5f6a39a75fb6826b845fb8211775b", @ANYRES16=r7, @ANYBLOB="44cf5a31483c0df9323ac4e5e7fa8a993e688f12017fb8dfcb7cbd1e6c643df6b66bf6dbf8ad358f6308dbc9f456b224955ac6efda3627a6b765403dd43c9591dfadd6cedca9d898bd19342ed621fbed006474e32752d94857ef1902d019ddc8fe1f44bfc878dbd85a7cd538"], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4008001) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r8}) r9 = socket$kcm(0x11, 0xb, 0x0) sendmsg(r9, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000080)) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:11:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x0, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1000, 0x101000) fcntl$setflags(r3, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:03 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x34ca, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) bind$rose(r2, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$vhci(r7, &(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, "d027c59031dc2ace31cc9c0a65d519db6d1a9ada13e4463319045df60a9c6b4ec3bff80e4b09d77b9e1f57085aed6db178c378bb4ebaaf59516c139d4d1c08c128d5b7687d4a93531b6c58eb02f092c317dc9943e1a3cabaf229d82e1f742f17245bb3175d0cfff4bc15af4da6d1cc0f69ab5c138730007c5317cebce1616b5c0e80924fe7d8f91cc4838b8cba4c9cd64d773a524a3082461fd06cd397d4fae68ac747df6c0d7bb9135c8e1d82675c558b6b8028f4404bf5391bddd4973a1e807e057a1234d1b8508e59428f065774ab84c19e56df023829e93e2e955e41"}, 0xdf) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f00000000c0)={0x6, @multicast}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 17:11:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000280)=""/104) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r5}) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32=r7], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x8a5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x5, 0x3, 0xffff788b, 0x20, 0x2, 0x7, 0x56}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e21, 0x80000000, @private2={0xfc, 0x2, [], 0x1}, 0x3ff}}, 0xfc00, 0x200}, &(0x7f0000000240)=0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 17:11:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0xa0301, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffa7, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750800080000bbbbbb0180c2000001000000004c27aaababa1aaaabb37"]) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2741.063751] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2741.095937] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2741.130192] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2741.141282] CPU: 1 PID: 1028 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2741.149091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.158449] Call Trace: [ 2741.161028] dump_stack+0x1b2/0x283 [ 2741.164641] warn_alloc.cold+0x96/0x1af [ 2741.168596] ? zone_watermark_ok_safe+0x250/0x250 [ 2741.173440] ? wait_for_completion_io+0x10/0x10 [ 2741.178092] __alloc_pages_nodemask+0x2129/0x2730 [ 2741.182935] ? retint_kernel+0x2d/0x2d [ 2741.186805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2741.191650] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2741.196646] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2741.201486] alloc_pages_current+0xe7/0x1e0 [ 2741.205796] kvm_mmu_create+0xd1/0x1c0 [ 2741.209667] kvm_arch_vcpu_init+0x282/0x890 [ 2741.213974] kvm_vcpu_init+0x26d/0x360 [ 2741.217844] vmx_create_vcpu+0xf5/0x2950 [ 2741.221888] ? __mutex_unlock_slowpath+0x75/0x780 [ 2741.226730] ? alloc_loaded_vmcs+0x240/0x240 [ 2741.231134] kvm_vm_ioctl+0x4ae/0x1430 [ 2741.235005] ? __lock_acquire+0x655/0x42a0 [ 2741.239222] ? kvm_vcpu_release+0xa0/0xa0 [ 2741.243354] ? retint_kernel+0x2d/0x2d [ 2741.247221] ? retint_kernel+0x2d/0x2d [ 2741.251116] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2741.256113] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2741.260852] ? check_preemption_disabled+0x35/0x240 [ 2741.265847] ? retint_kernel+0x2d/0x2d [ 2741.269721] ? do_vfs_ioctl+0xcc8/0xfe0 [ 2741.273673] ? kvm_vcpu_release+0xa0/0xa0 [ 2741.277804] do_vfs_ioctl+0x75a/0xfe0 [ 2741.281589] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2741.287194] ? ioctl_preallocate+0x1a0/0x1a0 [ 2741.291591] ? security_file_ioctl+0x76/0xb0 [ 2741.295996] ? security_file_ioctl+0x83/0xb0 [ 2741.300386] SyS_ioctl+0x7f/0xb0 [ 2741.303735] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2741.307692] do_syscall_64+0x1d5/0x640 [ 2741.311565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2741.316732] RIP: 0033:0x45cb29 [ 2741.319904] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2741.327595] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2741.334847] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2741.342100] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2741.349372] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2741.356622] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2741.411177] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2741.423516] CPU: 1 PID: 1082 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2741.431354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.440715] Call Trace: [ 2741.443316] dump_stack+0x1b2/0x283 [ 2741.446962] warn_alloc.cold+0x96/0x1af [ 2741.450948] ? zone_watermark_ok_safe+0x250/0x250 [ 2741.455809] ? wait_for_completion_io+0x10/0x10 [ 2741.460492] __alloc_pages_nodemask+0x2129/0x2730 [ 2741.465370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2741.470230] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2741.475099] ? HARDIRQ_verbose+0x10/0x10 [ 2741.479164] ? do_raw_spin_unlock+0x164/0x250 [ 2741.483667] alloc_pages_current+0xe7/0x1e0 [ 2741.487993] kvm_mmu_create+0xd1/0x1c0 [ 2741.491880] kvm_arch_vcpu_init+0x282/0x890 [ 2741.496196] ? alloc_pages_current+0xef/0x1e0 [ 2741.500701] kvm_vcpu_init+0x26d/0x360 [ 2741.504590] vmx_create_vcpu+0xf5/0x2950 [ 2741.508653] ? __mutex_unlock_slowpath+0x75/0x780 [ 2741.513492] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2741.518527] ? alloc_loaded_vmcs+0x240/0x240 [ 2741.518891] syz-executor.5: [ 2741.522936] kvm_vm_ioctl+0x4ae/0x1430 [ 2741.522950] ? __lock_acquire+0x655/0x42a0 [ 2741.522960] ? kvm_vcpu_release+0xa0/0xa0 [ 2741.522972] ? trace_hardirqs_on+0x10/0x10 [ 2741.522986] ? check_preemption_disabled+0x35/0x240 [ 2741.526128] page allocation failure: order:0 [ 2741.529873] ? trace_hardirqs_on+0x10/0x10 [ 2741.529882] ? check_preemption_disabled+0x35/0x240 [ 2741.529892] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2741.529904] ? HARDIRQ_verbose+0x10/0x10 [ 2741.529915] ? kvm_vcpu_release+0xa0/0xa0 [ 2741.529926] do_vfs_ioctl+0x75a/0xfe0 [ 2741.529940] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2741.529953] ? ioctl_preallocate+0x1a0/0x1a0 [ 2741.534255] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2741.538306] ? security_file_ioctl+0x76/0xb0 [ 2741.538316] ? security_file_ioctl+0x83/0xb0 [ 2741.538327] SyS_ioctl+0x7f/0xb0 [ 2741.538335] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2741.538352] do_syscall_64+0x1d5/0x640 [ 2741.542694] (null) [ 2741.547587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2741.547596] RIP: 0033:0x45cb29 [ 2741.547601] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2741.547613] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2741.547618] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2741.547624] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2741.547630] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2741.547635] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2741.623532] warn_alloc_show_mem: 1 callbacks suppressed [ 2741.623537] Mem-Info: [ 2741.711333] active_anon:583607 inactive_anon:25890 isolated_anon:0 [ 2741.711333] active_file:9944 inactive_file:44146 isolated_file:0 [ 2741.711333] unevictable:0 dirty:17 writeback:0 unstable:0 [ 2741.711333] slab_reclaimable:63669 slab_unreclaimable:239093 [ 2741.711333] mapped:67376 shmem:31004 pagetables:26705 bounce:0 [ 2741.711333] free:515127 free_pcp:402 free_cma:0 [ 2741.729945] syz-executor.5 cpuset= [ 2741.754062] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2741.757220] / [ 2741.758988] Node 1 active_anon:592180kB inactive_anon:64456kB active_file:39772kB inactive_file:176584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59500kB dirty:64kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2741.815676] mems_allowed=0-1 [ 2741.816341] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2741.819067] CPU: 0 PID: 1039 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2741.846311] lowmem_reserve[]: [ 2741.853118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.853122] Call Trace: [ 2741.853139] dump_stack+0x1b2/0x283 [ 2741.853155] warn_alloc.cold+0x96/0x1af [ 2741.853164] ? zone_watermark_ok_safe+0x250/0x250 [ 2741.853182] ? wait_for_completion_io+0x10/0x10 [ 2741.856255] 0 [ 2741.865599] __alloc_pages_nodemask+0x2129/0x2730 [ 2741.865626] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2741.865637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2741.865646] ? retint_kernel+0x2d/0x2d [ 2741.865661] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2741.868240] 2559 [ 2741.871831] ? retint_kernel+0x2d/0x2d [ 2741.871847] alloc_pages_current+0xe7/0x1e0 [ 2741.871861] kvm_mmu_create+0xd1/0x1c0 [ 2741.871873] kvm_arch_vcpu_init+0x282/0x890 [ 2741.871887] kvm_vcpu_init+0x26d/0x360 [ 2741.879602] 2559 [ 2741.880669] vmx_create_vcpu+0xf5/0x2950 [ 2741.885312] 2559 [ 2741.887122] ? __mutex_unlock_slowpath+0x75/0x780 [ 2741.900255] 2559 [ 2741.901597] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2741.905457] Node 0 [ 2741.910198] ? alloc_loaded_vmcs+0x240/0x240 [ 2741.910213] kvm_vm_ioctl+0x4ae/0x1430 [ 2741.910225] ? __lock_acquire+0x655/0x42a0 [ 2741.910234] ? kvm_vcpu_release+0xa0/0xa0 [ 2741.910245] ? trace_hardirqs_on+0x10/0x10 [ 2741.912299] DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:316kB local_pcp:136kB free_cma:0kB [ 2741.916159] ? check_preemption_disabled+0x35/0x240 [ 2741.924507] lowmem_reserve[]: [ 2741.928641] ? trace_hardirqs_on+0x10/0x10 [ 2741.933403] 0 [ 2741.934557] ? check_preemption_disabled+0x35/0x240 [ 2741.938582] 0 [ 2741.940628] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2741.940640] ? retint_kernel+0x2d/0x2d [ 2741.940650] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2741.940661] ? kvm_vcpu_release+0xa0/0xa0 [ 2741.940671] do_vfs_ioctl+0x75a/0xfe0 [ 2741.940682] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2741.940689] ? check_preemption_disabled+0x35/0x240 [ 2741.940699] ? ioctl_preallocate+0x1a0/0x1a0 [ 2741.940717] ? security_file_ioctl+0x76/0xb0 [ 2741.940726] ? security_file_ioctl+0x83/0xb0 [ 2741.940736] SyS_ioctl+0x7f/0xb0 [ 2741.945580] 0 [ 2741.947617] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2741.958757] 0 [ 2741.959227] do_syscall_64+0x1d5/0x640 [ 2741.963199] 0 [ 2741.967314] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2741.975645] RIP: 0033:0x45cb29 [ 2742.004201] Node 0 [ 2742.009069] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2742.012227] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2742.016392] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2742.018164] lowmem_reserve[]: 0 [ 2742.023171] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2742.023176] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2742.023181] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2742.023186] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2742.133543] syz-executor.5: [ 2742.146090] 0 [ 2742.153691] page allocation failure: order:0 [ 2742.156038] 0 [ 2742.168419] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2742.173268] 0 [ 2742.177471] (null) [ 2742.181659] 0 [ 2742.186664] syz-executor.5 cpuset= [ 2742.187799] Node 1 Normal free:2018516kB min:53592kB low:66988kB high:80384kB active_anon:592180kB inactive_anon:64456kB active_file:39772kB inactive_file:176612kB unevictable:0kB writepending:112kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33312kB pagetables:61552kB bounce:0kB free_pcp:1340kB local_pcp:716kB free_cma:0kB [ 2742.187823] lowmem_reserve[]: 0 [ 2742.190353] / [ 2742.193591] 0 [ 2742.193872] mems_allowed=0-1 [ 2742.197214] 0 0 0 [ 2742.197228] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) [ 2742.233612] CPU: 0 PID: 1039 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2742.237072] 34*16kB [ 2742.237642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2742.239864] (UEH) [ 2742.244768] Call Trace: [ 2742.252565] 7*32kB [ 2742.254870] dump_stack+0x1b2/0x283 [ 2742.264227] (UMEH) [ 2742.266334] warn_alloc.cold+0x96/0x1af [ 2742.268885] 4*64kB [ 2742.271102] ? zone_watermark_ok_safe+0x250/0x250 [ 2742.271121] ? wait_for_completion_io+0x10/0x10 [ 2742.271135] __alloc_pages_nodemask+0x2129/0x2730 [ 2742.271159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2742.271170] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2742.275373] (UEH) [ 2742.277007] ? HARDIRQ_verbose+0x10/0x10 [ 2742.288941] 1*128kB [ 2742.293005] ? do_raw_spin_unlock+0x164/0x250 [ 2742.293019] alloc_pages_current+0xe7/0x1e0 [ 2742.293034] kvm_mmu_create+0xd1/0x1c0 [ 2742.293045] kvm_arch_vcpu_init+0x282/0x890 [ 2742.293056] ? alloc_pages_current+0xef/0x1e0 [ 2742.297880] (M) [ 2742.302707] kvm_vcpu_init+0x26d/0x360 [ 2742.302720] vmx_create_vcpu+0xf5/0x2950 [ 2742.302734] ? __mutex_unlock_slowpath+0x75/0x780 [ 2742.302745] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2742.302756] ? alloc_loaded_vmcs+0x240/0x240 [ 2742.302770] kvm_vm_ioctl+0x4ae/0x1430 [ 2742.302781] ? __lock_acquire+0x655/0x42a0 [ 2742.302790] ? kvm_vcpu_release+0xa0/0xa0 [ 2742.302800] ? trace_hardirqs_on+0x10/0x10 [ 2742.302810] ? check_preemption_disabled+0x35/0x240 [ 2742.309491] 2*256kB [ 2742.309773] ? trace_hardirqs_on+0x10/0x10 [ 2742.313803] (UM) [ 2742.316113] ? check_preemption_disabled+0x35/0x240 [ 2742.327118] 2*512kB [ 2742.328767] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2742.333120] (UM) [ 2742.337556] ? HARDIRQ_verbose+0x10/0x10 [ 2742.339564] 3*1024kB 17:11:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x28000, 0x0) 17:11:05 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:05 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0xc2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="6092a6169f731b5c664ca8b956928c48", 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r7, @ANYBLOB="0000ccd200000000280012000900050076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x38}}, 0x81) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0000000000000000080000000800010075333200180002001400050000001c00000000000000000000000000a36e4d05829206c5d682ed1f1010237b2c2dd5f4e523b8049c950b80dcef198c75f0d6d649dae0010000005f4bf32e312c3cbac8ba1711413f0a8b98a659e27cb16d324faaff9de13e86b19d0f92e5a87ac73b96cd250fbabfd02b9af9231124c7581578b8ea61b8ac419b6f"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xcc, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4850}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) 17:11:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x7, 0x18}, 0xc) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) eventfd(0x20d) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000040)={0x2}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2742.343386] ? kvm_vcpu_release+0xa0/0xa0 [ 2742.347419] (UME) [ 2742.352246] do_vfs_ioctl+0x75a/0xfe0 [ 2742.352261] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2742.352272] ? ioctl_preallocate+0x1a0/0x1a0 [ 2742.352292] ? security_file_ioctl+0x76/0xb0 [ 2742.352302] ? security_file_ioctl+0x83/0xb0 [ 2742.357291] 2*2048kB [ 2742.361682] SyS_ioctl+0x7f/0xb0 [ 2742.361689] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2742.361701] do_syscall_64+0x1d5/0x640 [ 2742.361718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2742.361727] RIP: 0033:0x45cb29 [ 2742.361732] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2742.361743] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2742.361750] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2742.369506] (ME) [ 2742.369834] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2742.373961] 0*4096kB [ 2742.378172] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2742.378180] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:05 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2742.390607] = 10440kB [ 2742.556160] nla_parse: 1 callbacks suppressed [ 2742.556167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2742.585343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2742.596390] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2742.629586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2742.652110] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2742.659493] Node 1 Normal: 154*4kB (UME) 142*8kB (UME) 36*16kB (UME) 138*32kB (UME) 66*64kB (UM) 10*128kB (UM) 4*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2016728kB [ 2742.689603] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2742.694774] CPU: 1 PID: 1110 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2742.695371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2742.702563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2742.702568] Call Trace: [ 2742.702587] dump_stack+0x1b2/0x283 [ 2742.702603] warn_alloc.cold+0x96/0x1af [ 2742.702614] ? zone_watermark_ok_safe+0x250/0x250 [ 2742.702631] ? wait_for_completion_io+0x10/0x10 [ 2742.702646] __alloc_pages_nodemask+0x2129/0x2730 [ 2742.702672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2742.702683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2742.702692] ? retint_kernel+0x2d/0x2d [ 2742.702712] ? retint_kernel+0x2d/0x2d [ 2742.702728] alloc_pages_current+0xe7/0x1e0 [ 2742.702742] kvm_mmu_create+0xd1/0x1c0 [ 2742.702753] kvm_arch_vcpu_init+0x282/0x890 [ 2742.702764] ? alloc_pages_current+0xef/0x1e0 [ 2742.711872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2742.720939] kvm_vcpu_init+0x26d/0x360 [ 2742.720954] vmx_create_vcpu+0xf5/0x2950 [ 2742.720969] ? __mutex_unlock_slowpath+0x75/0x780 [ 2742.720978] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2742.720989] ? alloc_loaded_vmcs+0x240/0x240 [ 2742.721011] kvm_vm_ioctl+0x4ae/0x1430 [ 2742.721025] ? __lock_acquire+0x655/0x42a0 [ 2742.724370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2742.727215] ? kvm_vcpu_release+0xa0/0xa0 [ 2742.727230] ? trace_hardirqs_on+0x10/0x10 [ 2742.727244] ? check_preemption_disabled+0x35/0x240 [ 2742.727259] ? trace_hardirqs_on+0x10/0x10 [ 2742.844817] ? check_preemption_disabled+0x35/0x240 [ 2742.849820] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2742.854739] ? HARDIRQ_verbose+0x10/0x10 [ 2742.858785] ? kvm_vcpu_release+0xa0/0xa0 [ 2742.862921] do_vfs_ioctl+0x75a/0xfe0 [ 2742.866715] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2742.872330] ? ioctl_preallocate+0x1a0/0x1a0 [ 2742.876744] ? security_file_ioctl+0x76/0xb0 [ 2742.881138] ? security_file_ioctl+0x83/0xb0 [ 2742.885534] SyS_ioctl+0x7f/0xb0 [ 2742.888887] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2742.892857] do_syscall_64+0x1d5/0x640 [ 2742.896742] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2742.901914] RIP: 0033:0x45cb29 [ 2742.905084] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2742.912773] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2742.920031] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2742.927282] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2742.934532] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2742.941782] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2742.952010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2742.963050] 55695 total pagecache pages [ 2742.967042] 0 pages in swap cache [ 2742.983946] Swap cache stats: add 0, delete 0, find 0/0 [ 2742.989348] Free swap = 0kB [ 2742.994078] Total swap = 0kB [ 2742.997120] 1965979 pages RAM [ 2743.000940] 0 pages HighMem/MovableOnly [ 2743.004929] 338456 pages reserved [ 2743.008377] 0 pages cma reserved [ 2743.026039] warn_alloc_show_mem: 3 callbacks suppressed [ 2743.026044] Mem-Info: [ 2743.035048] active_anon:583202 inactive_anon:25890 isolated_anon:0 [ 2743.035048] active_file:9943 inactive_file:44165 isolated_file:0 [ 2743.035048] unevictable:0 dirty:10 writeback:0 unstable:0 [ 2743.035048] slab_reclaimable:63643 slab_unreclaimable:239071 [ 2743.035048] mapped:67135 shmem:31004 pagetables:26671 bounce:0 [ 2743.035048] free:515538 free_pcp:421 free_cma:0 [ 2743.077510] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2743.099307] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2743.108087] Node 1 active_anon:591960kB inactive_anon:64456kB active_file:39772kB inactive_file:176656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59636kB dirty:36kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2743.120987] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2743.153253] CPU: 0 PID: 1028 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2743.153426] Node 0 [ 2743.161053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2743.161057] Call Trace: [ 2743.161073] dump_stack+0x1b2/0x283 [ 2743.161088] warn_alloc.cold+0x96/0x1af [ 2743.161098] ? zone_watermark_ok_safe+0x250/0x250 [ 2743.161116] ? wait_for_completion_io+0x10/0x10 [ 2743.161131] __alloc_pages_nodemask+0x2129/0x2730 [ 2743.161156] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2743.161166] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2743.166181] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2743.172741] ? HARDIRQ_verbose+0x10/0x10 [ 2743.172753] ? do_raw_spin_unlock+0x164/0x250 [ 2743.172767] alloc_pages_current+0xe7/0x1e0 [ 2743.172782] kvm_mmu_create+0xd1/0x1c0 [ 2743.172794] kvm_arch_vcpu_init+0x282/0x890 [ 2743.172803] ? alloc_pages_current+0xef/0x1e0 [ 2743.172816] kvm_vcpu_init+0x26d/0x360 [ 2743.172829] vmx_create_vcpu+0xf5/0x2950 [ 2743.176893] lowmem_reserve[]: [ 2743.179007] ? __mutex_unlock_slowpath+0x75/0x780 [ 2743.186042] 0 [ 2743.187784] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2743.193875] 2559 [ 2743.197263] ? alloc_loaded_vmcs+0x240/0x240 [ 2743.204956] 2559 [ 2743.206919] kvm_vm_ioctl+0x4ae/0x1430 [ 2743.253675] 2559 [ 2743.253847] ? __lock_acquire+0x655/0x42a0 [ 2743.258314] 2559 [ 2743.262197] ? kvm_vcpu_release+0xa0/0xa0 17:11:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d6b066a19874abce905c1e9e4ef1a3b6f558009c8e03418"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000020000000000000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0x8643, 0x3ff, 0x8, 0x1, 0x80000000}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:06 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2743.262208] ? trace_hardirqs_on+0x10/0x10 [ 2743.262217] ? check_preemption_disabled+0x35/0x240 [ 2743.262230] ? trace_hardirqs_on+0x10/0x10 [ 2743.262237] ? check_preemption_disabled+0x35/0x240 [ 2743.262248] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2743.262261] ? HARDIRQ_verbose+0x10/0x10 [ 2743.275615] Node 0 [ 2743.276012] ? kvm_vcpu_release+0xa0/0xa0 17:11:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = socket$kcm(0x11, 0xb, 0x0) sendmsg(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0xfc, 0x4) 17:11:06 executing program 4: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) r2 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#{\x00', r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000180)='\x00', &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) [ 2743.281066] DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:316kB local_pcp:136kB free_cma:0kB [ 2743.283053] do_vfs_ioctl+0x75a/0xfe0 [ 2743.287431] lowmem_reserve[]: [ 2743.289483] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2743.289494] ? ioctl_preallocate+0x1a0/0x1a0 [ 2743.289513] ? security_file_ioctl+0x76/0xb0 [ 2743.289521] ? security_file_ioctl+0x83/0xb0 [ 2743.289530] SyS_ioctl+0x7f/0xb0 [ 2743.289537] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2743.289551] do_syscall_64+0x1d5/0x640 17:11:06 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2743.289569] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2743.289578] RIP: 0033:0x45cb29 [ 2743.289582] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2743.289591] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2743.289597] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2743.289601] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2743.289607] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2743.289612] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 17:11:06 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2743.577805] 0 0 0 0 0 [ 2743.580540] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2743.620883] lowmem_reserve[]: 0 0 0 0 0 [ 2743.625087] Node 1 Normal free:2019516kB min:53592kB low:66988kB high:80384kB active_anon:592060kB inactive_anon:64456kB active_file:39772kB inactive_file:176656kB unevictable:0kB writepending:332kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33248kB pagetables:61552kB bounce:0kB free_pcp:1288kB local_pcp:672kB free_cma:0kB [ 2743.657306] lowmem_reserve[]: 0 0 0 0 0 [ 2743.662534] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2743.701735] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2743.732978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2743.745982] Node 1 Normal: 194*4kB (UME) 302*8kB (UE) 65*16kB (UME) 106*32kB (UME) 66*64kB (UM) 10*128kB (UM) 5*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2017864kB [ 2743.774537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2743.783527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2743.792391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2743.803551] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2743.819128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2743.828117] 55695 total pagecache pages [ 2743.832725] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2743.837868] CPU: 1 PID: 1146 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2743.841022] syz-executor.5: [ 2743.845658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2743.845664] Call Trace: [ 2743.845684] dump_stack+0x1b2/0x283 [ 2743.845700] warn_alloc.cold+0x96/0x1af [ 2743.859003] page allocation failure: order:0 [ 2743.860813] ? zone_watermark_ok_safe+0x250/0x250 [ 2743.860833] ? wait_for_completion_io+0x10/0x10 [ 2743.860851] __alloc_pages_nodemask+0x2129/0x2730 [ 2743.860875] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2743.864670] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2743.868453] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2743.868469] ? check_preemption_disabled+0x35/0x240 [ 2743.868494] alloc_pages_current+0xe7/0x1e0 [ 2743.876946] (null) [ 2743.877718] kvm_mmu_create+0xd1/0x1c0 [ 2743.883459] syz-executor.5 cpuset= [ 2743.887204] kvm_arch_vcpu_init+0x282/0x890 [ 2743.887217] ? alloc_pages_current+0xef/0x1e0 [ 2743.887230] kvm_vcpu_init+0x26d/0x360 [ 2743.887245] vmx_create_vcpu+0xf5/0x2950 [ 2743.894509] / [ 2743.897957] ? alloc_loaded_vmcs+0x240/0x240 [ 2743.903764] mems_allowed=0-1 [ 2743.907697] ? kvm_arch_vcpu_create+0x2/0xb0 [ 2743.907712] kvm_vm_ioctl+0x4ae/0x1430 [ 2743.907725] ? __lock_acquire+0x655/0x42a0 [ 2743.907734] ? kvm_vcpu_release+0xa0/0xa0 [ 2743.907746] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2743.968754] ? trace_hardirqs_on+0x10/0x10 [ 2743.972982] ? check_preemption_disabled+0x35/0x240 [ 2743.977994] ? retint_kernel+0x2d/0x2d [ 2743.981869] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2743.986872] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2743.991617] ? kvm_vcpu_release+0xa0/0xa0 [ 2743.995754] do_vfs_ioctl+0x75a/0xfe0 [ 2743.999543] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2744.005154] ? ioctl_preallocate+0x1a0/0x1a0 [ 2744.009649] ? security_file_ioctl+0x76/0xb0 [ 2744.014045] ? security_file_ioctl+0x83/0xb0 [ 2744.018438] SyS_ioctl+0x7f/0xb0 [ 2744.021789] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2744.025749] do_syscall_64+0x1d5/0x640 [ 2744.029627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2744.034811] RIP: 0033:0x45cb29 [ 2744.037990] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2744.045789] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2744.053041] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2744.060299] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2744.067558] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2744.074811] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2744.082079] CPU: 0 PID: 1168 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2744.083739] 0 pages in swap cache [ 2744.089874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2744.089878] Call Trace: [ 2744.089895] dump_stack+0x1b2/0x283 [ 2744.089909] warn_alloc.cold+0x96/0x1af [ 2744.089918] ? zone_watermark_ok_safe+0x250/0x250 [ 2744.089940] ? wait_for_completion_io+0x10/0x10 [ 2744.093385] Swap cache stats: add 0, delete 0, find 0/0 [ 2744.102734] __alloc_pages_nodemask+0x2129/0x2730 [ 2744.102758] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2744.102769] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2744.102790] ? HARDIRQ_verbose+0x10/0x10 [ 2744.102801] ? do_raw_spin_unlock+0x164/0x250 [ 2744.102816] alloc_pages_current+0xe7/0x1e0 [ 2744.106812] Free swap = 0kB [ 2744.108994] kvm_mmu_create+0xd1/0x1c0 [ 2744.113151] Total swap = 0kB [ 2744.117769] kvm_arch_vcpu_init+0x282/0x890 [ 2744.122650] 1965979 pages RAM [ 2744.127762] ? alloc_pages_current+0xef/0x1e0 [ 2744.132833] 0 pages HighMem/MovableOnly [ 2744.137423] kvm_vcpu_init+0x26d/0x360 [ 2744.142504] 338456 pages reserved [ 2744.146291] vmx_create_vcpu+0xf5/0x2950 [ 2744.151025] 0 pages cma reserved [ 2744.155075] ? __mutex_unlock_slowpath+0x75/0x780 [ 2744.160571] warn_alloc_show_mem: 1 callbacks suppressed [ 2744.160575] Mem-Info: [ 2744.161949] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2744.164966] active_anon:583174 inactive_anon:25890 isolated_anon:0 [ 2744.164966] active_file:9944 inactive_file:44175 isolated_file:0 [ 2744.164966] unevictable:0 dirty:9 writeback:0 unstable:0 [ 2744.164966] slab_reclaimable:63579 slab_unreclaimable:239213 [ 2744.164966] mapped:67144 shmem:31004 pagetables:26631 bounce:0 [ 2744.164966] free:515626 free_pcp:349 free_cma:0 [ 2744.169268] ? alloc_loaded_vmcs+0x240/0x240 [ 2744.172802] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2744.176832] kvm_vm_ioctl+0x4ae/0x1430 [ 2744.181094] Node 1 active_anon:591948kB inactive_anon:64456kB active_file:39772kB inactive_file:176700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59672kB dirty:32kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2744.184660] ? __lock_acquire+0x655/0x42a0 [ 2744.188089] Node 0 [ 2744.192139] ? kvm_vcpu_release+0xa0/0xa0 [ 2744.192150] ? trace_hardirqs_on+0x10/0x10 [ 2744.192159] ? check_preemption_disabled+0x35/0x240 [ 2744.192171] ? trace_hardirqs_on+0x10/0x10 [ 2744.192179] ? check_preemption_disabled+0x35/0x240 [ 2744.192189] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2744.192203] ? HARDIRQ_verbose+0x10/0x10 17:11:07 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000104c2704aaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080007bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15c, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote={[], 0x1}, 0x2, 'batadv_slave_0\x00'}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) 17:11:07 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x37aea4a4}, 0x8) [ 2744.196612] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2744.200383] ? kvm_vcpu_release+0xa0/0xa0 [ 2744.200395] do_vfs_ioctl+0x75a/0xfe0 [ 2744.200408] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2744.200418] ? ioctl_preallocate+0x1a0/0x1a0 [ 2744.200444] ? security_file_ioctl+0x76/0xb0 [ 2744.200454] ? security_file_ioctl+0x83/0xb0 [ 2744.206619] lowmem_reserve[]: [ 2744.208201] SyS_ioctl+0x7f/0xb0 [ 2744.231947] 0 [ 2744.247215] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2744.247232] do_syscall_64+0x1d5/0x640 [ 2744.247249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2744.247257] RIP: 0033:0x45cb29 [ 2744.247261] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2744.247270] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2744.247276] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 17:11:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r1, 0xd, 0xffffffffffffffff, 0x0) stat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r4, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r5, 0xd, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r6, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003380)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002b00)="d348fa24ba71a32bf8d9aed1e4b3fd9358289059ed4d4cf2a6582c67059675258d353a5764afaa1a6f882dc4f4be57b6d74997108fd45e6927db36bbdb5751158861046715330c58e042b65e1dc5880cef4488b22f9f41abc7478457bf9e30c0ad971a4d277f8f28ef8f688031d1d54abf49fd0c6b2a5d3f5aa79121eafe49ec46f24823b1dfc4b19a660e22dadf933f04370e0cd9e2406348ee7c63d7b1c96171a86fa61e80623807179bc42516def5836ea4da4e0f30b60e956c", 0xbb}, {&(0x7f0000002bc0)="aa569f7f4dd4f5029a2eba43310d05d7c828f01080ae61ca04abc3e84194072749a470790b79632a41e9fe14a682674494e4c145f6a0295f92e55def81a9f4af6207c33ba0cce2e8e1d996870fac365c66628e0a6bd06a5a2dba78cc86dfff43deaf18f0e7568b5564f62f96b07afd47ead25e245abc3c7717e3548e6dc91929dda2b1f96a1911600b100cef1208e8510ad1e16b8beabbe8c4a0552116dad88d08635cccb2cadbd18bf711bedfce6a6af50be78a9eb8927f999c7b9b15ef46754523dd9b56b60024eedde4e5cc9abd31e9dd", 0xd2}, {&(0x7f0000000040)='3&]ix', 0x5}, {&(0x7f0000002cc0)="4d808ef734ea3f03efe683d93d37ed33eb6321498109fde054edf4123b8cfe9d40982abd00767874a43bde13827a6de48f75c77f84e9aa8926b2283577ef217cdb62f346556f88100ccc00e6f176f00fe048ed2c1187015977a489183ffe6215b6da243c2cd4d1171c722f5ab61288004e2858f953ce3a831564eadb2c66cdeb8f7c2743caf87de3ed9e884c79202ba7a8ecae49cd964bc2e33bca10def457efd428d38e7d465bf13ae87797cedcb1806e8c22642720bdb87529c6e783636c7d4514bc0cde1adb90465c5f13bd7904f2fa8dd620618ced269f1727c4324f3d26e564e08f824021e203673c990924a85f0aae9e2c1d6d75ace5", 0xf9}, {&(0x7f0000002dc0)="16b91ba0a8f20e46713fb8b51b6632b64abaf4e81713089ae67873f2328f272fa085bb44f38a93e1f618234b08d47d1c01caf47fce116d757d497385e0cf981e6d290b8ecf8dbfb3c57732ce3b0577d9d0ddfe4456baf6324a8c7e94e9ef0d632edff354e791114e9db9f7a777f706c2205799273bccb91abf9a79ab662ba3e5694c7f999421d3af98d31c0f78", 0x8d}, {&(0x7f0000000100)="956f97daf067444f33db792c44b7a2340f6162c0aed03553ba", 0x19}], 0x6, 0x0, 0x0, 0x2000c0c0}, {&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f00000001c0)="f97795ddfae1f5f55f7720377ebdb9f495088947f6a8bc169e695ecce4157c90a08750e6146d59b8f15ee905254f575c5c26539fdb179376e943342484ddcb542c360b9daff27522051dda5fe24b0640baa460179dbaa3aedd2bfe402065660c1843f7e7aef11e25704f40f68368b4718941e3c26e5598a65a0a1163be3b80035f7bd6ee67ba46ed8389358344054b2c133f40e08bdd3c5a4a2822548eb937cc760d406ace94b0892c52ef5b3cf65a6eaaa1e21bf8c0798b68df", 0xba}, {&(0x7f00000002c0)="b18ad9d63303cc", 0x7}, {&(0x7f0000000440)="f77cee8e5a245f13e28aa8160b9d7d36d32b421eb2ad083e7d351358feb4cf1ab457458b23d980787d1ad12b1a6136909e492263b32f2927b1550257e760c90d00668d0d59b803ed7ae63344b81247cf65c40e99c3f1e8a97362954bd09de54f84eeec38fbc7f940bcf00aa4f8ee5d5ee9e50e693a22709d0042827a28157fcddf5f13fc3e5db204a5fa98715d0cc3aef341d0f29aa2e2c08f467f019d8aaefdfbddc0fbe04d7b6ccf477b3d02ac3e3c30f1fbbed66b9ed4a08d2d8520e0083bc37708edab1cff1ad2afa4a22ae81e475f9fbd78180e46a8aad9fcdf04670847f152d6a2ddc38ba4ef981aaaa5bb6cea47e067e22d1e97f8e1f02ca36cecaede036ac08fc92aac4750804983d4622fdc3279e57ca52d76e759a3b67e1f2d40f937e49862b4bce628bb09c22ad2fa31530ff03c4fd94b095ce2fb3413139b141bc68c897e26f2e9b9707b06a000d9ae0a62a8285bd546d0e84b30e2f0ee83970e33dfa75155c5c5516773d751ec2911a19a41b2b0edd5e887898500a5e46d6974c1549dbb43214971a3caa7abfea3093e8e371d10e22cab6cfe1d90756b3f01b90d6b610770575bd65697d0c7f84646c59c653c8cdff6ca0c0d579761516f05f62e8edb00e425c2fa31c6e1cd6138737f2407ac2c7289e7534609ba42511d5d404c7d791c5b641587634f39147cbe0bb6251c5016c3422a98bd3290025997da915a96215d6695d2098123d3ef12c18555390d7c234d04aab0a7cc5738eb8ea81c60bbaf68c0aa78a2fb98e49709fd6a9b446006edf06df3b39ec9492cf966aabb7f61df988ccfa5770684de500bd3159f84a535b386d87cc290a47fd2ef1b17a68651368380355ab272f446ee8d6cb96b3976fd5afe5d0342867acbd506bb44c6f9dfcdd5896e4e66a15bb01b071afd07bde4b751ea6d48fbc7a6228e0cc8b10aa41b4577c9e619255332624888b20f677d1c0424f95900cf39ebe3a064dd95cbb3889d3754d93686fc17fc904fafceefdb3cf7152254c3c33cb44109e2e00552df3704eb8a248d8c4ede7a184e15cb50811d6f13bf3d24a4cde350d79e2bbc0793e61831643eaffadf387092af97d30a835555f8c9046a7296afa9f4cf1bfd48cc41fb273f4c1f7d5f4c6e822009d608bb1e34c8770652227bf877e8ff11445bee1a03e4b07b12e24cb973efe86551f29be6440db624c8876732274a3dbab2180a4534fede321fcd43d92753341ff849206bcddbb0f71cb4562972661ccd65f14fd2d8b116e586bf4b48a59ed0380e53b7362fa62092ca3061d66ec4b61b36c4934763de43d426b976cd462268bad213b2cd771abe99ce6555352250cb20c04346256d59eabfaa6842113dcfc9767f300c65388b0d3c60c00cfdbce0fdb923904379f73b366cc6668de46040adeb1f9489fd48e71735918caade54e55850ced9bbe325e06b1a147b3c9daa481de5f0586cd072f8272e4abd517699c201b48e02995e56391e8cff9b39777c0a2c439a2250796e6db127a066861a8fc09f7d492385353a8f2c8c8eb572b50cf4a70ac86a783e31c627da13cf15dcbbcd86c2f7ac89bd44aba2882d49aa3b21390cc20feb268768820389e3c7999a1213e2dc3c5805cfd48d86299a174d3ac07c648668a95156bfc81f0998258895759e047bf38eb596cfbc75c60ad0b43f277a98ccbbbb69c9fbe9b6c097b65df59f363e7f615965e950f84f184b415a9c23afbc858bfab9447f6cb7ed0231e20ee6438a0d3d7810d93bc2f95ba2011cbd19c4fbfbc1e174fbcae2a87f678e0caf736c085ef5c3afcf7411cd305be4be0c27dd9768b74cf5bf071e3a6cea4e661f3d0f26b2b0a3e00a07c7d15eb547d54d07e971d0a4693e9174798ee14f3c507b815eeb3295795a5464f8923fb4ee450132ded56bcdcb40f449f9cd51315b98c28cab1f64115b5090709505d7d5f208856e6a645acc7b02deb50db00cfbc4f9542ff1540a0bdc2d21afa8ce23064214081c321cb8e4f87739984b94d84c160fc423bf8da9e256c4553a704432ece4defc845e04566d8f74faa385e03e4e7203dc8a64354ae4c5019ec8d91cd68eda908548d35636c881c533c501ef6ccda26acd033f7d2176dbcd92f596513ead4e7987acb77c9960f4af407f5c55c48b04d88a81cfdf32bf5528d7d90eb6ce39de5b53d2db27da72a89027e932ab9c96b01ae15cf3fe58abfe716319f2dee4d42c5fa3ef0686a5e3bc0918951403311fc145922d04a29460e7e336ccabe55548dc20b0bb2f4a0ac61f76a23b7b2e23cb5ecd9ae68b2ea44489ae65d5b414e1cc6df8430baa910fbc7d2bc38998c450942669a247701ff25c66da5818d399b0a8353c755e5c34ef2c5b559b8f60d06e898d5da3c9bcaf66db692db2c8c5d7228ebecc1cb9cbca55135a95f51b614b570201c19ac90a20fc02f64cb8a6460e0e87f9ae2416972644360b4d6920cb62ff9d2874a2992aaf928fce5199c14b2a8a841adc2b4967c6e6cbc8318c5b15a0ea6335e3ef26b1327027168b7efcf5225f944044ff051a9c9aed281e23c18fcf4e8597d3fa89105b8833d891e11f394bf7ddf04d3d9118788a536542f1cfd0e0e016b63b46e67a13c31ef39645db8f6fa6333b7f5e5629006476d5e3ae18752b4de3558b941dc38d40cd76eeeab409ac8908896af5787ef3e6f03a48b6840f20ff30338d3653325d41b39c87338a5af779986973708bb840c35c9af74fd2a7b5e9ecf8b1bed44a8eca6886b0ba93219f855dcf8e8f819f277d311c5e77ac9516087e278158c7d82fdcb164eb068b2038204a0a872f042d65ed7705d502c656520ad3814ddd166ba13121632dfc12efef6842b13191d4b6e3948b0607e9e4552376a194dfffebd711a83d8f1d6cfd9f478dcf4232674d2a07a0ff9c102f04dd3371d2971ccf633a648060efc7e6fdde665d28151c1bcee047240af80b57e20fa6189948bd517d0e3aee6520f83888210e8d2e8f3ee7fd631374b8ce3315a13053fbab0bc6012e355bbfb99fadbdbccf44642b3fa85e70449e00e95e9dd81d5fa64239226bc7e876d69fe4629d61a862f4f42c8fd67c3cd9d840febdb51d478e8c173bddfba1752e4da1ab3fd1c4fab7fdfdc50da96ced1f5455e9df28ec35c1456ae32b69751bb0436c06e081332bc177e376776a8c0359e8eb5add27749f4f70cd46b3accfa02420c153515eeed66006fb400ff7ac394b5acd8d77febc5ce35d79f6a055fa4e841cbefdb9b9d0aebc78b2346db098cab62c2402d38538cd48f6498e90dcfb726d2609974c55b77613ebbb6a80bc3366897f9b8cad59e8b25fde03859db8b6467e72d7f25b91cca20c992a33757407b944f505b797ad534d280b72c3117f65982fd33b8b444c300bc490e83cf00acb1bcad049e8d7c36f4c8b1dc9fbfe39326ecbcdd1d87b40bd11685684338760fcdf6000290527546d3288420aab67d5bdf7509df633940290adb735bf53ba3c52cb7692c4778fede9392605e15251a1c6307b6022cbd8c9ddf5e14a4df44e20e1f30e9634a64f9605424bc0a71704adbdbf609a9b88e211b1ce97c80836ba243787e0e87c5c4ba030968b49f3f4f1cdccf6c815c3533e3192ddfb68bb48852fd69976024eda5b306566c5c5f7d9b5c67871fa92de88edd910580669415416c0e129d75b9e0f6c4f1b0dc91ebe3cb75ed39e08bba0feb9aa6bd7a2c821b5b62e8d6c2912fedefa447622c6833abe127560decaec3295d403aaf295b5dab4f579cc8fa0cfd3d89c74510d3e35628059bf6d067f4b3138afbec04db3e946df181a0812b6efd7cae4d222ccb781f0ccf1d8de0b1a4f6549fd5fdc8e41167199ea4fd2200bc556c567aaa3c101b3e0ca1abb6b8726354c63254caab97d8a3120fbaf110bce7b498169b0e63d9c2484705f150858caad7b9744b13f683640ec37ed81ea9797a099583eff59405aae03e6325c9a66d58294bc2d0f9be893880e009e5ebbeb4a1dffa27c2a665422664be6b2fa4a86dde2082f5c8f5b26dea93c6e4342c9d159e5ecbcb062795fc9d3aff500e560064a99afef6d5b257b14c45ece3363981ef8d54917fd75064f351bbec10ab17d1188e810b797caf2339b78b8a86faa40160aefef061b0dd1f3e9df446b90f1eb3ab6aa661f2d53ea65f9f99fe33d8c26f7851ad7de9197711f2bb66fe397ce6186858de2325cb1742f66e2b46541f89122002007fdf650ad0599b3d982194fe802f446519b1197b56851e9efd1d4e6d63558701d2426949936d74786305a2d1eddd8a054c4c126c24f9420580cd05cf56958f4b2a2ebb1e4c8ab40ec530daa783a348ed42e5bcfac10751a02be22842710f999fa23aa1748c1ed75db60a2648e364c6de8d86c5920489f705b9a0694ed591c118958c562d1a7e686c0401b0102296cf56ececd62301028d10a6a19386d41eec6f6fa909df2b0c507b9509cff5a6034bb2987488f5202b7f06344f0e04af313d7c36ce8fc31b8f892516e6ee81b3aa8e978dde02b66d85c2a335b2b721bc39555b9d36f4961b483b8365741102a2eb325199088fd6f13e84c6c2512243a8b99836bdc76d2d43ab2a1a0c6dba1d65c0e33b5db01a14343bb7468cffce5df88d2c71fed0f63a4f39db46a499042ec568189a9cce2e7e24c1f1d269e4b6240d5cdaf6a3996e3f379d084ed49e5ae670fb8be3db002c83f25de1cdad6a3dfcb83008b533bd8ff90aec456e41c798d0c4e4645fd1f6f54d1c64b1e95d610b4705db295ee52885397bc6d23e0bbaf0eecb80798a8cd0905ca07e8d2bdadc1059899ca054eacce26a28bbf2cb73dc7b49e43c3838323092c858539d40857ae57eba57e345ea6b1afe3756803d6163e3b6727d51c061ffb44230f61340195b137b9751f94a5283f598b2fac0c1f33418b78655d4444262f94c57578e1866abbd92f2304fc3d16068f4ca42fa60d77d78f36c373a93b03a7690670b26b4910711bb8e14bfe39d1e9d3942c2200dff9c1e71f963238e74c41fac89eed3d97a7d5b73a717158683a6454060d038e01be6dace8c563afe2c6ea0b13595c84e92e4176d1682fbfbb3401b0ced8d9b89ef3268be2bfca512665d28e67e197b427b90250c364be636924b3098ba80dd24eef042f9148fd065aaf784ba22bdcc530b017a47744acba3b947eeecd7548d426ca583a40cd279e34a97b7b3718a5c1eadac2eec598ddbda62d3b51ed73fa1434aabb3d8d3712670cca00d2f882e5c49dddaa2c9584395f74cc81cdeb099521751c96b360266a8e63738a6f6ab401b676396caecc662c533ed5c421448a7c31322269153a64df2d8486a65891049493eafe5821834a9b36152300d821fe0303d9b7f88d5560cbc3db19fc4fabf057565b0a6bdcabb5ebeb0c5695a2ae4b562394d8b8ffe5ed978ae9f038d368ee5a6fb414e3a8388149cf8b5999be45c5fbfc4bc5d018d2e09be59bbdd644f4894c41889ad80513b487e93f36c87781059602fdb8fceea644ed67304c0b9555abc63470995144045ef86740f0936bc572afc90e155f7fb43003ea6a3e5dbd13ac9222abc9aa24be40597bda0ca80b29fb6e8add6467ce3d0bdddadd16810c17399290eb455f2c9a3fcd01b9951d978e65a6c57f4deb97e49c1ce22c7ed14cd4d4dc53cf37222f4c2b2cb83a31992dfb29e0b9f43dee0af190eaaf77480149a77e5e8588e17955bab8983dd3363589cefa076ba9293abf495866a156116723e7833304998aefb10275f571eb1a72887f57fc768a9c96e34209fa30123cea", 0x1000}, {&(0x7f0000000300)="2ddd8d50b1e823eaead5a1ef808577979568e78ca3196cab2b85d233c29f2ff831450dbce088fa", 0x27}, {&(0x7f0000001440)="b684906a71168a2c3b4982f89b46ed6e36803091156f432da9d26f3660179d55a294a111a3583ac8f3de463a0a670eda2e2afca6c521f799f8508c30e7e3f0be1f6bef2b96ed653116d1558ce489927fe0ac9b10edc1b09543dfb42a33fb6f47fe911f0cb4250be17fef74f174974627b031e0bfc26b2bd67696f163dc90565877ab6d9fc21da8031d287162fd74c96061b5acd145a1eacb93b62cb4a3ce4e90dcb299efbda2929230441e078dcd1fa507d4082e0cb3bea5485455cf4383b8db6ed7de532c7da4a9212f3d50d86d0359e4768adc", 0xd4}, {&(0x7f0000000340)="73b0f64b624a6e5c3806d65d2fe5", 0xe}, {&(0x7f0000000380)="00f765ec4c02176e5b474812890c2b80673fad266307e241a8d20be49e32fc0afc054a36e9c5e1b9eeb3d43b5bc86de536a6262ead8732f9c4cc22dfdd6c93d80562d25523f8a28746db680900fec8eedcd6867ebb54369a33c8e9416cc11d42", 0x60}, {&(0x7f0000001540)="5e1183c98b7bf5b0e3b5e32fedcbefd668406b73d2b5a9231d1683c3ad4d3fce5b6f20639f94092675b77b5a7c7ad13479506dff8618449da53271353aebd615a594df7bc096d469814b544053cdc84c2fa356f0a46d0ac1d5cdb42bc72ffa8469bf81a92ba75ebeb1", 0x69}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="3855f8a4648c9c71d52b6841cc13bbc424725ffd95fd0b6da6049727c56513339aab0ad03112eabba13042531446991bde17c54dca67582ff610c171c3ca745c53115aa28bc4d972d550d46e3cdf76725537e3a70c40abe58ec7f79a195abac31a0510cba86be7c404d58470fd264e28bc6b71f80b299e8207c122228ce7c6708c365dcc7aa5fb0dd023e905630cf463e4403cffb560d9dafbc823188e195c9adee64a0a8a1059b6e2efaea12a44f97ffe165ff644df8d41d8ca6aebfed5f6b119464ce58c52f26f65", 0xc9}], 0xa, &(0x7f0000002780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x81}, {&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002880)="ef02", 0x2}, {&(0x7f00000028c0)="12f8e517f6b1de7c0639eef4d4176d1fe36c3ad497e81448038d1193b00a60c76efca529e6914ea2f5712228493b56a3aee5f1e3ce8cac9a0c7a1e6d7cc9c17d1f6ad3505bc76e4e6d41650f3f933e7dd4769a843d216faf1d7a7db2824978437e945cdf80fd3376ac007b93854b12bc49be7a0523f9c45371345a8bfa531313fddc3064edd4bbf89c700821", 0x8c}], 0x2, &(0x7f00000029c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000242d2a11cd7f6449f1c77648759707f24b8c366380d0f0e66496eed98211d2acad66b3da220daf06eee733d2fbe43fbb7afe275823add5469373fccddf2b3a1fb6f85cf200c3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x4040}], 0x3, 0x4800) r9 = socket$kcm(0x10, 0x0, 0x10) getsockopt$sock_int(r9, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:07 executing program 5: r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af75011e0800008d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x1, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x80003, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x3, 0x1, 0x4, 0x0, 0x20, 0x3}, r0, 0xc, r1, 0x9) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x80000001, 0x2a7f, 0x0, 0x0, 0x0, 0x20}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8000, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2744.247280] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2744.247285] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2744.247291] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 [ 2744.314893] syz-executor.4: 17:11:07 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000400)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000005ac4d3f2474aeb437308242d842fb759659861a84c68a7c3b750362db61e6d50334b6a9c6cd0efa8e2676fa5ddb0e38c4c35a3e7024a257a98df3a8cff166cc8304bf10e6789037d13a269910f94cddccd26f310907202e8d97d524524d684ad19b6d0263f4d681747025d9da89ca7ba3cd2586627469cddf48692ecd7255ec910b93b9004ba6479c8e5be8a19dae47f195df31f4e5135b2d98c3b060efd81c874ad3a87a1f32847d5425e4fa4d3be1ad109345b0aa25ebed8aee2f953023a5430f2ae2863996e37870c6cb6c47fb56b1792ea93497b61ca0900000000000000", @ANYRES16=r3, @ANYBLOB="010000000000d817bd4cdf88000000004ad70000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x2ac, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}, @TIPC_NLA_NODE={0x1e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf4, 0x3, "5549b9c0102adb243b712709d1fa4982e5d2e1fe9154e2cecc3ea17ec5af457c902833b0ad41adfa63a7ade089a782188489fab6dbff870a6372646e1e6d20675ac160705af928831437bfa10706f57b5f2f257d2cf942e41679cb5f75e0c84a52d726267cb7a950f7bcdc6fc4bdb58c33d7919326618329f14371bd990aaef89bc1194b537d41017210be18480f2c578249f398ee5ddcac7cb1798c2a3ad7c728b26a907f9381023f99e4fb92fc5987739e3206a6e7be71bfbc3d594f6dac56571309fb28d483f1c76f7fc5755995c4c1821024d03dffb506c9c17354c73db5dc76a66a9a873e1356f6072b6001b6d0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfc}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "83c6637983e394c0b45c62a1596e4282ca24df6a389b98"}}, @TIPC_NLA_NODE_ID={0x81, 0x3, "d1e1ab78fb976d19ab8f1d8dc25c276dab4d4f8a8b7ca8cb349f10bcf356ef225eea23575b7f0fe2d0c75832c76700653929e083d354e49d9835c64df73ac21494fdeab3791c79b8b3386271c32ffffed776d06d2d6134a954316f67d7b5b2e3943d2bc1a81ace5bcde2b639100ddc23081b374b03c0cb2d637ed68811"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x871}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x24004054}, 0x20000010) 17:11:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4}, 0xc) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) setsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000300)="13b6cbeea0a2f2b84178d36731ba779d888f7767daa4ad4086e31723fed8314ea605fd4bda5093be7e953add375c1b45b7b20ea9e992ce4f05f4c6e06d813c79877fbf7e2099247b4a18c2ac36a772aac17cb90700285ca43603ef4520642e3880af2b61e024b9d8944db4b20d237cea64464979b6fe66f595b9f04fb1bd29183197d6b08c9a5943a1a0b0ff129d1b939a0d5367643e91d7ef3d608c2cdaa892554095c432a66f0c25b9cac1de9b401a9c8ca280cb83fd14a314e2037a3f3bda08974e196c7cb1a8d87773f3287bc44798da97adffe09053eee18dd0191b7aacde36ba69461771821c4e1a3f893cbf0fac91", 0xf2) [ 2744.347880] 2559 [ 2744.641103] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2744.668048] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2744.699447] CPU: 0 PID: 1194 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2744.707283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2744.711741] 2559 [ 2744.716638] Call Trace: [ 2744.716658] dump_stack+0x1b2/0x283 [ 2744.716675] warn_alloc.cold+0x96/0x1af [ 2744.716684] ? zone_watermark_ok_safe+0x250/0x250 [ 2744.716702] ? wait_for_completion_io+0x10/0x10 [ 2744.719016] 2559 [ 2744.721321] __alloc_pages_nodemask+0x2129/0x2730 [ 2744.721346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2744.721357] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2744.721380] ? HARDIRQ_verbose+0x10/0x10 [ 2744.721396] ? do_raw_spin_unlock+0x164/0x250 [ 2744.721411] alloc_pages_current+0xe7/0x1e0 [ 2744.721425] kvm_mmu_create+0xd1/0x1c0 [ 2744.721438] kvm_arch_vcpu_init+0x282/0x890 [ 2744.721447] ? alloc_pages_current+0xef/0x1e0 [ 2744.721460] kvm_vcpu_init+0x26d/0x360 [ 2744.721473] vmx_create_vcpu+0xf5/0x2950 [ 2744.721489] ? __mutex_unlock_slowpath+0x75/0x780 [ 2744.729114] 2559 [ 2744.733880] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2744.733895] ? alloc_loaded_vmcs+0x240/0x240 [ 2744.733911] kvm_vm_ioctl+0x4ae/0x1430 [ 2744.733924] ? __lock_acquire+0x655/0x42a0 [ 2744.733935] ? kvm_vcpu_release+0xa0/0xa0 [ 2744.733948] ? trace_hardirqs_on+0x10/0x10 [ 2744.733957] ? check_preemption_disabled+0x35/0x240 [ 2744.733970] ? trace_hardirqs_on+0x10/0x10 [ 2744.733979] ? check_preemption_disabled+0x35/0x240 [ 2744.733990] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2744.734002] ? HARDIRQ_verbose+0x10/0x10 [ 2744.734012] ? kvm_vcpu_release+0xa0/0xa0 [ 2744.734023] do_vfs_ioctl+0x75a/0xfe0 [ 2744.745554] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2744.745567] ? ioctl_preallocate+0x1a0/0x1a0 [ 2744.745588] ? security_file_ioctl+0x76/0xb0 [ 2744.745599] ? security_file_ioctl+0x83/0xb0 [ 2744.750738] Node 0 [ 2744.755252] SyS_ioctl+0x7f/0xb0 [ 2744.755262] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2744.755276] do_syscall_64+0x1d5/0x640 [ 2744.755293] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2744.755302] RIP: 0033:0x45cb29 [ 2744.764194] DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 2744.768120] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2744.768130] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2744.768135] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2744.768141] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2744.768146] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2744.768152] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2744.905590] syz-executor.5: [ 2744.928800] lowmem_reserve[]: [ 2744.941510] page allocation failure: order:0 [ 2744.949700] 0 [ 2744.954997] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2744.963426] 0 [ 2744.968485] (null) [ 2744.970929] 0 [ 2744.977421] syz-executor.5 cpuset= [ 2744.977891] 0 [ 2744.981874] / [ 2744.989180] 0 [ 2744.990359] mems_allowed=0-1 [ 2744.995280] CPU: 0 PID: 1194 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2744.996841] Node 0 [ 2744.998449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2744.998454] Call Trace: [ 2744.998477] dump_stack+0x1b2/0x283 [ 2745.006131] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.011138] warn_alloc.cold+0x96/0x1af [ 2745.011149] ? zone_watermark_ok_safe+0x250/0x250 [ 2745.011167] ? wait_for_completion_io+0x10/0x10 [ 2745.011182] __alloc_pages_nodemask+0x2129/0x2730 [ 2745.011207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2745.011218] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2745.011239] ? HARDIRQ_verbose+0x10/0x10 [ 2745.011250] ? do_raw_spin_unlock+0x164/0x250 [ 2745.023145] lowmem_reserve[]: [ 2745.025398] alloc_pages_current+0xe7/0x1e0 [ 2745.025415] kvm_mmu_create+0xd1/0x1c0 [ 2745.029060] 0 [ 2745.053648] kvm_arch_vcpu_init+0x282/0x890 [ 2745.053658] ? alloc_pages_current+0xef/0x1e0 [ 2745.053670] kvm_vcpu_init+0x26d/0x360 [ 2745.053683] vmx_create_vcpu+0xf5/0x2950 [ 2745.053698] ? __mutex_unlock_slowpath+0x75/0x780 [ 2745.053708] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2745.053718] ? alloc_loaded_vmcs+0x240/0x240 [ 2745.053731] kvm_vm_ioctl+0x4ae/0x1430 [ 2745.053743] ? __lock_acquire+0x655/0x42a0 [ 2745.053753] ? kvm_vcpu_release+0xa0/0xa0 [ 2745.053764] ? trace_hardirqs_on+0x10/0x10 [ 2745.053774] ? check_preemption_disabled+0x35/0x240 [ 2745.053789] ? trace_hardirqs_on+0x10/0x10 [ 2745.053797] ? check_preemption_disabled+0x35/0x240 [ 2745.053809] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2745.053822] ? HARDIRQ_verbose+0x10/0x10 [ 2745.053833] ? kvm_vcpu_release+0xa0/0xa0 [ 2745.053844] do_vfs_ioctl+0x75a/0xfe0 [ 2745.053856] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2745.053866] ? ioctl_preallocate+0x1a0/0x1a0 [ 2745.053890] ? security_file_ioctl+0x76/0xb0 [ 2745.053900] ? security_file_ioctl+0x83/0xb0 [ 2745.053911] SyS_ioctl+0x7f/0xb0 [ 2745.053918] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2745.053931] do_syscall_64+0x1d5/0x640 [ 2745.053947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2745.053955] RIP: 0033:0x45cb29 [ 2745.053960] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2745.053972] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2745.053978] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2745.053984] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2745.053990] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2745.053996] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2745.158231] page allocation failure: order:0 [ 2745.182915] 0 [ 2745.183702] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2745.188935] 0 [ 2745.199971] (null) [ 2745.205180] 0 [ 2745.206008] syz-executor.4 cpuset= [ 2745.210203] 0 [ 2745.221508] / [ 2745.235502] mems_allowed=0-1 [ 2745.237402] Node 1 [ 2745.245290] CPU: 0 PID: 1176 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2745.252152] Normal free:2018444kB min:53592kB low:66988kB high:80384kB active_anon:592124kB inactive_anon:64456kB active_file:39772kB inactive_file:176748kB unevictable:0kB writepending:172kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33152kB pagetables:61404kB bounce:0kB free_pcp:1132kB local_pcp:412kB free_cma:0kB [ 2745.259123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2745.259128] Call Trace: [ 2745.259145] dump_stack+0x1b2/0x283 [ 2745.259161] warn_alloc.cold+0x96/0x1af [ 2745.266640] lowmem_reserve[]: [ 2745.270800] ? zone_watermark_ok_safe+0x250/0x250 [ 2745.270819] ? wait_for_completion_io+0x10/0x10 [ 2745.270834] __alloc_pages_nodemask+0x2129/0x2730 [ 2745.270860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2745.270870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2745.270892] ? HARDIRQ_verbose+0x10/0x10 [ 2745.270903] ? do_raw_spin_unlock+0x164/0x250 [ 2745.270918] alloc_pages_current+0xe7/0x1e0 [ 2745.270933] kvm_mmu_create+0xd1/0x1c0 [ 2745.270946] kvm_arch_vcpu_init+0x282/0x890 [ 2745.270956] ? alloc_pages_current+0xef/0x1e0 [ 2745.272948] 0 [ 2745.278608] kvm_vcpu_init+0x26d/0x360 [ 2745.278621] vmx_create_vcpu+0xf5/0x2950 [ 2745.278633] ? __mutex_unlock_slowpath+0x75/0x780 [ 2745.280546] 0 [ 2745.282541] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2745.282553] ? alloc_loaded_vmcs+0x240/0x240 [ 2745.282570] kvm_vm_ioctl+0x4ae/0x1430 [ 2745.284379] 0 [ 2745.287875] ? __lock_acquire+0x655/0x42a0 [ 2745.287885] ? kvm_vcpu_release+0xa0/0xa0 [ 2745.287896] ? trace_hardirqs_on+0x10/0x10 [ 2745.289886] 0 [ 2745.291370] ? check_preemption_disabled+0x35/0x240 [ 2745.291387] ? trace_hardirqs_on+0x10/0x10 [ 2745.294501] 0 [ 2745.296686] ? check_preemption_disabled+0x35/0x240 [ 2745.296698] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2745.296711] ? HARDIRQ_verbose+0x10/0x10 [ 2745.334156] ? kvm_vcpu_release+0xa0/0xa0 [ 2745.334168] do_vfs_ioctl+0x75a/0xfe0 [ 2745.334181] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2745.334192] ? ioctl_preallocate+0x1a0/0x1a0 [ 2745.334211] ? security_file_ioctl+0x76/0xb0 [ 2745.334220] ? security_file_ioctl+0x83/0xb0 [ 2745.334230] SyS_ioctl+0x7f/0xb0 [ 2745.334237] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2745.334250] do_syscall_64+0x1d5/0x640 [ 2745.343821] Node 0 [ 2745.346172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2745.346181] RIP: 0033:0x45cb29 [ 2745.349949] DMA: [ 2745.353736] RSP: 002b:00007f660c1dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2745.353747] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2745.353752] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2745.353759] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2745.356887] 16*4kB [ 2745.361666] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2745.361673] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c1dc6d4 [ 2745.397902] warn_alloc_show_mem: 3 callbacks suppressed [ 2745.397906] Mem-Info: [ 2745.402460] (UMH) [ 2745.412359] active_anon:583218 inactive_anon:25890 isolated_anon:0 [ 2745.412359] active_file:9944 inactive_file:44187 isolated_file:0 [ 2745.412359] unevictable:0 dirty:44 writeback:0 unstable:0 [ 2745.412359] slab_reclaimable:63591 slab_unreclaimable:239398 [ 2745.412359] mapped:67171 shmem:31004 pagetables:26634 bounce:0 [ 2745.412359] free:515477 free_pcp:363 free_cma:0 [ 2745.412680] 65*8kB [ 2745.417689] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2745.421568] (UMEH) [ 2745.428583] Node 1 active_anon:592124kB inactive_anon:64456kB active_file:39772kB inactive_file:176748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59780kB dirty:172kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2745.433488] 34*16kB [ 2745.438139] Node 0 [ 2745.438650] (UEH) [ 2745.449039] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.451483] 7*32kB [ 2745.454253] lowmem_reserve[]: [ 2745.458137] (UMEH) [ 2745.463503] 0 [ 2745.464329] 4*64kB [ 2745.474656] 2559 [ 2745.478443] (UEH) [ 2745.483583] 2559 [ 2745.486422] 1*128kB [ 2745.497591] 2559 [ 2745.500904] (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB [ 2745.506600] 2559 [ 2745.508765] = 10440kB [ 2745.516893] Node 0 [ 2745.519028] Node 0 [ 2745.524272] DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2745.524336] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2745.524384] Node 1 Normal: 453*4kB (UME) 97*8kB (ME) 68*16kB (UME) 104*32kB (UME) 68*64kB (UM) 15*128kB (UM) 4*256kB (UME) 4*512kB (UE) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2017244kB [ 2745.524472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2745.524478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2745.524486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2745.524492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2745.524496] 55716 total pagecache pages [ 2745.524508] 0 pages in swap cache [ 2745.524513] Swap cache stats: add 0, delete 0, find 0/0 [ 2745.524517] Free swap = 0kB [ 2745.524521] Total swap = 0kB [ 2745.524529] 1965979 pages RAM [ 2745.524532] 0 pages HighMem/MovableOnly [ 2745.524536] 338456 pages reserved [ 2745.524540] 0 pages cma reserved [ 2745.861332] DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 2745.891356] lowmem_reserve[]: 0 0 0 0 0 [ 2745.895411] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2745.920836] lowmem_reserve[]: 0 0 0 0 0 [ 2745.924830] Node 1 Normal free:2018384kB min:53592kB low:66988kB high:80384kB active_anon:592028kB inactive_anon:64456kB active_file:39772kB inactive_file:176752kB unevictable:0kB writepending:240kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33088kB pagetables:61448kB bounce:0kB free_pcp:1296kB local_pcp:592kB free_cma:0kB [ 2745.956773] lowmem_reserve[]: 0 0 0 0 0 [ 2745.961441] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2745.977871] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2745.992487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2746.003471] Node 1 Normal: 422*4kB (UME) 297*8kB (UME) 43*16kB (UME) 100*32kB (UME) 68*64kB (UM) 15*128kB (UM) 4*256kB (UME) 4*512kB (UE) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2018192kB [ 2746.021215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2746.030743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2746.039771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2746.048739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:11:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x20000444) 17:11:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:08 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {0x4}}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:08 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r1, 0xd, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000040)) [ 2746.057476] 55728 total pagecache pages [ 2746.061526] 0 pages in swap cache [ 2746.064981] Swap cache stats: add 0, delete 0, find 0/0 [ 2746.070432] Free swap = 0kB [ 2746.073447] Total swap = 0kB [ 2746.076454] 1965979 pages RAM [ 2746.079618] 0 pages HighMem/MovableOnly [ 2746.083580] 338456 pages reserved [ 2746.087015] 0 pages cma reserved [ 2746.181647] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2746.198276] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2746.211607] CPU: 1 PID: 1243 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2746.219447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2746.228812] Call Trace: [ 2746.231414] dump_stack+0x1b2/0x283 [ 2746.235055] warn_alloc.cold+0x96/0x1af [ 2746.239035] ? zone_watermark_ok_safe+0x250/0x250 [ 2746.243911] ? wait_for_completion_io+0x10/0x10 [ 2746.248598] __alloc_pages_nodemask+0x2129/0x2730 [ 2746.253461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2746.258311] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2746.263168] ? HARDIRQ_verbose+0x10/0x10 [ 2746.267241] ? do_raw_spin_unlock+0x164/0x250 [ 2746.271747] alloc_pages_current+0xe7/0x1e0 [ 2746.276074] kvm_mmu_create+0xd1/0x1c0 [ 2746.279969] kvm_arch_vcpu_init+0x282/0x890 [ 2746.284294] ? alloc_pages_current+0xef/0x1e0 [ 2746.288795] kvm_vcpu_init+0x26d/0x360 [ 2746.292686] vmx_create_vcpu+0xf5/0x2950 [ 2746.296754] ? __mutex_unlock_slowpath+0x75/0x780 [ 2746.301606] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2746.306629] ? alloc_loaded_vmcs+0x240/0x240 [ 2746.311046] kvm_vm_ioctl+0x4ae/0x1430 [ 2746.314935] ? __lock_acquire+0x655/0x42a0 [ 2746.319168] ? kvm_vcpu_release+0xa0/0xa0 [ 2746.323321] ? trace_hardirqs_on+0x10/0x10 [ 2746.327558] ? check_preemption_disabled+0x35/0x240 [ 2746.332589] ? trace_hardirqs_on+0x10/0x10 [ 2746.336836] ? check_preemption_disabled+0x35/0x240 [ 2746.341868] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2746.346814] ? HARDIRQ_verbose+0x10/0x10 [ 2746.350885] ? kvm_vcpu_release+0xa0/0xa0 [ 2746.355035] do_vfs_ioctl+0x75a/0xfe0 [ 2746.358841] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2746.364473] ? ioctl_preallocate+0x1a0/0x1a0 [ 2746.368896] ? security_file_ioctl+0x76/0xb0 [ 2746.373305] ? security_file_ioctl+0x83/0xb0 [ 2746.377719] SyS_ioctl+0x7f/0xb0 [ 2746.381081] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2746.385061] do_syscall_64+0x1d5/0x640 [ 2746.388963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2746.394152] RIP: 0033:0x45cb29 [ 2746.397343] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2746.405054] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2746.412329] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2746.419605] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2746.426883] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2746.434167] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2746.463213] Mem-Info: [ 2746.465890] active_anon:583219 inactive_anon:25890 isolated_anon:0 [ 2746.465890] active_file:9943 inactive_file:44189 isolated_file:0 [ 2746.465890] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2746.465890] slab_reclaimable:63559 slab_unreclaimable:239481 [ 2746.465890] mapped:67163 shmem:31004 pagetables:26682 bounce:0 [ 2746.465890] free:515287 free_pcp:351 free_cma:0 [ 2746.501304] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2746.531502] Node 1 active_anon:592060kB inactive_anon:64456kB active_file:39772kB inactive_file:176788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59684kB dirty:104kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2746.560039] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.587977] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2746.593768] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:328kB local_pcp:184kB free_cma:0kB [ 2746.623451] lowmem_reserve[]: 0 0 0 0 0 [ 2746.627770] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.654388] lowmem_reserve[]: 0 0 0 0 0 [ 2746.658554] Node 1 Normal free:2016944kB min:53592kB low:66988kB high:80384kB active_anon:592060kB inactive_anon:64456kB active_file:39772kB inactive_file:176788kB unevictable:0kB writepending:68kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33152kB pagetables:61440kB bounce:0kB free_pcp:1332kB local_pcp:628kB free_cma:0kB [ 2746.689021] lowmem_reserve[]: 0 0 0 0 0 [ 2746.693257] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2746.709490] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2746.724647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2746.735704] Node 1 Normal: 416*4kB (UME) 219*8kB (UME) 37*16kB (UME) 72*32kB (UME) 68*64kB (UM) 24*128kB (UM) 4*256kB (UME) 4*512kB (UE) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2017704kB [ 2746.753295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2746.762222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2746.770896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2746.779822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2746.788400] 55732 total pagecache pages [ 2746.792854] 0 pages in swap cache [ 2746.796310] Swap cache stats: add 0, delete 0, find 0/0 [ 2746.801720] Free swap = 0kB [ 2746.804732] Total swap = 0kB [ 2746.807730] 1965979 pages RAM [ 2746.810942] 0 pages HighMem/MovableOnly [ 2746.814907] 338456 pages reserved [ 2746.818349] 0 pages cma reserved [ 2746.835780] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2746.846873] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2746.853279] CPU: 1 PID: 1243 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2746.861095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2746.870441] Call Trace: [ 2746.873017] dump_stack+0x1b2/0x283 [ 2746.876631] warn_alloc.cold+0x96/0x1af [ 2746.880585] ? zone_watermark_ok_safe+0x250/0x250 [ 2746.885410] ? wait_for_completion_io+0x10/0x10 [ 2746.890063] __alloc_pages_nodemask+0x2129/0x2730 [ 2746.894893] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2746.899712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2746.904540] ? HARDIRQ_verbose+0x10/0x10 [ 2746.908626] ? do_raw_spin_unlock+0x164/0x250 [ 2746.913103] alloc_pages_current+0xe7/0x1e0 [ 2746.917405] kvm_mmu_create+0xd1/0x1c0 [ 2746.921275] kvm_arch_vcpu_init+0x282/0x890 [ 2746.925578] ? alloc_pages_current+0xef/0x1e0 [ 2746.930055] kvm_vcpu_init+0x26d/0x360 [ 2746.933922] vmx_create_vcpu+0xf5/0x2950 [ 2746.938072] ? __mutex_unlock_slowpath+0x75/0x780 [ 2746.942895] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2746.947895] ? alloc_loaded_vmcs+0x240/0x240 [ 2746.952287] kvm_vm_ioctl+0x4ae/0x1430 [ 2746.956156] ? __lock_acquire+0x655/0x42a0 [ 2746.960371] ? kvm_vcpu_release+0xa0/0xa0 [ 2746.964497] ? trace_hardirqs_on+0x10/0x10 [ 2746.968716] ? check_preemption_disabled+0x35/0x240 [ 2746.973713] ? trace_hardirqs_on+0x10/0x10 [ 2746.977930] ? check_preemption_disabled+0x35/0x240 [ 2746.982924] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2746.987834] ? HARDIRQ_verbose+0x10/0x10 [ 2746.991873] ? kvm_vcpu_release+0xa0/0xa0 [ 2746.996000] do_vfs_ioctl+0x75a/0xfe0 [ 2746.999782] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2747.005441] ? ioctl_preallocate+0x1a0/0x1a0 [ 2747.009836] ? security_file_ioctl+0x76/0xb0 [ 2747.014224] ? security_file_ioctl+0x83/0xb0 [ 2747.018610] SyS_ioctl+0x7f/0xb0 [ 2747.021952] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2747.025905] do_syscall_64+0x1d5/0x640 [ 2747.029775] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2747.034942] RIP: 0033:0x45cb29 [ 2747.038113] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2747.045805] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2747.053056] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2747.060303] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2747.067552] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2747.074802] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 17:11:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="08af75000008000037000000003596371cc61496ae70169b170000008c7a4cc4483d1825c20b21c2000001d80e78faea83d838b1040000004c27aaaaaba1aaaabb8d0261383fc364524563de56309d0402a4ba152a82b2082ff235d52205201de4c00adf0d6de800ef0e2dc92e8a63ad83814e25eebdd0b281fefc2b83c0b5c386a6b557624114fa69a154f27ad9535ecb68738e4e8e092c44b2e10fe1ba5d53921cf765590cbf87b148b3c390b3d26ac0b4c4a0822f3aa9e754ced576a23ed2e7650d5a463e7d6ed9be496fafc36d0b5c1b0c9d50832c9c1af0142ce2bd60f403895a838886b7875118324b41a596977373029b47869f"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x4, 0x0, 0x10000000000009, 0x588}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x311800, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:11:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000b9bbbb0180c2000001aba1aaaabb8d"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x7, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r5, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={r6, 0x80000000, 0x8001, 0x4}, &(0x7f0000000300)=0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffe, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r7, 0x1) linkat(r3, &(0x7f0000000000)='./file0\x00', r7, &(0x7f00000000c0)='./file0\x00', 0x1000) 17:11:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000040)=0x2, 0x8) ioctl$LOOP_GET_STATUS(r4, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYRESDEC, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x10000, 0x4) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f0000000400)=0xffffffffffffffb9) 17:11:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) 17:11:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2004001000000aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x800, 0xfffffffb, 0x7, 0x5}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) 17:11:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:10 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000000)={[], 0x0, 0xcca1, 0xff, 0x0, 0x400, 0x6000, 0xd000, [], 0x5}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) write$P9_RLINK(r2, &(0x7f00000001c0)={0x7, 0x47, 0x1}, 0x7) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x450400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x140b, 0x809, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10004854) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:10 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="29af750000080000bbbbbb0180c201800000004c27aaaaaba1aa8abb8d0000caaae0cc603230ef2e3fabcfdc46c7f21e4092f3d2066f63a9933f765ae34ab2abdaaecc1c64e3"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x3, 0x0, 0x0, 0x10000003, 0xa0004, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x1) mq_notify(r5, &(0x7f0000000300)={0x0, 0x11, 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e24, 0xffff, @loopback, 0x1}}, 0x1, 0x8, 0x10001, 0xaf, 0x8, 0x174f, 0x9}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @private=0x4a010100}}}, &(0x7f00000001c0)=0x84) 17:11:10 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000040), 0x8) poll(0x0, 0x0, 0x82) r5 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000500)={r5, r7}) recvfrom$l2tp(r6, &(0x7f0000000000)=""/7, 0x7, 0x40, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 17:11:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) [ 2747.806593] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2747.875911] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2747.881902] CPU: 0 PID: 1274 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2747.889720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2747.899082] Call Trace: [ 2747.901685] dump_stack+0x1b2/0x283 [ 2747.905328] warn_alloc.cold+0x96/0x1af [ 2747.909317] ? zone_watermark_ok_safe+0x250/0x250 [ 2747.914184] ? wait_for_completion_io+0x10/0x10 [ 2747.918876] __alloc_pages_nodemask+0x2129/0x2730 [ 2747.923773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2747.928635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2747.933510] ? HARDIRQ_verbose+0x10/0x10 [ 2747.937587] ? check_preemption_disabled+0x35/0x240 [ 2747.942627] alloc_pages_current+0xe7/0x1e0 [ 2747.946972] kvm_mmu_create+0xd1/0x1c0 [ 2747.950880] kvm_arch_vcpu_init+0x282/0x890 [ 2747.955219] ? alloc_pages_current+0xef/0x1e0 [ 2747.959735] kvm_vcpu_init+0x26d/0x360 [ 2747.963642] vmx_create_vcpu+0xf5/0x2950 [ 2747.967723] ? __mutex_unlock_slowpath+0x75/0x780 [ 2747.972580] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2747.977617] ? alloc_loaded_vmcs+0x240/0x240 [ 2747.982057] kvm_vm_ioctl+0x4ae/0x1430 [ 2747.985966] ? __lock_acquire+0x655/0x42a0 [ 2747.990226] ? kvm_vcpu_release+0xa0/0xa0 [ 2747.994393] ? trace_hardirqs_on+0x10/0x10 [ 2747.998645] ? check_preemption_disabled+0x35/0x240 [ 2748.003690] ? trace_hardirqs_on+0x10/0x10 [ 2748.007942] ? check_preemption_disabled+0x35/0x240 [ 2748.012981] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2748.017934] ? HARDIRQ_verbose+0x10/0x10 [ 2748.022021] ? kvm_vcpu_release+0xa0/0xa0 [ 2748.026419] do_vfs_ioctl+0x75a/0xfe0 [ 2748.030240] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2748.035887] ? ioctl_preallocate+0x1a0/0x1a0 [ 2748.040330] ? security_file_ioctl+0x76/0xb0 [ 2748.044764] ? security_file_ioctl+0x83/0xb0 [ 2748.049188] SyS_ioctl+0x7f/0xb0 [ 2748.052567] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2748.056564] do_syscall_64+0x1d5/0x640 [ 2748.060480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2748.065683] RIP: 0033:0x45cb29 [ 2748.068880] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2748.076604] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2748.083887] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2748.091167] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2748.098449] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2748.105730] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2748.137124] warn_alloc_show_mem: 1 callbacks suppressed [ 2748.137256] Mem-Info: [ 2748.156197] active_anon:583881 inactive_anon:25890 isolated_anon:0 [ 2748.156197] active_file:9943 inactive_file:44212 isolated_file:0 [ 2748.156197] unevictable:0 dirty:22 writeback:0 unstable:0 [ 2748.156197] slab_reclaimable:63527 slab_unreclaimable:239781 [ 2748.156197] mapped:67427 shmem:31004 pagetables:26739 bounce:0 [ 2748.156197] free:514330 free_pcp:286 free_cma:0 [ 2748.204118] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2748.240725] Node 1 active_anon:592276kB inactive_anon:64456kB active_file:39772kB inactive_file:176844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59804kB dirty:84kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2748.274372] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2748.310745] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2748.316831] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:344kB local_pcp:192kB free_cma:0kB [ 2748.353666] lowmem_reserve[]: 0 0 0 0 0 [ 2748.357926] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2748.393156] lowmem_reserve[]: 0 0 0 0 0 [ 2748.397473] Node 1 Normal free:2016172kB min:53592kB low:66988kB high:80384kB active_anon:592276kB inactive_anon:64456kB active_file:39772kB inactive_file:176844kB unevictable:0kB writepending:184kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33440kB pagetables:61676kB bounce:0kB free_pcp:1320kB local_pcp:640kB free_cma:0kB [ 2748.406476] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2748.432857] lowmem_reserve[]: [ 2748.442099] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2748.442126] CPU: 1 PID: 1277 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2748.442133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2748.442137] Call Trace: [ 2748.442157] dump_stack+0x1b2/0x283 [ 2748.446167] 0 [ 2748.450364] warn_alloc.cold+0x96/0x1af [ 2748.450376] ? zone_watermark_ok_safe+0x250/0x250 [ 2748.450396] ? wait_for_completion_io+0x10/0x10 [ 2748.450410] __alloc_pages_nodemask+0x2129/0x2730 [ 2748.450436] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2748.450448] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2748.450468] ? HARDIRQ_verbose+0x10/0x10 [ 2748.450479] ? do_raw_spin_unlock+0x164/0x250 [ 2748.450494] alloc_pages_current+0xe7/0x1e0 [ 2748.450511] kvm_mmu_create+0xd1/0x1c0 [ 2748.450525] kvm_arch_vcpu_init+0x282/0x890 [ 2748.450534] ? alloc_pages_current+0xef/0x1e0 [ 2748.450547] kvm_vcpu_init+0x26d/0x360 [ 2748.450561] vmx_create_vcpu+0xf5/0x2950 [ 2748.450574] ? __mutex_unlock_slowpath+0x75/0x780 [ 2748.450584] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2748.450597] ? alloc_loaded_vmcs+0x240/0x240 [ 2748.450613] kvm_vm_ioctl+0x4ae/0x1430 [ 2748.450624] ? __lock_acquire+0x655/0x42a0 [ 2748.450635] ? kvm_vcpu_release+0xa0/0xa0 [ 2748.450646] ? trace_hardirqs_on+0x10/0x10 [ 2748.450656] ? check_preemption_disabled+0x35/0x240 [ 2748.450670] ? trace_hardirqs_on+0x10/0x10 [ 2748.450679] ? check_preemption_disabled+0x35/0x240 [ 2748.450692] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2748.450707] ? HARDIRQ_verbose+0x10/0x10 [ 2748.450716] ? kvm_vcpu_release+0xa0/0xa0 [ 2748.450728] do_vfs_ioctl+0x75a/0xfe0 [ 2748.463098] 0 [ 2748.467881] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2748.467895] ? ioctl_preallocate+0x1a0/0x1a0 [ 2748.467924] ? security_file_ioctl+0x76/0xb0 [ 2748.470849] 0 [ 2748.474108] ? security_file_ioctl+0x83/0xb0 [ 2748.474118] SyS_ioctl+0x7f/0xb0 [ 2748.474127] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2748.474141] do_syscall_64+0x1d5/0x640 [ 2748.474166] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2748.474179] RIP: 0033:0x45cb29 [ 2748.476115] 0 [ 2748.479914] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2748.479925] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2748.479930] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2748.479936] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2748.479941] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2748.479947] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2748.592543] syz-executor.4: [ 2748.594969] 0 [ 2748.598845] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2748.598860] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 2748.598885] CPU: 1 PID: 1277 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2748.604457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2748.604462] Call Trace: [ 2748.604486] dump_stack+0x1b2/0x283 [ 2748.610264] Node 0 [ 2748.614500] warn_alloc.cold+0x96/0x1af [ 2748.614513] ? zone_watermark_ok_safe+0x250/0x250 [ 2748.614537] ? wait_for_completion_io+0x10/0x10 [ 2748.619146] DMA: [ 2748.620721] __alloc_pages_nodemask+0x2129/0x2730 [ 2748.620749] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2748.625209] 16*4kB [ 2748.628485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2748.628508] ? HARDIRQ_verbose+0x10/0x10 [ 2748.632688] (UMH) [ 2748.636334] ? do_raw_spin_unlock+0x164/0x250 [ 2748.636349] alloc_pages_current+0xe7/0x1e0 [ 2748.636365] kvm_mmu_create+0xd1/0x1c0 [ 2748.785861] kvm_arch_vcpu_init+0x282/0x890 [ 2748.790169] ? alloc_pages_current+0xef/0x1e0 [ 2748.794652] kvm_vcpu_init+0x26d/0x360 [ 2748.798533] vmx_create_vcpu+0xf5/0x2950 [ 2748.802581] ? __mutex_unlock_slowpath+0x75/0x780 [ 2748.807408] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2748.812412] ? alloc_loaded_vmcs+0x240/0x240 [ 2748.816807] kvm_vm_ioctl+0x4ae/0x1430 [ 2748.820700] ? __lock_acquire+0x655/0x42a0 [ 2748.824920] ? kvm_vcpu_release+0xa0/0xa0 [ 2748.829057] ? trace_hardirqs_on+0x10/0x10 [ 2748.833277] ? check_preemption_disabled+0x35/0x240 [ 2748.838280] ? trace_hardirqs_on+0x10/0x10 [ 2748.842498] ? check_preemption_disabled+0x35/0x240 [ 2748.847508] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2748.852424] ? HARDIRQ_verbose+0x10/0x10 [ 2748.856471] ? kvm_vcpu_release+0xa0/0xa0 [ 2748.860605] do_vfs_ioctl+0x75a/0xfe0 [ 2748.864395] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2748.870005] ? ioctl_preallocate+0x1a0/0x1a0 [ 2748.874408] ? security_file_ioctl+0x76/0xb0 [ 2748.878802] ? security_file_ioctl+0x83/0xb0 [ 2748.883193] SyS_ioctl+0x7f/0xb0 [ 2748.886542] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2748.890503] do_syscall_64+0x1d5/0x640 [ 2748.894376] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2748.899547] RIP: 0033:0x45cb29 [ 2748.902717] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2748.910409] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2748.917689] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2748.924943] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2748.932196] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2748.939446] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2748.956086] 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2748.987160] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2749.003437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2749.015606] Node 1 Normal: 450*4kB (UME) 204*8kB (UME) 41*16kB (UME) 18*32kB (UME) 49*64kB (UE) 31*128kB (UM) 4*256kB (UME) 4*512kB (UE) 16*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2015736kB [ 2749.034564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2749.044149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2749.053324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2749.062880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2749.072006] 55753 total pagecache pages [ 2749.075977] 0 pages in swap cache [ 2749.080536] Swap cache stats: add 0, delete 0, find 0/0 17:11:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, @perf_config_ext={0x0, 0xc05}, 0x54902, 0x40000000000004, 0x8, 0x0, 0x0, 0xffff8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:11 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x501840, 0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f0000000900)=""/4096, 0x1000, r2}}, 0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8dcadfbb5a8ad4a4bdada79202e93f44519a71250a75bda194ad9fb78aee8ebd07bac770c4e29587e44abaeda22f9b9b6bdafc43e611f255713b7464965193426476523deffe0f9c8d226af4be32b07c4ec49d41b575a9ea10ba76502f9af3d21a0c0efdcdd7916ce7ece48002df0c77783c388bf31352030a3191b124261079964067a956b4ee850ac8fc154e9a"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = getpid() ptrace$pokeuser(0x6, r5, 0xc2e5, 0xd9b) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$inet(0x2, 0x2, 0x8000) 17:11:11 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0xffff, 0x576, 0x1, 0x7ff]}) r1 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af75000008e0ffbabbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) statx(r2, &(0x7f0000000440)='./file0\x00', 0xc00, 0x804, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r4, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000000340)=[{&(0x7f0000000080)="31e0a57308cb848bdfdef995dd17e9e7c1a24fa1", 0x14, 0x9}, {&(0x7f00000000c0)="c46f94de438caa4043dcc72a9f4e1bc0217feaefd14d0134dcaae3e1b8ad4034adaf39a29b470e0d3a4bd60b0888e2845908c6064b3bb68a1a1a46ee83dc08306f989c1e77c061bd9de895a4", 0x4c}, {&(0x7f0000000140)="5e537c8d030642825c8cf18fead80582cc232555ec64d78c9da46d55624e1e29698b81e7542fb6a069be0c72e11eb6bcd2b82ae0eae4aa709f99c0f23c96c23bdd6e5db0f1da5f3a0e2c29e2c530595fe1ee0daae441822cc78327817c1324960489711f4df08b996c48b453db", 0x6d, 0x4fd8}, {&(0x7f00000001c0)="2886dfe1ac8baacf69fd76af5d2aa6a837aa64b8f6efaef66a5ded7207b79823ff455f13b143747e174233d6e1f4961bc2fc8ceeaefd577f6215f6769e122cf14faa67cbf2324980e09cdc716cbf64b43620e672dd8fbeeda851e9cf1121b06472b1ff2591e53b41eed6a03d0f62479c53589fe4ccb4d3cb43cfe4d607b5cb2bb064ae68342121d4f978fe3989", 0x8d, 0x8}, {&(0x7f0000000280)="9d48956faa2ab365a6ccce5154c775f688629f554ccaae849273ce9a17b59e4603f8a06245cd77b73a707dd3ea627f28d031fdd8a9de132ca43968ecb0ca92b490a8a8f470619d6b53ed304c54bf5c5e2a01264037b9df539835eaa9a5a6d6e3c7ea6949ac4f6a3478", 0x69, 0x401}, {&(0x7f0000000300)="8676afe8835846d1fc76cb6f806b4d5b2b781da74901aa54", 0x18, 0x2}], 0x50000, &(0x7f0000000580)={[{@rtdev={'rtdev', 0x3d, './file0'}}, {@logbsize={'logbsize', 0x3d, [0x2d]}}], [{@euid_gt={'euid>', r1}}, {@fowner_gt={'fowner>', r3}}, {@uid_gt={'uid>', r4}}]}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a30d01d26d8dab6e9ff0743a8c600fba8b78f2fd1b89910c0ff018c04dd7696ca"], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) [ 2749.085900] Free swap = 0kB [ 2749.089958] Total swap = 0kB [ 2749.092980] 1965979 pages RAM [ 2749.096060] 0 pages HighMem/MovableOnly [ 2749.100327] 338456 pages reserved [ 2749.103815] 0 pages cma reserved 17:11:11 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) init_module(&(0x7f0000000140)='-\x00', 0x2, &(0x7f0000000180)='\x00') socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000001c0)={0x400, 0x0, 0xf0000000, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') sendmsg$can_bcm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x23, 0x1, {0x77359400}, {}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x38, 0x9ffee34391b22461, 0x0, 0x0, "f06e9262b387ac797f152d4ae7df614fa62891124e5e59d4856596db480829e1d87e42349ff380b944f255a97196ae9ba3cdf226bb510cf22d92726f06dcfa6b"}}, 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x24024040) 17:11:12 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="1938abf739bdc97d9c7e4616014b", 0xe}], 0x1, 0x8001) [ 2749.224541] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 17:11:12 executing program 1: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0xfffffffffffffffe, 0x29) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20040, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4, r6}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x1c, 0x4) [ 2749.315846] syz-executor.4 cpuset=/ mems_allowed=0-1 17:11:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) getsockname$ax25(r3, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @bcast, @netrom, @remote, @netrom, @rose, @default, @default]}, &(0x7f0000000080)=0x48) [ 2749.355511] CPU: 0 PID: 1341 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2749.363348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2749.372719] Call Trace: [ 2749.375325] dump_stack+0x1b2/0x283 [ 2749.378974] warn_alloc.cold+0x96/0x1af [ 2749.382967] ? zone_watermark_ok_safe+0x250/0x250 [ 2749.387832] ? wait_for_completion_io+0x10/0x10 [ 2749.392527] __alloc_pages_nodemask+0x2129/0x2730 [ 2749.397412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2749.402273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2749.407142] ? HARDIRQ_verbose+0x10/0x10 [ 2749.411217] ? do_raw_spin_unlock+0x164/0x250 [ 2749.415724] alloc_pages_current+0xe7/0x1e0 [ 2749.420061] kvm_mmu_create+0xd1/0x1c0 [ 2749.423968] kvm_arch_vcpu_init+0x282/0x890 [ 2749.428303] ? alloc_pages_current+0xef/0x1e0 [ 2749.432819] kvm_vcpu_init+0x26d/0x360 [ 2749.436725] vmx_create_vcpu+0xf5/0x2950 [ 2749.440805] ? __mutex_unlock_slowpath+0x75/0x780 [ 2749.445663] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2749.450696] ? alloc_loaded_vmcs+0x240/0x240 [ 2749.455125] kvm_vm_ioctl+0x4ae/0x1430 [ 2749.459032] ? __lock_acquire+0x655/0x42a0 [ 2749.463285] ? kvm_vcpu_release+0xa0/0xa0 [ 2749.467455] ? trace_hardirqs_on+0x10/0x10 [ 2749.471704] ? check_preemption_disabled+0x35/0x240 [ 2749.476747] ? trace_hardirqs_on+0x10/0x10 [ 2749.480995] ? check_preemption_disabled+0x35/0x240 [ 2749.486027] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2749.490978] ? HARDIRQ_verbose+0x10/0x10 [ 2749.495056] ? kvm_vcpu_release+0xa0/0xa0 [ 2749.499216] do_vfs_ioctl+0x75a/0xfe0 [ 2749.503026] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2749.508668] ? ioctl_preallocate+0x1a0/0x1a0 [ 2749.513108] ? security_file_ioctl+0x76/0xb0 [ 2749.513728] syz-executor.5: page allocation failure: order:0 [ 2749.517523] ? security_file_ioctl+0x83/0xb0 [ 2749.517536] SyS_ioctl+0x7f/0xb0 [ 2749.523833] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2749.527734] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2749.527750] do_syscall_64+0x1d5/0x640 [ 2749.527770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2749.527778] RIP: 0033:0x45cb29 [ 2749.527786] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 [ 2749.532141] (null) [ 2749.536998] ORIG_RAX: 0000000000000010 [ 2749.537004] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2749.537009] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2749.537014] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2749.537019] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2749.537026] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 [ 2749.561470] warn_alloc_show_mem: 2 callbacks suppressed [ 2749.561475] Mem-Info: [ 2749.572295] syz-executor.5 cpuset= [ 2749.573778] active_anon:583291 inactive_anon:25890 isolated_anon:0 [ 2749.573778] active_file:9944 inactive_file:44224 isolated_file:0 [ 2749.573778] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2749.573778] slab_reclaimable:63514 slab_unreclaimable:241039 [ 2749.573778] mapped:67195 shmem:31004 pagetables:26728 bounce:0 [ 2749.573778] free:513439 free_pcp:365 free_cma:0 [ 2749.584832] / [ 2749.588412] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2749.604917] mems_allowed=0-1 [ 2749.614520] Node 1 active_anon:592416kB inactive_anon:64456kB active_file:39772kB inactive_file:176896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59876kB dirty:76kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2749.652985] CPU: 1 PID: 1348 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2749.680231] Node 0 [ 2749.680438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2749.708593] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2749.716141] Call Trace: [ 2749.716162] dump_stack+0x1b2/0x283 [ 2749.716178] warn_alloc.cold+0x96/0x1af [ 2749.716191] ? zone_watermark_ok_safe+0x250/0x250 [ 2749.718467] lowmem_reserve[]: [ 2749.727764] ? wait_for_completion_io+0x10/0x10 [ 2749.727780] __alloc_pages_nodemask+0x2129/0x2730 [ 2749.727807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2749.727818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2749.727838] ? HARDIRQ_verbose+0x10/0x10 [ 2749.727847] ? do_raw_spin_unlock+0x164/0x250 [ 2749.727861] alloc_pages_current+0xe7/0x1e0 [ 2749.760262] 0 [ 2749.763939] kvm_mmu_create+0xd1/0x1c0 [ 2749.763955] kvm_arch_vcpu_init+0x282/0x890 [ 2749.771982] 2559 [ 2749.776532] ? alloc_pages_current+0xef/0x1e0 [ 2749.776546] kvm_vcpu_init+0x26d/0x360 [ 2749.776559] vmx_create_vcpu+0xf5/0x2950 [ 2749.781584] 2559 [ 2749.786244] ? __mutex_unlock_slowpath+0x75/0x780 [ 2749.786254] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2749.786266] ? alloc_loaded_vmcs+0x240/0x240 [ 2749.794578] 2559 [ 2749.795141] kvm_vm_ioctl+0x4ae/0x1430 [ 2749.800649] 2559 [ 2749.803921] ? __lock_acquire+0x655/0x42a0 [ 2749.803932] ? kvm_vcpu_release+0xa0/0xa0 [ 2749.803943] ? trace_hardirqs_on+0x10/0x10 [ 2749.809598] ? check_preemption_disabled+0x35/0x240 [ 2749.809613] ? trace_hardirqs_on+0x10/0x10 [ 2749.809620] ? check_preemption_disabled+0x35/0x240 [ 2749.809630] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2749.809643] ? HARDIRQ_verbose+0x10/0x10 [ 2749.809653] ? kvm_vcpu_release+0xa0/0xa0 [ 2749.809664] do_vfs_ioctl+0x75a/0xfe0 [ 2749.809679] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2749.819068] Node 0 [ 2749.820508] ? ioctl_preallocate+0x1a0/0x1a0 [ 2749.820529] ? security_file_ioctl+0x76/0xb0 [ 2749.824467] DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:348kB local_pcp:192kB free_cma:0kB [ 2749.828442] ? security_file_ioctl+0x83/0xb0 [ 2749.828452] SyS_ioctl+0x7f/0xb0 [ 2749.828462] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2749.833916] lowmem_reserve[]: [ 2749.835341] do_syscall_64+0x1d5/0x640 [ 2749.835362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2749.841989] 0 [ 2749.844761] RIP: 0033:0x45cb29 [ 2749.844767] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2749.844779] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2749.846879] 0 [ 2749.850690] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2749.850695] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2749.850701] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2749.850706] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2749.921903] syz-executor.5: [ 2749.993466] 0 [ 2750.017556] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2750.027537] 0 [ 2750.033562] syz-executor.5 cpuset= [ 2750.033899] 0 [ 2750.035447] / mems_allowed=0-1 [ 2750.045639] CPU: 1 PID: 1348 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2750.045678] Node 0 [ 2750.053425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2750.053429] Call Trace: [ 2750.053449] dump_stack+0x1b2/0x283 [ 2750.053464] warn_alloc.cold+0x96/0x1af [ 2750.053474] ? zone_watermark_ok_safe+0x250/0x250 [ 2750.053494] ? wait_for_completion_io+0x10/0x10 [ 2750.053510] __alloc_pages_nodemask+0x2129/0x2730 [ 2750.053535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2750.053545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2750.053566] ? HARDIRQ_verbose+0x10/0x10 [ 2750.053577] ? do_raw_spin_unlock+0x164/0x250 17:11:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 17:11:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) sendto$inet(r1, &(0x7f0000000240)="3c3bd92aef960ca4f83d07af14f7e72fd86512e2c2411b3d13571ed089d6c3fae55daa3d5e2686e139a843902d784d513a26a1702652e27c64fef3a81fd887f90016965d591a3af8d48c0d9b165439650807639944ac19c456683382783d", 0x5e, 0x4040044, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2750.053591] alloc_pages_current+0xe7/0x1e0 [ 2750.053606] kvm_mmu_create+0xd1/0x1c0 [ 2750.053619] kvm_arch_vcpu_init+0x282/0x890 [ 2750.053628] ? alloc_pages_current+0xef/0x1e0 [ 2750.053641] kvm_vcpu_init+0x26d/0x360 [ 2750.053656] vmx_create_vcpu+0xf5/0x2950 [ 2750.053669] ? __mutex_unlock_slowpath+0x75/0x780 [ 2750.053679] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2750.053692] ? alloc_loaded_vmcs+0x240/0x240 [ 2750.053708] kvm_vm_ioctl+0x4ae/0x1430 [ 2750.053717] ? __lock_acquire+0x655/0x42a0 17:11:12 executing program 0: socket$kcm(0x10, 0x7, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x3, 0x100, 0x3, 0x80}}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff, r3}) getsockopt$sock_int(r2, 0x1, 0x1e, 0x0, &(0x7f0000000400)) 17:11:12 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000240)={0xd67, 0x1, 0xfff00000}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000300)={0x0, 0x6, 0x7, [], &(0x7f0000000280)=0x9}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af710000080000bbbbbb0180c2000000000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000706010100000000000000000c000001050001002c8687c2a75d7296a6a79f50"], 0x24}, 0x1, 0x0, 0x0, 0x2000c810}, 0x20008011) r3 = getpid() write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000340)={0x1, 0x4}, 0x2) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2750.053726] ? kvm_vcpu_release+0xa0/0xa0 [ 2750.053737] ? trace_hardirqs_on+0x10/0x10 [ 2750.053745] ? check_preemption_disabled+0x35/0x240 [ 2750.053760] ? trace_hardirqs_on+0x10/0x10 [ 2750.053768] ? check_preemption_disabled+0x35/0x240 [ 2750.053779] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2750.053791] ? HARDIRQ_verbose+0x10/0x10 [ 2750.053800] ? kvm_vcpu_release+0xa0/0xa0 [ 2750.053812] do_vfs_ioctl+0x75a/0xfe0 [ 2750.053824] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2750.053833] ? ioctl_preallocate+0x1a0/0x1a0 17:11:12 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r4}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0xff, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x2, @perf_bp={&(0x7f0000000480)}, 0x4b208, 0xff, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x0) r6 = accept4$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x800) getsockopt$sock_int(r6, 0x1, 0x9, 0x0, &(0x7f0000000000)=0xfffffffffffffe8f) [ 2750.053860] ? security_file_ioctl+0x76/0xb0 [ 2750.053868] ? security_file_ioctl+0x83/0xb0 [ 2750.053878] SyS_ioctl+0x7f/0xb0 [ 2750.057172] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2750.065461] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2750.065475] do_syscall_64+0x1d5/0x640 [ 2750.065492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2750.065500] RIP: 0033:0x45cb29 [ 2750.065504] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2750.065515] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2750.065520] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2750.065525] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2750.065530] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2750.065535] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2750.344078] lowmem_reserve[]: 0 0 0 0 0 [ 2750.348322] Node 1 Normal free:2009908kB min:53592kB low:66988kB high:80384kB active_anon:592632kB inactive_anon:64456kB active_file:39772kB inactive_file:176900kB unevictable:0kB writepending:120kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33472kB pagetables:62052kB bounce:0kB free_pcp:808kB local_pcp:652kB free_cma:0kB [ 2750.379927] lowmem_reserve[]: 0 0 0 0 0 [ 2750.384113] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2750.405292] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2750.447313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2750.463736] Node 1 Normal: 299*4kB (UME) 124*8kB (ME) 204*16kB (UME) 12*32kB (UME) 27*64kB (UME) 2*128kB (M) 3*256kB (UME) 2*512kB (UE) 15*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2009484kB [ 2750.486323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2750.496962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2750.512017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2750.523594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2750.537264] 55761 total pagecache pages [ 2750.544872] 0 pages in swap cache [ 2750.548453] Swap cache stats: add 0, delete 0, find 0/0 [ 2750.557773] Free swap = 0kB [ 2750.563968] Total swap = 0kB [ 2750.567124] 1965979 pages RAM [ 2750.586090] 0 pages HighMem/MovableOnly [ 2750.593547] 338456 pages reserved 17:11:13 executing program 4: [ 2750.597179] 0 pages cma reserved 17:11:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$kcm(0x11, 0xb, 0x0) sendmsg(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4, r6}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 17:11:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d0480728f17fc06c0be7004b060965a269aa00a5088d12862e78ab3a549da857f65051573d745291d047d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x5, 0x20, 0x1, 0x1, 0x100000000, 0x400, 0x100000001, 0x9, 0x2, 0x3, 0x3ff, 0x6, 0xeb63, 0x5, 0x0, 0x2400], 0x10000, 0x12c00}) 17:11:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) 17:11:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 17:11:13 executing program 4: 17:11:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:13 executing program 4: 17:11:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) [ 2751.133045] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2751.157603] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2751.170109] CPU: 1 PID: 1393 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2751.177955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2751.187324] Call Trace: [ 2751.189928] dump_stack+0x1b2/0x283 [ 2751.193586] warn_alloc.cold+0x96/0x1af [ 2751.197617] ? zone_watermark_ok_safe+0x250/0x250 [ 2751.202488] ? wait_for_completion_io+0x10/0x10 [ 2751.207189] __alloc_pages_nodemask+0x2129/0x2730 [ 2751.212066] ? retint_kernel+0x2d/0x2d [ 2751.215973] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2751.220831] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2751.225865] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2751.230636] ? check_preemption_disabled+0x35/0x240 [ 2751.235670] ? retint_kernel+0x2d/0x2d [ 2751.239587] alloc_pages_current+0xe7/0x1e0 [ 2751.243925] kvm_mmu_create+0xd1/0x1c0 [ 2751.247828] kvm_arch_vcpu_init+0x282/0x890 [ 2751.252156] ? alloc_pages_current+0xef/0x1e0 [ 2751.256663] kvm_vcpu_init+0x26d/0x360 [ 2751.260562] vmx_create_vcpu+0xf5/0x2950 [ 2751.264639] ? __mutex_unlock_slowpath+0x75/0x780 [ 2751.269489] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2751.274521] ? alloc_loaded_vmcs+0x240/0x240 [ 2751.278955] kvm_vm_ioctl+0x4ae/0x1430 [ 2751.282856] ? __lock_acquire+0x655/0x42a0 [ 2751.287105] ? kvm_vcpu_release+0xa0/0xa0 [ 2751.291270] ? trace_hardirqs_on+0x10/0x10 [ 2751.295513] ? check_preemption_disabled+0x35/0x240 [ 2751.300523] ? trace_hardirqs_on+0x10/0x10 [ 2751.304753] ? check_preemption_disabled+0x35/0x240 [ 2751.309767] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2751.314713] ? HARDIRQ_verbose+0x10/0x10 [ 2751.318768] ? kvm_vcpu_release+0xa0/0xa0 [ 2751.322911] do_vfs_ioctl+0x75a/0xfe0 [ 2751.326731] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2751.332358] ? ioctl_preallocate+0x1a0/0x1a0 [ 2751.336769] ? security_file_ioctl+0x76/0xb0 [ 2751.341169] ? security_file_ioctl+0x83/0xb0 [ 2751.345572] SyS_ioctl+0x7f/0xb0 [ 2751.348928] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2751.352897] do_syscall_64+0x1d5/0x640 [ 2751.356782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2751.361966] RIP: 0033:0x45cb29 [ 2751.365143] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2751.372842] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2751.380099] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2751.387359] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2751.394641] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2751.401901] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2751.411954] warn_alloc_show_mem: 2 callbacks suppressed [ 2751.411959] Mem-Info: [ 2751.420005] active_anon:583234 inactive_anon:25890 isolated_anon:0 [ 2751.420005] active_file:9943 inactive_file:44239 isolated_file:0 [ 2751.420005] unevictable:0 dirty:15 writeback:0 unstable:0 [ 2751.420005] slab_reclaimable:63460 slab_unreclaimable:240535 [ 2751.420005] mapped:67240 shmem:31004 pagetables:26672 bounce:0 [ 2751.420005] free:514346 free_pcp:436 free_cma:0 [ 2751.487864] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2751.542478] Node 1 active_anon:592188kB inactive_anon:64456kB active_file:39772kB inactive_file:176952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60056kB dirty:56kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2751.571733] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2751.599140] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2751.604439] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:368kB local_pcp:168kB free_cma:0kB [ 2751.634211] lowmem_reserve[]: 0 0 0 0 0 [ 2751.638474] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2751.663968] lowmem_reserve[]: 0 0 0 0 0 [ 2751.668066] Node 1 Normal free:2013044kB min:53592kB low:66988kB high:80384kB active_anon:592108kB inactive_anon:64456kB active_file:39772kB inactive_file:176952kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33152kB pagetables:61536kB bounce:0kB free_pcp:1344kB local_pcp:648kB free_cma:0kB [ 2751.698515] lowmem_reserve[]: 0 0 0 0 0 [ 2751.703190] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2751.719459] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2751.733862] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2751.745237] Node 1 Normal: 500*4kB (UME) 226*8kB (UME) 182*16kB (UME) 27*32kB (UME) 27*64kB (UME) 12*128kB (UM) 5*256kB (UME) 2*512kB (UE) 15*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2013024kB [ 2751.762986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2751.771891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2751.780550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:11:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f00000000c0)=""/114, 0x72) r1 = getpid() socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000140)=0x4) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4, r6}) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000180)=0x3, 0x4) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:11:14 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) r5 = dup(r0) getsockopt$sock_int(r5, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:14 executing program 4: 17:11:14 executing program 0: 17:11:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x7f, 0x7, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40204, 0x0, 0x0, 0x4, 0xc, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x3, 0x21, [], 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/33}, &(0x7f0000000380)=0x78) [ 2751.789472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2751.798132] 55768 total pagecache pages [ 2751.802190] 0 pages in swap cache [ 2751.805637] Swap cache stats: add 0, delete 0, find 0/0 [ 2751.811061] Free swap = 0kB [ 2751.814069] Total swap = 0kB [ 2751.817069] 1965979 pages RAM [ 2751.820262] 0 pages HighMem/MovableOnly [ 2751.824227] 338456 pages reserved [ 2751.827659] 0 pages cma reserved 17:11:14 executing program 4: 17:11:14 executing program 0: 17:11:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:14 executing program 4: 17:11:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) 17:11:14 executing program 0: [ 2752.328577] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2752.340724] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2752.349504] CPU: 0 PID: 1486 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2752.357326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2752.366686] Call Trace: [ 2752.369277] dump_stack+0x1b2/0x283 [ 2752.372908] warn_alloc.cold+0x96/0x1af [ 2752.376869] ? zone_watermark_ok_safe+0x250/0x250 [ 2752.381702] ? wait_for_completion_io+0x10/0x10 [ 2752.386357] __alloc_pages_nodemask+0x2129/0x2730 [ 2752.391192] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2752.396020] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2752.400855] ? HARDIRQ_verbose+0x10/0x10 [ 2752.404902] ? do_raw_spin_unlock+0x164/0x250 [ 2752.409382] alloc_pages_current+0xe7/0x1e0 [ 2752.413709] kvm_mmu_create+0xd1/0x1c0 [ 2752.417596] kvm_arch_vcpu_init+0x282/0x890 [ 2752.421907] ? alloc_pages_current+0xef/0x1e0 [ 2752.426390] kvm_vcpu_init+0x26d/0x360 [ 2752.430275] vmx_create_vcpu+0xf5/0x2950 [ 2752.434331] ? __mutex_unlock_slowpath+0x75/0x780 [ 2752.439163] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2752.444176] ? alloc_loaded_vmcs+0x240/0x240 [ 2752.448578] kvm_vm_ioctl+0x4ae/0x1430 [ 2752.452475] ? __lock_acquire+0x655/0x42a0 [ 2752.456717] ? kvm_vcpu_release+0xa0/0xa0 [ 2752.460862] ? trace_hardirqs_on+0x10/0x10 [ 2752.465084] ? check_preemption_disabled+0x35/0x240 [ 2752.470144] ? trace_hardirqs_on+0x10/0x10 [ 2752.474363] ? check_preemption_disabled+0x35/0x240 [ 2752.479362] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2752.484275] ? HARDIRQ_verbose+0x10/0x10 [ 2752.488318] ? kvm_vcpu_release+0xa0/0xa0 [ 2752.492449] do_vfs_ioctl+0x75a/0xfe0 [ 2752.496233] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2752.501839] ? ioctl_preallocate+0x1a0/0x1a0 [ 2752.506252] ? security_file_ioctl+0x76/0xb0 [ 2752.510651] ? security_file_ioctl+0x83/0xb0 [ 2752.515044] SyS_ioctl+0x7f/0xb0 [ 2752.518390] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2752.522346] do_syscall_64+0x1d5/0x640 [ 2752.526217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2752.531387] RIP: 0033:0x45cb29 [ 2752.534558] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2752.542246] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2752.549498] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2752.556767] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2752.564071] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2752.571325] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2752.582387] Mem-Info: [ 2752.584978] active_anon:583177 inactive_anon:25890 isolated_anon:0 [ 2752.584978] active_file:9943 inactive_file:44246 isolated_file:0 [ 2752.584978] unevictable:0 dirty:4 writeback:8 unstable:0 [ 2752.584978] slab_reclaimable:63455 slab_unreclaimable:240759 [ 2752.584978] mapped:67223 shmem:31004 pagetables:26635 bounce:0 [ 2752.584978] free:514157 free_pcp:373 free_cma:0 [ 2752.620281] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:4kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2752.648530] Node 1 active_anon:591960kB inactive_anon:64456kB active_file:39772kB inactive_file:176980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60000kB dirty:24kB writeback:28kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2752.677714] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2752.704641] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2752.710402] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:384kB local_pcp:184kB free_cma:0kB [ 2752.739711] lowmem_reserve[]: 0 0 0 0 0 [ 2752.743743] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2752.769115] lowmem_reserve[]: 0 0 0 0 0 [ 2752.773117] Node 1 Normal free:2013832kB min:53592kB low:66988kB high:80384kB active_anon:591960kB inactive_anon:64456kB active_file:39772kB inactive_file:176980kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33120kB pagetables:61408kB bounce:0kB free_pcp:1212kB local_pcp:716kB free_cma:0kB [ 2752.804443] lowmem_reserve[]: 0 0 0 0 0 [ 2752.808456] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2752.824600] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2752.839675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2752.850498] Node 1 Normal: 592*4kB (UME) 242*8kB (UME) 252*16kB (UME) 33*32kB (UME) 27*64kB (UME) 5*128kB (UM) 5*256kB (UME) 2*512kB (UE) 15*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2013936kB [ 2752.868149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2752.877058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2752.885708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2752.894613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2752.903246] 55781 total pagecache pages [ 2752.907220] 0 pages in swap cache [ 2752.910739] Swap cache stats: add 0, delete 0, find 0/0 [ 2752.916099] Free swap = 0kB [ 2752.919196] Total swap = 0kB [ 2752.922203] 1965979 pages RAM [ 2752.925293] 0 pages HighMem/MovableOnly [ 2752.929338] 338456 pages reserved 17:11:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x101}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:15 executing program 4: 17:11:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x588}, 0x0, 0x40000000010, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:15 executing program 0: 17:11:15 executing program 3: r0 = socket$kcm(0x10, 0xf, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) ftruncate(r0, 0x10000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0x1, 0x1, r1}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x5, 0x3f5a16da, 0xb29, 0x45}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={0x9, 0x5, 0x81, 0xffff, 'syz1\x00', 0x4}) 17:11:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2752.932792] 0 pages cma reserved 17:11:15 executing program 4: 17:11:15 executing program 0: 17:11:15 executing program 4: 17:11:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2753.050670] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 17:11:15 executing program 0: [ 2753.119120] syz-executor.2 cpuset=/ mems_allowed=0-1 17:11:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2753.144135] CPU: 1 PID: 1524 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2753.151970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.161332] Call Trace: [ 2753.163931] dump_stack+0x1b2/0x283 [ 2753.167565] warn_alloc.cold+0x96/0x1af [ 2753.171539] ? zone_watermark_ok_safe+0x250/0x250 [ 2753.176488] ? wait_for_completion_io+0x10/0x10 [ 2753.181180] __alloc_pages_nodemask+0x2129/0x2730 [ 2753.186068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.190945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.195815] ? HARDIRQ_verbose+0x10/0x10 [ 2753.199890] ? do_raw_spin_unlock+0x164/0x250 [ 2753.204402] alloc_pages_current+0xe7/0x1e0 [ 2753.208741] kvm_mmu_create+0xd1/0x1c0 [ 2753.212645] kvm_arch_vcpu_init+0x282/0x890 [ 2753.216978] ? alloc_pages_current+0xef/0x1e0 [ 2753.221488] kvm_vcpu_init+0x26d/0x360 [ 2753.225393] vmx_create_vcpu+0xf5/0x2950 [ 2753.229470] ? __mutex_unlock_slowpath+0x75/0x780 [ 2753.234322] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2753.236193] syz-executor.5: [ 2753.239343] ? alloc_loaded_vmcs+0x240/0x240 [ 2753.239359] kvm_vm_ioctl+0x4ae/0x1430 [ 2753.239372] ? __lock_acquire+0x655/0x42a0 [ 2753.239381] ? kvm_vcpu_release+0xa0/0xa0 [ 2753.239391] ? trace_hardirqs_on+0x10/0x10 [ 2753.239400] ? check_preemption_disabled+0x35/0x240 [ 2753.239414] ? trace_hardirqs_on+0x10/0x10 [ 2753.239421] ? check_preemption_disabled+0x35/0x240 [ 2753.239431] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2753.239443] ? HARDIRQ_verbose+0x10/0x10 [ 2753.239456] ? kvm_vcpu_release+0xa0/0xa0 [ 2753.244516] page allocation failure: order:0 [ 2753.246864] do_vfs_ioctl+0x75a/0xfe0 [ 2753.246880] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2753.246890] ? ioctl_preallocate+0x1a0/0x1a0 [ 2753.246909] ? security_file_ioctl+0x76/0xb0 [ 2753.271996] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2753.272578] ? security_file_ioctl+0x83/0xb0 [ 2753.303188] (null) [ 2753.304579] SyS_ioctl+0x7f/0xb0 [ 2753.304588] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2753.304601] do_syscall_64+0x1d5/0x640 [ 2753.315780] syz-executor.5 cpuset= [ 2753.319267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2753.319276] RIP: 0033:0x45cb29 [ 2753.319281] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2753.319291] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2753.319296] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2753.319301] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2753.319307] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2753.319312] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2753.405269] / mems_allowed=0-1 [ 2753.409254] CPU: 0 PID: 1533 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2753.417066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.426423] Call Trace: [ 2753.429021] dump_stack+0x1b2/0x283 [ 2753.432660] warn_alloc.cold+0x96/0x1af [ 2753.436639] ? zone_watermark_ok_safe+0x250/0x250 [ 2753.441505] ? wait_for_completion_io+0x10/0x10 [ 2753.446204] __alloc_pages_nodemask+0x2129/0x2730 [ 2753.451074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.455927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.460793] ? HARDIRQ_verbose+0x10/0x10 [ 2753.464867] ? do_raw_spin_unlock+0x164/0x250 [ 2753.469374] alloc_pages_current+0xe7/0x1e0 [ 2753.473709] kvm_mmu_create+0xd1/0x1c0 [ 2753.477608] kvm_arch_vcpu_init+0x282/0x890 [ 2753.481935] ? alloc_pages_current+0xef/0x1e0 [ 2753.486433] kvm_vcpu_init+0x26d/0x360 [ 2753.490318] vmx_create_vcpu+0xf5/0x2950 [ 2753.494370] ? __mutex_unlock_slowpath+0x75/0x780 [ 2753.499201] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2753.504215] ? alloc_loaded_vmcs+0x240/0x240 [ 2753.508619] kvm_vm_ioctl+0x4ae/0x1430 [ 2753.512498] ? __lock_acquire+0x655/0x42a0 [ 2753.516715] ? kvm_vcpu_release+0xa0/0xa0 [ 2753.520854] ? trace_hardirqs_on+0x10/0x10 [ 2753.525083] ? check_preemption_disabled+0x35/0x240 [ 2753.530095] ? trace_hardirqs_on+0x10/0x10 [ 2753.534312] ? check_preemption_disabled+0x35/0x240 [ 2753.539314] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2753.544230] ? HARDIRQ_verbose+0x10/0x10 [ 2753.548284] ? kvm_vcpu_release+0xa0/0xa0 [ 2753.552422] do_vfs_ioctl+0x75a/0xfe0 [ 2753.556212] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2753.561824] ? ioctl_preallocate+0x1a0/0x1a0 [ 2753.566235] ? security_file_ioctl+0x76/0xb0 [ 2753.570638] ? security_file_ioctl+0x83/0xb0 [ 2753.575035] SyS_ioctl+0x7f/0xb0 [ 2753.578384] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2753.582357] do_syscall_64+0x1d5/0x640 [ 2753.586246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2753.591436] RIP: 0033:0x45cb29 [ 2753.594621] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2753.602325] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2753.609587] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2753.616847] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2753.624107] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2753.631366] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2753.648977] warn_alloc_show_mem: 1 callbacks suppressed [ 2753.648981] Mem-Info: [ 2753.656815] active_anon:583208 inactive_anon:25889 isolated_anon:0 [ 2753.656815] active_file:9944 inactive_file:44259 isolated_file:0 [ 2753.656815] unevictable:0 dirty:53 writeback:0 unstable:0 [ 2753.656815] slab_reclaimable:63444 slab_unreclaimable:241134 [ 2753.656815] mapped:67244 shmem:31004 pagetables:26642 bounce:0 [ 2753.656815] free:513676 free_pcp:451 free_cma:0 [ 2753.693948] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2753.721916] Node 1 active_anon:592084kB inactive_anon:64452kB active_file:39772kB inactive_file:177036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60084kB dirty:208kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2753.750318] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.776991] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2753.782279] Node 0 DMA32 free:33024kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:400kB local_pcp:216kB free_cma:0kB [ 2753.812096] lowmem_reserve[]: 0 0 0 0 0 [ 2753.816096] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2753.843485] lowmem_reserve[]: 0 0 0 0 0 [ 2753.847506] Node 1 Normal free:2011068kB min:53592kB low:66988kB high:80384kB active_anon:592032kB inactive_anon:64456kB active_file:39772kB inactive_file:177044kB unevictable:0kB writepending:236kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33248kB pagetables:61440kB bounce:0kB free_pcp:1384kB local_pcp:716kB free_cma:0kB [ 2753.886005] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2753.887523] lowmem_reserve[]: [ 2753.897776] syz-executor.5 cpuset= [ 2753.901376] 0 0 0 0 0 [ 2753.907431] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2753.911122] / [ 2753.923680] Node 0 DMA32: 1444*4kB (UMEH) 2284*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33024kB [ 2753.929745] mems_allowed=0-1 [ 2753.939791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2753.939847] Node 1 Normal: [ 2753.949233] CPU: 1 PID: 1555 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2753.953955] 550*4kB [ 2753.956520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.964343] (UME) [ 2753.966593] Call Trace: [ 2753.975970] 252*8kB [ 2753.978072] dump_stack+0x1b2/0x283 [ 2753.980655] (UME) [ 2753.982936] warn_alloc.cold+0x96/0x1af [ 2753.986530] 150*16kB [ 2753.988662] ? zone_watermark_ok_safe+0x250/0x250 [ 2753.988681] ? wait_for_completion_io+0x10/0x10 [ 2753.988697] __alloc_pages_nodemask+0x2129/0x2730 [ 2753.988723] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.992655] (UME) [ 2753.995050] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2753.999898] 31*32kB [ 2754.004522] ? HARDIRQ_verbose+0x10/0x10 [ 2754.009357] (UME) [ 2754.014159] ? do_raw_spin_unlock+0x164/0x250 [ 2754.016276] 28*64kB (UME) [ 2754.021106] alloc_pages_current+0xe7/0x1e0 [ 2754.021121] kvm_mmu_create+0xd1/0x1c0 [ 2754.021134] kvm_arch_vcpu_init+0x282/0x890 [ 2754.021143] ? alloc_pages_current+0xef/0x1e0 [ 2754.021156] kvm_vcpu_init+0x26d/0x360 [ 2754.023452] 2*128kB [ 2754.027520] vmx_create_vcpu+0xf5/0x2950 [ 2754.029689] (M) [ 2754.034123] ? __mutex_unlock_slowpath+0x75/0x780 [ 2754.036939] 3*256kB (UME) [ 2754.041253] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2754.041266] ? alloc_loaded_vmcs+0x240/0x240 [ 2754.041282] kvm_vm_ioctl+0x4ae/0x1430 [ 2754.041294] ? __lock_acquire+0x655/0x42a0 [ 2754.045154] 2*512kB [ 2754.049456] ? kvm_vcpu_release+0xa0/0xa0 [ 2754.049468] ? trace_hardirqs_on+0x10/0x10 [ 2754.049477] ? check_preemption_disabled+0x35/0x240 [ 2754.049491] ? trace_hardirqs_on+0x10/0x10 [ 2754.049499] ? check_preemption_disabled+0x35/0x240 [ 2754.049510] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2754.053979] (UE) [ 2754.057853] ? HARDIRQ_verbose+0x10/0x10 [ 2754.060179] 15*1024kB [ 2754.064198] ? kvm_vcpu_release+0xa0/0xa0 [ 2754.066147] (UME) [ 2754.070970] do_vfs_ioctl+0x75a/0xfe0 [ 2754.070984] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2754.070997] ? ioctl_preallocate+0x1a0/0x1a0 [ 2754.073815] 7*2048kB [ 2754.078823] ? security_file_ioctl+0x76/0xb0 [ 2754.078832] ? security_file_ioctl+0x83/0xb0 [ 2754.078843] SyS_ioctl+0x7f/0xb0 [ 2754.083224] (UM) [ 2754.087105] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2754.091381] 481*4096kB [ 2754.093647] do_syscall_64+0x1d5/0x640 [ 2754.097763] (M) [ 2754.101986] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2754.101995] RIP: 0033:0x45cb29 [ 2754.102000] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2754.102009] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2754.102015] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2754.102022] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2754.107015] = 2011320kB [ 2754.111225] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2754.111230] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 [ 2754.234560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2754.243485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:11:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x82, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:17 executing program 0: 17:11:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r2, 0x0) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r3, 0x0) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r6, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r8, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r11, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="040004000000000008000200", @ANYRES32=r6, @ANYBLOB="93413f93", @ANYRES32=r8, @ANYBLOB='\b@\a\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="10000100000000002000010000000000"], 0x6c, 0x2) getsockopt$sock_int(r0, 0x1, 0x17, 0x0, &(0x7f0000000400)) 17:11:17 executing program 1: 17:11:17 executing program 4: 17:11:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000010000acc8724c464cf49300004c27"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2754.252288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2754.261219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2754.269872] 55795 total pagecache pages [ 2754.273841] 0 pages in swap cache [ 2754.277275] Swap cache stats: add 0, delete 0, find 0/0 [ 2754.282701] Free swap = 0kB [ 2754.285784] Total swap = 0kB [ 2754.288862] 1965979 pages RAM [ 2754.291953] 0 pages HighMem/MovableOnly [ 2754.295903] 338456 pages reserved [ 2754.299432] 0 pages cma reserved 17:11:17 executing program 1: 17:11:17 executing program 0: 17:11:17 executing program 4: 17:11:17 executing program 1: 17:11:17 executing program 0: 17:11:17 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r6, 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r7, @ANYRES32=r8], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) accept$alg(r9, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:17 executing program 1: 17:11:17 executing program 4: 17:11:17 executing program 0: 17:11:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r2, 0xd, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000001c0)={0x1f, 0x37, 0x1, {0x0, 0xffffffff, 0x3f, r2, 0x1, '-'}}, 0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 17:11:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x3, 0xa6, &(0x7f00000000c0)="3ab7bb6b60abae48fced04f593f95123442122be93435ea87a7e076ce52f5a5ba3fe5fccf67779d4d9c527785118c8984543f8fab61ce6e19d3d78acb9808584b1c703493622a9ce7a4e7a71ee36ba13ac4eca21573fc1e31a53a8b101fe2297d6641ab2e8be183a96b3096115611d7477e9840e3709571dca90f6846f8fef37ef9ab596ccce96ec7f9cfd7a36b4c4a688afcd2720458bc5d114ad464d1467d1479931e70920"}) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@random={'os2.', '\x00'}) sendto$inet(r3, &(0x7f0000000300)="0c4dae09629e9de16752c0a2a12f4c62d68335f91d9358adcc0805680ab4549ea1c06518f2adb47e7ecd2243de2c283d4c00b6525e2a2a2cdbfbac9b4d618f0bd75c0a217473e7a7ece6a304030f540269bdad4dbee623e85ed1097f8438558c6cf9ca50aa628099cfcd408a965414ea5b28bff6f544f4419070d1c00c7f7854579d47ccef9f3d760c29bd31342c16e14342df1b3626e36eed853f413eb2403e934ed6e649cfd3eb1e314b63a08bfebd56413a741c2d28cf47683b996fd29889d671ef51fda6436c4dbe7628cab731aaa71f7f8d3604b02c80d077817ab16a941a3290ef14084b3af2d84b025acc5509", 0xf0, 0x10, 0x0, 0x0) sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:17 executing program 1: 17:11:17 executing program 0: 17:11:17 executing program 4: 17:11:17 executing program 0: 17:11:17 executing program 1: 17:11:17 executing program 4: 17:11:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) socket(0x10, 0xa, 0x2b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x2080, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0x7) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRESHEX=r5, @ANYRESDEC], 0x38}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0xe1940d4484c2ee37, &(0x7f0000000000)={@local, @multicast2, r5}, 0xc) 17:11:17 executing program 0: 17:11:17 executing program 1: 17:11:17 executing program 4: [ 2754.990122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 17:11:17 executing program 4: [ 2755.077032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2755.117805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2755.134799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2755.182503] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2755.212538] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2755.218076] CPU: 1 PID: 1604 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2755.225870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2755.235212] Call Trace: [ 2755.237790] dump_stack+0x1b2/0x283 [ 2755.241404] warn_alloc.cold+0x96/0x1af [ 2755.245363] ? zone_watermark_ok_safe+0x250/0x250 [ 2755.250192] ? wait_for_completion_io+0x10/0x10 [ 2755.254858] __alloc_pages_nodemask+0x2129/0x2730 [ 2755.259718] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2755.264560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2755.269402] ? HARDIRQ_verbose+0x10/0x10 [ 2755.273448] alloc_pages_current+0xe7/0x1e0 [ 2755.277755] kvm_mmu_create+0xd1/0x1c0 [ 2755.281628] kvm_arch_vcpu_init+0x282/0x890 [ 2755.285935] ? alloc_pages_current+0xef/0x1e0 [ 2755.290417] kvm_vcpu_init+0x26d/0x360 [ 2755.294292] vmx_create_vcpu+0xf5/0x2950 [ 2755.298349] ? __mutex_unlock_slowpath+0x75/0x780 [ 2755.303176] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2755.308180] ? alloc_loaded_vmcs+0x240/0x240 [ 2755.312575] kvm_vm_ioctl+0x4ae/0x1430 [ 2755.316455] ? __lock_acquire+0x655/0x42a0 [ 2755.320672] ? kvm_vcpu_release+0xa0/0xa0 [ 2755.324806] ? retint_kernel+0x2d/0x2d [ 2755.328683] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2755.333698] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2755.338454] ? check_preemption_disabled+0x35/0x240 [ 2755.343462] ? retint_kernel+0x2d/0x2d [ 2755.347332] ? kvm_vcpu_release+0xa0/0xa0 [ 2755.351476] ? kvm_vm_ioctl+0x2/0x1430 [ 2755.355358] ? kvm_vcpu_release+0xa0/0xa0 [ 2755.359501] do_vfs_ioctl+0x75a/0xfe0 [ 2755.363304] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2755.368934] ? ioctl_preallocate+0x1a0/0x1a0 [ 2755.373342] ? security_file_ioctl+0x76/0xb0 [ 2755.377732] ? security_file_ioctl+0x83/0xb0 [ 2755.382133] SyS_ioctl+0x7f/0xb0 [ 2755.385500] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2755.389469] do_syscall_64+0x1d5/0x640 [ 2755.393344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2755.398525] RIP: 0033:0x45cb29 [ 2755.401703] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2755.409391] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2755.416642] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2755.423895] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2755.431154] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2755.438412] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2755.447753] warn_alloc_show_mem: 1 callbacks suppressed [ 2755.447783] Mem-Info: [ 2755.455889] active_anon:583193 inactive_anon:25890 isolated_anon:0 [ 2755.455889] active_file:9942 inactive_file:44271 isolated_file:0 [ 2755.455889] unevictable:0 dirty:40 writeback:0 unstable:0 [ 2755.455889] slab_reclaimable:63473 slab_unreclaimable:241587 [ 2755.455889] mapped:67250 shmem:31004 pagetables:26643 bounce:0 [ 2755.455889] free:513307 free_pcp:390 free_cma:0 [ 2755.491360] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2755.519402] Node 1 active_anon:592024kB inactive_anon:64456kB active_file:39772kB inactive_file:177088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60112kB dirty:168kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2755.547617] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2755.574962] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2755.580082] Node 0 DMA32 free:33016kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:404kB local_pcp:188kB free_cma:0kB [ 2755.609282] lowmem_reserve[]: 0 0 0 0 0 [ 2755.613284] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2755.638784] lowmem_reserve[]: 0 0 0 0 0 [ 2755.642775] Node 1 Normal free:2011152kB min:53592kB low:66988kB high:80384kB active_anon:592040kB inactive_anon:64456kB active_file:39772kB inactive_file:177092kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33120kB pagetables:61440kB bounce:0kB free_pcp:1148kB local_pcp:436kB free_cma:0kB [ 2755.673691] lowmem_reserve[]: 0 0 0 0 0 [ 2755.677699] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2755.693849] Node 0 DMA32: 1444*4kB (UMEH) 2283*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33016kB [ 2755.709052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2755.719865] Node 1 Normal: 648*4kB (UME) 215*8kB (UME) 123*16kB (UME) 31*32kB (UME) 27*64kB (UME) 8*128kB (U) 2*256kB (ME) 1*512kB (E) 15*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2010920kB [ 2755.737249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2755.746170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2755.754845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2755.763751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2755.772414] 55804 total pagecache pages [ 2755.776382] 0 pages in swap cache [ 2755.779892] Swap cache stats: add 0, delete 0, find 0/0 17:11:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x1, 0xc5, 0x8000}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:18 executing program 0: 17:11:18 executing program 1: 17:11:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4, r6}) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:11:18 executing program 4: 17:11:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0xa00000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0xbdd}}], [{@smackfsdef={'smackfsdef'}}]}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000000)) [ 2755.785245] Free swap = 0kB [ 2755.788242] Total swap = 0kB [ 2755.791337] 1965979 pages RAM [ 2755.794430] 0 pages HighMem/MovableOnly [ 2755.798462] 338456 pages reserved [ 2755.801923] 0 pages cma reserved 17:11:18 executing program 0: 17:11:18 executing program 4: 17:11:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x0, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) flock(r2, 0x8) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x2, 0x8}) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:18 executing program 4: 17:11:18 executing program 1: 17:11:18 executing program 0: [ 2755.969407] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2756.034246] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2756.048030] CPU: 0 PID: 1653 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2756.055861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.065222] Call Trace: [ 2756.067824] dump_stack+0x1b2/0x283 [ 2756.071461] warn_alloc.cold+0x96/0x1af [ 2756.075450] ? zone_watermark_ok_safe+0x250/0x250 [ 2756.080314] ? wait_for_completion_io+0x10/0x10 [ 2756.085001] __alloc_pages_nodemask+0x2129/0x2730 [ 2756.089871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2756.094728] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2756.099594] ? HARDIRQ_verbose+0x10/0x10 [ 2756.103661] ? kvm_vm_ioctl+0x43d/0x1430 [ 2756.107733] alloc_pages_current+0xe7/0x1e0 [ 2756.112067] kvm_mmu_create+0xd1/0x1c0 [ 2756.115962] kvm_arch_vcpu_init+0x282/0x890 [ 2756.120287] ? alloc_pages_current+0xef/0x1e0 [ 2756.124785] kvm_vcpu_init+0x26d/0x360 [ 2756.128665] vmx_create_vcpu+0xf5/0x2950 [ 2756.132721] ? __mutex_unlock_slowpath+0x75/0x780 [ 2756.137545] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2756.142551] ? alloc_loaded_vmcs+0x240/0x240 [ 2756.146946] kvm_vm_ioctl+0x4ae/0x1430 [ 2756.150823] ? __lock_acquire+0x655/0x42a0 [ 2756.155050] ? kvm_vcpu_release+0xa0/0xa0 [ 2756.159181] ? trace_hardirqs_on+0x10/0x10 [ 2756.163411] ? check_preemption_disabled+0x35/0x240 [ 2756.168571] ? trace_hardirqs_on+0x10/0x10 [ 2756.172822] ? check_preemption_disabled+0x35/0x240 [ 2756.177850] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2756.182783] ? HARDIRQ_verbose+0x10/0x10 [ 2756.186846] ? kvm_vcpu_release+0xa0/0xa0 [ 2756.191003] do_vfs_ioctl+0x75a/0xfe0 [ 2756.194808] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2756.200439] ? ioctl_preallocate+0x1a0/0x1a0 [ 2756.204859] ? security_file_ioctl+0x76/0xb0 [ 2756.209271] ? security_file_ioctl+0x83/0xb0 [ 2756.213680] SyS_ioctl+0x7f/0xb0 [ 2756.217045] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2756.221061] do_syscall_64+0x1d5/0x640 [ 2756.224966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2756.230159] RIP: 0033:0x45cb29 [ 2756.233348] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2756.237122] syz-executor.5: [ 2756.241052] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2756.241058] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 2756.241064] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2756.241070] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2756.241076] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2756.307114] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2756.317136] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2756.323987] CPU: 1 PID: 1659 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2756.331803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.341162] Call Trace: [ 2756.343753] dump_stack+0x1b2/0x283 [ 2756.347378] warn_alloc.cold+0x96/0x1af [ 2756.351352] ? zone_watermark_ok_safe+0x250/0x250 [ 2756.356209] ? wait_for_completion_io+0x10/0x10 [ 2756.360893] __alloc_pages_nodemask+0x2129/0x2730 [ 2756.365767] ? retint_kernel+0x2d/0x2d [ 2756.369662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2756.374503] ? retint_kernel+0x2d/0x2d [ 2756.378398] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2756.383243] ? retint_kernel+0x2d/0x2d [ 2756.387137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2756.391900] ? retint_kernel+0x2d/0x2d [ 2756.395800] alloc_pages_current+0xe7/0x1e0 [ 2756.400133] kvm_mmu_create+0xd1/0x1c0 [ 2756.404027] kvm_arch_vcpu_init+0x282/0x890 [ 2756.408352] ? alloc_pages_current+0xef/0x1e0 [ 2756.412841] kvm_vcpu_init+0x26d/0x360 [ 2756.416713] vmx_create_vcpu+0xf5/0x2950 [ 2756.420782] ? alloc_loaded_vmcs+0x240/0x240 [ 2756.425176] ? check_tsc_unstable+0x6/0x10 [ 2756.429407] kvm_vm_ioctl+0x4ae/0x1430 [ 2756.433288] ? __lock_acquire+0x655/0x42a0 [ 2756.437519] ? kvm_vcpu_release+0xa0/0xa0 [ 2756.441652] ? retint_kernel+0x2d/0x2d [ 2756.445526] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2756.450531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2756.455288] ? check_preemption_disabled+0x35/0x240 [ 2756.460303] ? retint_kernel+0x2d/0x2d [ 2756.464183] ? do_vfs_ioctl+0x6fb/0xfe0 [ 2756.468145] ? kvm_vcpu_release+0xa0/0xa0 [ 2756.472282] do_vfs_ioctl+0x75a/0xfe0 [ 2756.476069] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2756.481675] ? ioctl_preallocate+0x1a0/0x1a0 [ 2756.486084] ? security_file_ioctl+0x76/0xb0 [ 2756.490488] ? security_file_ioctl+0x83/0xb0 [ 2756.494888] SyS_ioctl+0x7f/0xb0 [ 2756.498235] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2756.502193] do_syscall_64+0x1d5/0x640 [ 2756.506069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2756.511246] RIP: 0033:0x45cb29 [ 2756.514422] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2756.522118] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2756.529386] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2756.536655] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2756.543916] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2756.551174] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2756.560256] warn_alloc_show_mem: 1 callbacks suppressed [ 2756.560293] Mem-Info: [ 2756.568446] active_anon:583201 inactive_anon:25890 isolated_anon:0 [ 2756.568446] active_file:9944 inactive_file:44275 isolated_file:0 [ 2756.568446] unevictable:0 dirty:31 writeback:0 unstable:0 [ 2756.568446] slab_reclaimable:63484 slab_unreclaimable:241542 [ 2756.568446] mapped:67262 shmem:31004 pagetables:26647 bounce:0 [ 2756.568446] free:513232 free_pcp:381 free_cma:0 [ 2756.602858] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2756.631187] Node 1 active_anon:592056kB inactive_anon:64456kB active_file:39772kB inactive_file:177116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60168kB dirty:136kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2756.659868] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2756.687670] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2756.694469] Node 0 DMA32 free:33016kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:408kB local_pcp:188kB free_cma:0kB [ 2756.724510] lowmem_reserve[]: 0 0 0 0 0 [ 2756.729150] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2756.755242] lowmem_reserve[]: 0 0 0 0 0 [ 2756.760004] Node 1 Normal free:2010188kB min:53592kB low:66988kB high:80384kB active_anon:591948kB inactive_anon:64456kB active_file:39772kB inactive_file:177120kB unevictable:0kB writepending:160kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33248kB pagetables:61348kB bounce:0kB free_pcp:1084kB local_pcp:452kB free_cma:0kB [ 2756.792000] lowmem_reserve[]: 0 0 0 0 0 [ 2756.796015] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2756.813380] Node 0 DMA32: 1444*4kB (UMEH) 2283*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33016kB [ 2756.828917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2756.839720] Node 1 Normal: 570*4kB (UME) 302*8kB (UME) 76*16kB (UME) 35*32kB (UME) 27*64kB (UME) 12*128kB (UM) 4*256kB (UME) 1*512kB (E) 15*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2011704kB [ 2756.858179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2756.867647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2756.876889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2756.886294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2756.895481] 55813 total pagecache pages [ 2756.900063] 0 pages in swap cache [ 2756.903523] Swap cache stats: add 0, delete 0, find 0/0 17:11:19 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000640)=""/228) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x844d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) ioctl$SIOCNRDECOBS(r3, 0x89e2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20c000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:11:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000400)) 17:11:19 executing program 0: 17:11:19 executing program 4: [ 2756.911215] Free swap = 0kB [ 2756.914232] Total swap = 0kB [ 2756.917243] 1965979 pages RAM [ 2756.921537] 0 pages HighMem/MovableOnly [ 2756.925512] 338456 pages reserved [ 2756.930047] 0 pages cma reserved 17:11:19 executing program 1: 17:11:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:19 executing program 0: 17:11:19 executing program 1: 17:11:19 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x8, 0xff, r1, 0x0, &(0x7f0000000040)={0x990a71, 0x7, [], @p_u8=&(0x7f0000000000)=0x9}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xef, 0x9b, &(0x7f0000000b40)="0753850171207eddecffc660346e5c80a9dc42d45d162de23515dd9cdfc8cd80093f67219aa10400befe85a6d8e2c4aef70d5252a88a865c6ecaf7859f7ed81bf38078f9ece2a2a6546ccf13e2a10dfe70131e207b8bf6ca0934747de56972a363b87172be961f09ce2cafde332731d2a252307ca231e80aa50a5a70fc8ba4f93edfe50880bd29a98d772fe16814611f701c4556826bcb2fb42797d44aedd076ff5b8cb49ba199586e59f0314b30b4cd6e47d5045bc425f3f74a3168efce0e7770d1827cc18462721fa3cd4ee59dc6701e4389d53e89ddf643fd846bd900"/239, &(0x7f00000001c0)=""/155, 0x6f36, 0x0, 0x2c0, 0xd9, &(0x7f0000000ec0)="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", &(0x7f0000000c40)="95506d31989387d42a3a604396a201496da925bf831a6992c7c1e1f4cbac43f221c4d414551a9cc21c64bfc635b49228e407e6c883bf62cff7cf6be64914b87f96bac7e3f585e867e8fe4c4ce623e4c64a064b6d712cbada11d2b754dd31b2f9781b28c5b874f446bfc8eb3989eb4f0b23c2c8373b736175b243327172ab634ebee6bfcde8dd14ad6e794f5cea043a499adc9c412ed8d6dce179783bf56760b17031f5ca0520131004a6393f6c157c8032c5cce30c564b4db58c4777dc456d7da1cf320744c5b4edbc33b54f3eabf06593581e8d929c87a48f"}, 0x40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x250b80, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000000a80)=[{&(0x7f0000000380)={0x27, 0x0, 0x0, 0x5, 0x22, 0x2, "94e4dc52e80f1a981532011af61b5d311769a7bb92d76a51d880cad20ba3d67b044ae72ee23c2f92d34bee3c87667e5cd26f2b7a93daed753c118d9da7f27f", 0x1e}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000440)="3561e8deac2fae2c4e3e", 0xa}, {&(0x7f0000000480)="f937ca6d90bed418ed55282a4ef7d650cadec00b08ea4cecc2bf76b2c025d7ee8510a47a05482cc446ea3cbfb55cc42e9921fd06fcb81a654cae5d7a7b4deb92e732cad6e1e97d7d836e163fbeac313403a909e63f9f3d93ef91b1b9633022f10e02dbd23f39e9031d5ce8d60ea3d2e5fa748715bf1231c0fa715bba0d50190c9f253efa85fa1167abb4bcd0446d148d28812710a20c58dcb785", 0x9a}, {&(0x7f0000000540)}], 0x3, &(0x7f00000005c0)={0xf8, 0x7, 0x400, "adbc976a94b91a8a3434acbe11a66785aaa57c78ccfc0fef46396bf25ed15179b7b4ad4a2be7d35ec9cff03b9fa5f26c6ac87e31879147ed10e4067d502ead844b33c7fc4e4324a6aaa60d3242f2b566829beeceb793281c2b3a1257bee9f94487aefa4ef9d236385d716d81d1c84c4f266b74a6a983a55a1bb0a7fef1daa55ccce6a9d5c96e20bb911ba4ae836b3c9e6aa379c8811a8d84ef7cac5f18145cb12abba0df9f3f5b3336fffcb4fd350f2a46a68e5219ead984e23375555e5d1c41c289684e32cf1c769edd1f97653daf9fc6494a7b15f54b13c1beb037505a6b70d532"}, 0xf8, 0x800}, {&(0x7f00000006c0)={0x27, 0x0, 0x1, 0x3, 0x8, 0x0, "2615eb427de9a37867558b19fdea46b0cdb999284c08de058f4de29fa7ba1f52e41b09b0e4c35284576b8661d2daf342191b46d57d1528d7b1f978d6b5d36f", 0x25}, 0x60, &(0x7f0000000800)=[{&(0x7f0000000740)="c1a64874f4cf5c9df920e6203be3af02a4632f3fb4cb4f2a85755344ba641a99a1ff541cb689d78ce9d17819af20eef69d1d3a02684203bf65c04991e59f97f1ba443417f13da89f0561a62d4a3cb13ebad72eb30d937c984c5eb3b82cb05b614ef38b4d00eeeb51ae789e05ac98fa95f49b2d4ce22de63c8fb07af61606b25e927c5c94d6d09dcc4602967b42fa713b39fe22e3429e3aac14a871f29a78dca3c1204d371c374187bdaefcfe2aa721849a846bc6bc1a9c8614c4", 0xba}], 0x1, &(0x7f0000000840)={0x18, 0x107, 0x200, "02"}, 0x18, 0x50}, {&(0x7f0000000880)={0x27, 0x0, 0x1, 0xb8aaae157d71755a, 0x9, 0x1, "2eeaa247c55613a24a731440c172af035ae9325be9e7bc779f1d3aabbd54ab3b78d24cb0f99f75d915c51cf510821d1af5033581b96b80fc74b05d26a28334", 0x2d}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000900)}], 0x1, &(0x7f0000000980)={0xc8, 0x0, 0x0, "76cbbbb3036d388f45a524fc37ea7e73d8976ebcf5ce4a7576c49579c028f7944276e64531eaf08a21c8e21fbcd79d265960f858fc4360c848a293e575d2a9af138f12581f9bb2a822570d16e7993341741694c71d23ff31771d9b52127f946c5ada8cb3e8cc25d177d858be565c6163ddcfd9d698d5820cdb97d9f8e287077fa404d44794e9b335c5a230fdc5b607c2e4e77c188566773498617d77a76fc32626b687225d230c14477ecde62e5ce41ce351d8bc"}, 0xc8, 0x41}], 0x3, 0x10) getsockopt$sock_int(r3, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:19 executing program 4: 17:11:19 executing program 0: 17:11:19 executing program 4: [ 2757.082253] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2757.150082] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2757.164181] CPU: 1 PID: 1701 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2757.172010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.181373] Call Trace: [ 2757.183973] dump_stack+0x1b2/0x283 [ 2757.187616] warn_alloc.cold+0x96/0x1af [ 2757.191601] ? zone_watermark_ok_safe+0x250/0x250 [ 2757.196466] ? wait_for_completion_io+0x10/0x10 [ 2757.201152] __alloc_pages_nodemask+0x2129/0x2730 [ 2757.206026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.210876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.215735] ? HARDIRQ_verbose+0x10/0x10 [ 2757.219810] alloc_pages_current+0xe7/0x1e0 [ 2757.224146] kvm_mmu_create+0xd1/0x1c0 [ 2757.228043] kvm_arch_vcpu_init+0x282/0x890 [ 2757.232377] ? alloc_pages_current+0xef/0x1e0 [ 2757.236882] kvm_vcpu_init+0x26d/0x360 [ 2757.240781] vmx_create_vcpu+0xf5/0x2950 [ 2757.244854] ? __mutex_unlock_slowpath+0x75/0x780 [ 2757.249695] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2757.254722] ? alloc_loaded_vmcs+0x240/0x240 [ 2757.259145] kvm_vm_ioctl+0x4ae/0x1430 [ 2757.263049] ? __lock_acquire+0x655/0x42a0 [ 2757.267287] ? kvm_vcpu_release+0xa0/0xa0 [ 2757.271442] ? trace_hardirqs_on+0x10/0x10 [ 2757.275681] ? check_preemption_disabled+0x35/0x240 [ 2757.280705] ? trace_hardirqs_on+0x10/0x10 [ 2757.284944] ? check_preemption_disabled+0x35/0x240 [ 2757.289725] syz-executor.5: [ 2757.289964] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2757.289979] ? HARDIRQ_verbose+0x10/0x10 [ 2757.289992] ? kvm_vcpu_release+0xa0/0xa0 [ 2757.290004] do_vfs_ioctl+0x75a/0xfe0 [ 2757.293604] page allocation failure: order:0 [ 2757.297928] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2757.297941] ? ioctl_preallocate+0x1a0/0x1a0 [ 2757.297964] ? security_file_ioctl+0x76/0xb0 [ 2757.297974] ? security_file_ioctl+0x83/0xb0 [ 2757.297986] SyS_ioctl+0x7f/0xb0 [ 2757.297993] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2757.298005] do_syscall_64+0x1d5/0x640 [ 2757.312783] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2757.314380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2757.314389] RIP: 0033:0x45cb29 [ 2757.314395] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2757.314406] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2757.314412] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2757.314419] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2757.314426] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2757.314432] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2757.412730] (null) [ 2757.415216] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2757.421089] CPU: 0 PID: 1694 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2757.428893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.438250] Call Trace: [ 2757.440836] dump_stack+0x1b2/0x283 [ 2757.444450] warn_alloc.cold+0x96/0x1af [ 2757.448422] ? zone_watermark_ok_safe+0x250/0x250 [ 2757.453261] ? wait_for_completion_io+0x10/0x10 [ 2757.457945] __alloc_pages_nodemask+0x2129/0x2730 [ 2757.462807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.467642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2757.472480] ? HARDIRQ_verbose+0x10/0x10 [ 2757.476523] ? do_raw_spin_unlock+0x164/0x250 [ 2757.481035] alloc_pages_current+0xe7/0x1e0 [ 2757.485343] kvm_mmu_create+0xd1/0x1c0 [ 2757.489230] kvm_arch_vcpu_init+0x282/0x890 [ 2757.493545] ? alloc_pages_current+0xef/0x1e0 [ 2757.498026] kvm_vcpu_init+0x26d/0x360 [ 2757.501898] vmx_create_vcpu+0xf5/0x2950 [ 2757.505944] ? __mutex_unlock_slowpath+0x75/0x780 [ 2757.510768] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2757.515769] ? alloc_loaded_vmcs+0x240/0x240 [ 2757.520173] kvm_vm_ioctl+0x4ae/0x1430 [ 2757.524052] ? __lock_acquire+0x655/0x42a0 [ 2757.528277] ? kvm_vcpu_release+0xa0/0xa0 [ 2757.532415] ? trace_hardirqs_on+0x10/0x10 [ 2757.536630] ? check_preemption_disabled+0x35/0x240 [ 2757.541639] ? trace_hardirqs_on+0x10/0x10 [ 2757.545857] ? check_preemption_disabled+0x35/0x240 [ 2757.550855] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2757.555767] ? HARDIRQ_verbose+0x10/0x10 [ 2757.559816] ? kvm_vcpu_release+0xa0/0xa0 [ 2757.564065] do_vfs_ioctl+0x75a/0xfe0 [ 2757.567848] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2757.573464] ? ioctl_preallocate+0x1a0/0x1a0 [ 2757.577857] ? security_file_ioctl+0x76/0xb0 [ 2757.582295] ? security_file_ioctl+0x83/0xb0 [ 2757.586695] SyS_ioctl+0x7f/0xb0 [ 2757.590047] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2757.594014] do_syscall_64+0x1d5/0x640 [ 2757.597890] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2757.603062] RIP: 0033:0x45cb29 [ 2757.606233] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2757.613929] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2757.621190] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 2757.628456] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2757.635720] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2757.642976] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2757.650849] warn_alloc_show_mem: 1 callbacks suppressed [ 2757.650852] Mem-Info: [ 2757.663693] active_anon:583203 inactive_anon:25890 isolated_anon:0 [ 2757.663693] active_file:9944 inactive_file:44288 isolated_file:0 [ 2757.663693] unevictable:0 dirty:53 writeback:26 unstable:0 [ 2757.663693] slab_reclaimable:63507 slab_unreclaimable:241054 [ 2757.663693] mapped:67294 shmem:31004 pagetables:26648 bounce:0 [ 2757.663693] free:513682 free_pcp:466 free_cma:0 [ 2757.698527] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:8kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2757.726549] Node 1 active_anon:592064kB inactive_anon:64456kB active_file:39772kB inactive_file:177164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60284kB dirty:220kB writeback:96kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2757.754813] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2757.782217] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2757.787458] Node 0 DMA32 free:33008kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:408kB local_pcp:220kB free_cma:0kB [ 2757.817685] lowmem_reserve[]: 0 0 0 0 0 [ 2757.822602] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2757.849050] lowmem_reserve[]: 0 0 0 0 0 [ 2757.853066] Node 1 Normal free:2012480kB min:53592kB low:66988kB high:80384kB active_anon:592024kB inactive_anon:64456kB active_file:39772kB inactive_file:177176kB unevictable:0kB writepending:164kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33184kB pagetables:61440kB bounce:0kB free_pcp:1348kB local_pcp:728kB free_cma:0kB [ 2757.884264] lowmem_reserve[]: 0 0 0 0 0 [ 2757.888980] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2757.905784] Node 0 DMA32: 1444*4kB (UMEH) 2282*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33008kB [ 2757.928258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2757.936256] syz-executor.5: [ 2757.947505] Node 1 [ 2757.948543] page allocation failure: order:0 [ 2757.952019] Normal: [ 2757.953806] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2757.957267] 467*4kB (UME) 466*8kB (UME) 151*16kB (UME) 36*32kB (UME) 28*64kB (UME) 6*128kB [ 2757.964496] (null) [ 2757.967580] (UM) [ 2757.975406] syz-executor.5 cpuset= [ 2757.977087] 3*256kB (UE) 1*512kB (E) 15*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2012876kB [ 2757.983481] / [ 2757.992872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2757.995095] mems_allowed=0-1 [ 2758.004785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.011599] CPU: 1 PID: 1703 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2758.016344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.023015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.023020] Call Trace: [ 2758.023040] dump_stack+0x1b2/0x283 [ 2758.023055] warn_alloc.cold+0x96/0x1af [ 2758.023066] ? zone_watermark_ok_safe+0x250/0x250 [ 2758.023088] ? wait_for_completion_io+0x10/0x10 [ 2758.034907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.041268] __alloc_pages_nodemask+0x2129/0x2730 [ 2758.041294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2758.041304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2758.041324] ? HARDIRQ_verbose+0x10/0x10 [ 2758.047394] 55823 total pagecache pages [ 2758.047521] ? do_raw_spin_unlock+0x164/0x250 [ 2758.052299] 0 pages in swap cache [ 2758.056307] alloc_pages_current+0xe7/0x1e0 [ 2758.061858] Swap cache stats: add 0, delete 0, find 0/0 [ 2758.069525] kvm_mmu_create+0xd1/0x1c0 [ 2758.069538] kvm_arch_vcpu_init+0x282/0x890 [ 2758.069548] ? alloc_pages_current+0xef/0x1e0 [ 2758.069561] kvm_vcpu_init+0x26d/0x360 [ 2758.069574] vmx_create_vcpu+0xf5/0x2950 [ 2758.076769] Free swap = 0kB [ 2758.079246] ? __mutex_unlock_slowpath+0x75/0x780 [ 2758.079255] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2758.079269] ? alloc_loaded_vmcs+0x240/0x240 [ 2758.079284] kvm_vm_ioctl+0x4ae/0x1430 [ 2758.079296] ? __lock_acquire+0x655/0x42a0 [ 2758.084117] Total swap = 0kB [ 2758.088160] ? kvm_vcpu_release+0xa0/0xa0 [ 2758.088172] ? trace_hardirqs_on+0x10/0x10 [ 2758.088181] ? check_preemption_disabled+0x35/0x240 [ 2758.088196] ? trace_hardirqs_on+0x10/0x10 [ 2758.096365] 1965979 pages RAM [ 2758.096622] ? check_preemption_disabled+0x35/0x240 [ 2758.100915] 0 pages HighMem/MovableOnly [ 2758.104365] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2758.110582] 338456 pages reserved [ 2758.113579] ? HARDIRQ_verbose+0x10/0x10 [ 2758.117869] 0 pages cma reserved [ 2758.122354] ? kvm_vcpu_release+0xa0/0xa0 [ 2758.122365] do_vfs_ioctl+0x75a/0xfe0 [ 2758.122377] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2758.122387] ? ioctl_preallocate+0x1a0/0x1a0 [ 2758.122408] ? security_file_ioctl+0x76/0xb0 [ 2758.226108] ? security_file_ioctl+0x83/0xb0 [ 2758.230497] SyS_ioctl+0x7f/0xb0 [ 2758.233844] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2758.237796] do_syscall_64+0x1d5/0x640 [ 2758.241664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2758.246901] RIP: 0033:0x45cb29 17:11:21 executing program 4: 17:11:21 executing program 1: 17:11:21 executing program 0: 17:11:21 executing program 3: socket$kcm(0x10, 0x2, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000400)) 17:11:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbb0180c2000001000000004c27aaaaaba1aaaabb8d000000000000000000"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) close(r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2758.250068] RSP: 002b:00007f2d8ae5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2758.257753] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2758.265000] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2758.272249] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.279496] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2758.286745] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae5e6d4 17:11:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x20000000, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff, r2}) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000640)={'hsr0\x00', 0x9, 0x401}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES64=r4, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r3, r6}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000844) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0xfffffffffffffffc) 17:11:21 executing program 4: 17:11:21 executing program 1: 17:11:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2406, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x10000, {{0xa, 0x4e20, 0xfffffff8, @private2, 0x208}}, 0x1, 0x1, [{{0xa, 0x4e21, 0x5, @private0, 0x8}}]}, 0x110) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:21 executing program 0: 17:11:21 executing program 1: 17:11:21 executing program 4: 17:11:21 executing program 0: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB='quota=on,errors=withdraw']) 17:11:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x3, 0x40, 0x7, 0x19, 0x1, 0x6, [], r4, r5, 0x5, 0x2, 0x4}, 0x40) write$binfmt_aout(r6, &(0x7f0000000440)={{0x107, 0x5, 0x7, 0x18d, 0x1ec, 0x4, 0x135, 0xfb}, "c77ab92418ff5d1a751f2e0da61cba69f1f17339569ab0b1e0146c0dadb3c7e863170e306e56c5de51e15854a9ad95d91f42eabd839ab6793661ab68200c1de9effc3022c0cfff46791bb12582b04ba69d37426461c2adb76d5771e0939cb78ce2736cb74b45f3219c336c80ac00c1db296f88ff5ac11ff1d9990986be5d1ed47a3b4b4380ea3d751296d346a3bb584ee41eb3770965c9a02c66b93883de764b81550fe25d2fd3eae415b0f2784285634f", [[], [], [], [], [], [], []]}, 0x7d1) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:21 executing program 4: semop(0x0, &(0x7f0000000100)=[{0x0, 0x6}, {}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 17:11:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000300)=""/194, &(0x7f0000000000)=0xc2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2758.692389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2758.804450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2758.833735] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2758.846768] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2758.858685] CPU: 1 PID: 1774 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2758.866488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2758.875843] Call Trace: [ 2758.878438] dump_stack+0x1b2/0x283 [ 2758.882079] warn_alloc.cold+0x96/0x1af [ 2758.886064] ? zone_watermark_ok_safe+0x250/0x250 [ 2758.890923] ? wait_for_completion_io+0x10/0x10 [ 2758.895604] __alloc_pages_nodemask+0x2129/0x2730 [ 2758.900477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2758.905322] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2758.910185] alloc_pages_current+0xe7/0x1e0 [ 2758.914510] kvm_mmu_create+0xd1/0x1c0 [ 2758.918394] kvm_arch_vcpu_init+0x282/0x890 [ 2758.922716] ? alloc_pages_current+0xef/0x1e0 [ 2758.927216] kvm_vcpu_init+0x26d/0x360 [ 2758.931109] vmx_create_vcpu+0xf5/0x2950 [ 2758.935177] ? alloc_loaded_vmcs+0x240/0x240 [ 2758.939591] ? alloc_loaded_vmcs+0x240/0x240 [ 2758.944002] ? kvm_arch_vcpu_create+0x7f/0xb0 [ 2758.948503] kvm_vm_ioctl+0x4ae/0x1430 [ 2758.952401] ? __lock_acquire+0x655/0x42a0 [ 2758.956641] ? kvm_vcpu_release+0xa0/0xa0 [ 2758.960790] ? retint_kernel+0x2d/0x2d [ 2758.964678] ? retint_kernel+0x2d/0x2d [ 2758.968578] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2758.973599] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2758.978365] ? check_preemption_disabled+0x35/0x240 [ 2758.983382] ? retint_kernel+0x2d/0x2d [ 2758.987275] ? kvm_vcpu_release+0xa0/0xa0 [ 2758.991431] ? kvm_vcpu_release+0xa0/0xa0 [ 2758.995585] do_vfs_ioctl+0x75a/0xfe0 [ 2758.999393] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2759.005024] ? ioctl_preallocate+0x1a0/0x1a0 [ 2759.009455] ? security_file_ioctl+0x76/0xb0 [ 2759.013877] ? security_file_ioctl+0x83/0xb0 [ 2759.018295] SyS_ioctl+0x7f/0xb0 [ 2759.021664] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2759.025655] do_syscall_64+0x1d5/0x640 [ 2759.029554] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2759.034751] RIP: 0033:0x45cb29 [ 2759.037936] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2759.045641] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2759.052892] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2759.060146] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2759.067408] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2759.074659] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2759.098167] warn_alloc_show_mem: 1 callbacks suppressed 17:11:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4105d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:11:21 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 17:11:21 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:11:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/90, 0x5a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/190, 0xbe}], 0x3}}], 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 17:11:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') accept4$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) [ 2759.098190] Mem-Info: [ 2759.106107] active_anon:583238 inactive_anon:25890 isolated_anon:0 [ 2759.106107] active_file:9944 inactive_file:44302 isolated_file:0 [ 2759.106107] unevictable:0 dirty:91 writeback:0 unstable:0 [ 2759.106107] slab_reclaimable:63597 slab_unreclaimable:241234 [ 2759.106107] mapped:67309 shmem:31004 pagetables:26657 bounce:0 [ 2759.106107] free:513348 free_pcp:418 free_cma:0 17:11:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0) 17:11:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/241, 0x1a, 0xf1, 0x1}, 0x20) [ 2759.226970] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 17:11:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x5, &(0x7f0000000380)=[{&(0x7f0000000200)="4c1e3a0e4e338f051cd23a235b54e50e6fdcb1dc30126817f782305d52069e2a123595ac3a089581f4de932dd7445e405a75c3fa97b560d6", 0x38, 0x4}, {&(0x7f0000000280)="3a91a0d039dbdd7bd1eba95313dfebf1a912eb00bfe933dd35b63a8f9762c9200284e370add9f45bbe0e5eadd84dbd9d45cbea80377ffe7e4c390b1e3b76be8e9a46d3763d7d810be4c83c5d60d25eedf3a1ae824b682aa4e52365898077f9cdb129c2f9fc441964f4c9cefb1bf15cc8d5df55045a411b1a9a605f951391a286951e849e0a6a14394979c505f8acdca9d244e5a5583c2def3f0a2d26bc7798b2dcf26b2485b3c73c92a8739b85f48536a361efce292ea1006106", 0xba, 0x800}, {&(0x7f0000000640)="433ff7d3c52c96c633d2d88f70ec57c927d4a1c66312b605376b25225a9415283a37333d57fd44b13ddcd15545d8a74401768f20445507b4f8f2b8975598be3cfcb5fbd92124a11c1d947eb131b27c2f37a5f78f636c9a53ba8c078e1fb3e49a8356a5903ad9a62f4f3ddec284f27cbb19bcfc1f709510c6f81416ffc3795cebaea8e01763", 0x85, 0x80}, {&(0x7f0000000700)="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", 0x1000, 0x7aba}, {&(0x7f0000001700)="d67f8f6a26d4887e6d0f65af18d0435265fb0ee26dab9b1660dc5be4f85276f0a1f2772ae1f2bb47885962e2fe1c6b28b34a2c6d5eb1689a9008f7cb7c7b0733a3d17ba0142527abda0bcd2173bce53774740ad9c9b55f1f3e8bfcbd531fb9d663f769de279d3300735e34043542c964c1dbbea39d25f4dac09eaf29470e5928e569882b4f42eb07fb801d7adf2161cfef294a69c43c3e32b37f05a7ba722058a5e7be8774ab7fb5c3f99660a8c38d0e127c20bbe16bd1dd86a6cd29846cbdcb8a8c0c69e7db11e72d2e1d9111754ff767925b427df3ca4182d5fb4a61a1cbb3e6b584fadac6a7eaa257", 0xea, 0x80000000}], 0x10000, &(0x7f0000000480)={[{@suiddir='suiddir'}, {@norecovery='norecovery'}, {@discard='discard'}, {@norgrplvb='norgrplvb'}, {@locktable={'locktable', 0x3d, '\'9[)\x92/,@-{)@\'\\'}}], [{@hash='hash'}, {@obj_type={'obj_type'}}, {@subj_user={'subj_user', 0x3d, 'syzkaller\x00'}}]}) getsockname$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e) [ 2759.313856] Node 1 active_anon:592752kB inactive_anon:64456kB active_file:39772kB inactive_file:177212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61472kB dirty:368kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:11:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x5, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x33) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r0}, 0x20) [ 2759.364453] Bearer rejected, not supported in standalone mode 17:11:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) [ 2759.435984] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2759.444110] Bearer rejected, not supported in standalone mode [ 2759.488664] lowmem_reserve[]: 0 2559 2559 2559 2559 17:11:22 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2759.521587] Node 0 DMA32 free:33016kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:404kB local_pcp:184kB free_cma:0kB [ 2759.580178] lowmem_reserve[]: 0 0 0 0 0 [ 2759.589232] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2759.631527] lowmem_reserve[]: 0 0 0 0 0 [ 2759.636271] Node 1 Normal free:2012328kB min:53592kB low:66988kB high:80384kB active_anon:592520kB inactive_anon:64460kB active_file:39772kB inactive_file:177216kB unevictable:0kB writepending:380kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33376kB pagetables:61840kB bounce:0kB free_pcp:1040kB local_pcp:656kB free_cma:0kB [ 2759.667622] lowmem_reserve[]: 0 0 0 0 0 [ 2759.673339] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2759.690684] Node 0 DMA32: 1444*4kB (UMEH) 2283*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33016kB [ 2759.706252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2759.718397] Node 1 Normal: 286*4kB (UME) 190*8kB (UME) 86*16kB (UME) 75*32kB (UME) 29*64kB (UME) 23*128kB (UM) 1*256kB (E) 1*512kB (E) 14*1024kB (UME) 7*2048kB (UM) 481*4096kB (M) = 2010856kB [ 2759.736353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2759.747586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2759.756498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2759.766613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2759.775939] 55833 total pagecache pages 17:11:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="08af750000080000bb38f7930fc6546863d64dbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@isdn={0x22, 0x6, 0xa, 0x1, 0xff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="2ed1d61cfbc4dfc58d1ba43372eacd02e88d722d5008889cf4d1e5e030edbece592b3ca3a279c515cb9b65633cbaf42c03e389d1e8a88ad20079dd54fdcd1135ca86b208d412c441c6e549eeabc3e2431f5aeffdb3038cc14be134311b42073927276c8f01536a868ed20c1f5b576f219c0c2ee10d2c05a041a791bcaf0842458052405739824fd9cc8b18894136c0b77aeae6883471763751d034b30cf1aa6df04fc965b3850b9f5d", 0xa9}, {&(0x7f0000000900)="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", 0x1000}], 0x2}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r2, 0x0) setfsgid(r2) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) move_pages(r3, 0x5, &(0x7f0000000200)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000240)=[0x95e, 0x10000, 0xff, 0x3, 0x1, 0x2, 0x1, 0x1ff], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 2759.780555] 0 pages in swap cache [ 2759.784033] Swap cache stats: add 0, delete 0, find 0/0 [ 2759.790569] Free swap = 0kB [ 2759.793604] Total swap = 0kB [ 2759.796630] 1965979 pages RAM [ 2759.800949] 0 pages HighMem/MovableOnly [ 2759.804919] 338456 pages reserved [ 2759.809567] 0 pages cma reserved 17:11:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000040)=0x5c) 17:11:22 executing program 1: ioperm(0x0, 0xff, 0x80000001) bpf$MAP_CREATE(0xe, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 17:11:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) [ 2759.989533] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2760.025255] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2760.042956] CPU: 1 PID: 1851 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2760.050787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2760.060150] Call Trace: [ 2760.062760] dump_stack+0x1b2/0x283 [ 2760.066397] warn_alloc.cold+0x96/0x1af [ 2760.070379] ? zone_watermark_ok_safe+0x250/0x250 [ 2760.075231] ? wait_for_completion_io+0x10/0x10 [ 2760.079894] __alloc_pages_nodemask+0x2129/0x2730 [ 2760.084735] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2760.089561] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2760.094393] ? HARDIRQ_verbose+0x10/0x10 [ 2760.098435] ? check_preemption_disabled+0x35/0x240 [ 2760.103437] alloc_pages_current+0xe7/0x1e0 [ 2760.107744] kvm_mmu_create+0xd1/0x1c0 [ 2760.111614] kvm_arch_vcpu_init+0x282/0x890 [ 2760.115914] ? alloc_pages_current+0xef/0x1e0 [ 2760.120395] kvm_vcpu_init+0x26d/0x360 [ 2760.124264] vmx_create_vcpu+0xf5/0x2950 [ 2760.128308] ? __mutex_unlock_slowpath+0x75/0x780 [ 2760.133129] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2760.138159] ? alloc_loaded_vmcs+0x240/0x240 [ 2760.142552] kvm_vm_ioctl+0x4ae/0x1430 [ 2760.146421] ? __lock_acquire+0x655/0x42a0 [ 2760.150639] ? kvm_vcpu_release+0xa0/0xa0 [ 2760.154771] ? trace_hardirqs_on+0x10/0x10 [ 2760.158984] ? check_preemption_disabled+0x35/0x240 [ 2760.163984] ? trace_hardirqs_on+0x10/0x10 [ 2760.168199] ? check_preemption_disabled+0x35/0x240 [ 2760.173197] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2760.178113] ? HARDIRQ_verbose+0x10/0x10 [ 2760.182154] ? kvm_vcpu_release+0xa0/0xa0 [ 2760.186283] do_vfs_ioctl+0x75a/0xfe0 [ 2760.190066] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2760.195672] ? ioctl_preallocate+0x1a0/0x1a0 [ 2760.200070] ? security_file_ioctl+0x76/0xb0 [ 2760.204459] ? security_file_ioctl+0x83/0xb0 [ 2760.208849] SyS_ioctl+0x7f/0xb0 [ 2760.212195] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2760.216152] do_syscall_64+0x1d5/0x640 [ 2760.220026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2760.225195] RIP: 0033:0x45cb29 [ 2760.228364] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2760.236052] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 17:11:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r3, 0xd, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x3, 0xf7, 0x1, 0x1, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x8, 0x8, 0x98, 0x0, 0x4}, r3, 0x0, r4, 0xa) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x60) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 17:11:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b33, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) [ 2760.243301] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2760.250551] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2760.257801] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2760.265068] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:23 executing program 3: socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000400)) 17:11:23 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:23 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000240)={0x1a, 0x304}, 0x10) sendmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:11:23 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, &(0x7f0000000000)=""/202) [ 2760.691656] Mem-Info: [ 2760.714509] active_anon:583291 inactive_anon:25891 isolated_anon:0 [ 2760.714509] active_file:9943 inactive_file:44307 isolated_file:0 [ 2760.714509] unevictable:0 dirty:39 writeback:0 unstable:0 [ 2760.714509] slab_reclaimable:63578 slab_unreclaimable:240632 [ 2760.714509] mapped:67322 shmem:31004 pagetables:26696 bounce:0 [ 2760.714509] free:513767 free_pcp:466 free_cma:0 [ 2760.755995] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2760.791357] Node 1 active_anon:592320kB inactive_anon:64460kB active_file:39772kB inactive_file:177224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60316kB dirty:244kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2760.825338] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2760.856993] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2760.863256] Node 0 DMA32 free:33016kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:400kB local_pcp:220kB free_cma:0kB [ 2760.898836] lowmem_reserve[]: 0 0 0 0 0 [ 2760.902971] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2760.934668] lowmem_reserve[]: 0 0 0 0 0 [ 2760.939690] Node 1 Normal free:2012176kB min:53592kB low:66988kB high:80384kB active_anon:592272kB inactive_anon:64460kB active_file:39776kB inactive_file:177244kB unevictable:0kB writepending:312kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33408kB pagetables:61648kB bounce:0kB free_pcp:1360kB local_pcp:728kB free_cma:0kB [ 2760.976123] lowmem_reserve[]: 0 0 0 0 0 [ 2760.981267] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2760.998299] Node 0 DMA32: 1444*4kB (UMEH) 2282*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33008kB [ 2761.013776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2761.025473] Node 1 Normal: 468*4kB (UME) 369*8kB (UME) 53*16kB (UME) 105*32kB (UME) 31*64kB (UME) 25*128kB (UM) 2*256kB (ME) 2*512kB (ME) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2012552kB [ 2761.043754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2761.053321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2761.062727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2761.072150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2761.081467] 55842 total pagecache pages [ 2761.085450] 0 pages in swap cache [ 2761.089774] Swap cache stats: add 0, delete 0, find 0/0 [ 2761.095142] Free swap = 0kB [ 2761.099248] Total swap = 0kB [ 2761.102278] 1965979 pages RAM [ 2761.105371] 0 pages HighMem/MovableOnly [ 2761.110763] 338456 pages reserved 17:11:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="08af4104000000000000bb0180c280000100a078ad77c1c460631dbeba00000000008d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000100)=""/173, &(0x7f0000000000)=0xad) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100}, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x588, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40844, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0x1024, 0x0, 0xffffffff, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=r5], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000500)={r5, r7}) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000280)={'caif0\x00', 0x8}) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:23 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, &(0x7f0000000000)=""/202) 17:11:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r4, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x61900, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x113, 0x0, &(0x7f00000006c0)="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"}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x5, 0x5, 0x8, 0xffffffffffffffc0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x2e, &(0x7f0000000140)=""/46, 0x41000, 0x2, [], r2, 0x1b, r3, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xf, 0x1, 0x40}, 0x10, r5, r6}, 0x78) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) [ 2761.114209] 0 pages cma reserved 17:11:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x1, 0x2000000003, 0xffffffff, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x7, 0x12b0c0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000200)={r7, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e24, 0x9, @mcast2, 0x7fffffff}}, 0xffff, 0x8, 0xcd41, 0x8, 0xc8, 0x2, 0x4}, 0x9c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, &(0x7f0000000000)=""/202) 17:11:23 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:24 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:24 executing program 3: r0 = socket$kcm(0x10, 0x5, 0x10) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000400)) 17:11:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, &(0x7f0000000000)=""/202) 17:11:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x44082, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x7, 0x0, [], {0x0, @bt={0x9, 0x81, 0x1, 0x1, 0x4, 0xffffff81, 0x400, 0xd28b, 0x4, 0x0, 0xfffffff9, 0x7, 0x6, 0x1f, 0x10, 0x2, {0xfffffffa, 0xfffffffe}, 0x20}}}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x60000, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000040)) 17:11:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:24 executing program 1: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=""/202) 17:11:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xc0000000}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) [ 2761.635545] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2761.655502] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2761.661107] CPU: 0 PID: 1978 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2761.668914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.678270] Call Trace: [ 2761.680850] dump_stack+0x1b2/0x283 [ 2761.684463] warn_alloc.cold+0x96/0x1af [ 2761.688441] ? zone_watermark_ok_safe+0x250/0x250 [ 2761.693272] ? wait_for_completion_io+0x10/0x10 [ 2761.697928] __alloc_pages_nodemask+0x2129/0x2730 [ 2761.702767] ? retint_kernel+0x2d/0x2d [ 2761.706639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2761.711464] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2761.716465] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2761.721207] ? check_preemption_disabled+0x35/0x240 [ 2761.726233] ? retint_kernel+0x2d/0x2d [ 2761.730114] alloc_pages_current+0xe7/0x1e0 [ 2761.734420] kvm_mmu_create+0xd1/0x1c0 [ 2761.738292] kvm_arch_vcpu_init+0x282/0x890 [ 2761.742602] ? alloc_pages_current+0xef/0x1e0 [ 2761.747081] kvm_vcpu_init+0x26d/0x360 [ 2761.750952] vmx_create_vcpu+0xf5/0x2950 [ 2761.755000] ? alloc_loaded_vmcs+0x240/0x240 [ 2761.759391] ? check_tsc_unstable+0x6/0x10 [ 2761.763613] kvm_vm_ioctl+0x4ae/0x1430 [ 2761.767481] ? __lock_acquire+0x655/0x42a0 [ 2761.771697] ? kvm_vcpu_release+0xa0/0xa0 [ 2761.775829] ? trace_hardirqs_on+0x10/0x10 [ 2761.780048] ? check_preemption_disabled+0x35/0x240 [ 2761.785049] ? retint_kernel+0x2d/0x2d [ 2761.788919] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2761.793915] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2761.798655] ? check_preemption_disabled+0x35/0x240 [ 2761.803654] ? retint_kernel+0x2d/0x2d [ 2761.807524] ? kvm_vcpu_release+0xa0/0xa0 [ 2761.811656] do_vfs_ioctl+0x75a/0xfe0 [ 2761.815451] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2761.821058] ? ioctl_preallocate+0x1a0/0x1a0 [ 2761.825458] ? security_file_ioctl+0x76/0xb0 [ 2761.829848] ? security_file_ioctl+0x83/0xb0 [ 2761.834241] SyS_ioctl+0x7f/0xb0 [ 2761.837586] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2761.841544] do_syscall_64+0x1d5/0x640 [ 2761.845429] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2761.850599] RIP: 0033:0x45cb29 [ 2761.853769] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2761.861561] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2761.868814] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2761.876063] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2761.883313] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2761.890565] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2761.913012] Mem-Info: [ 2761.928049] active_anon:583731 inactive_anon:25891 isolated_anon:0 [ 2761.928049] active_file:9945 inactive_file:44315 isolated_file:0 [ 2761.928049] unevictable:0 dirty:30 writeback:15 unstable:0 [ 2761.928049] slab_reclaimable:63675 slab_unreclaimable:241222 [ 2761.928049] mapped:67595 shmem:31004 pagetables:26785 bounce:0 [ 2761.928049] free:512608 free_pcp:403 free_cma:0 [ 2761.987822] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2762.017452] Node 1 active_anon:592472kB inactive_anon:64460kB active_file:39780kB inactive_file:177268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60316kB dirty:64kB writeback:56kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2762.048491] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.074179] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2762.076025] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2762.094747] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2762.099592] Node 0 DMA32 free:33008kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:404kB local_pcp:228kB free_cma:0kB [ 2762.104867] CPU: 1 PID: 1937 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2762.136205] lowmem_reserve[]: [ 2762.141596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.141601] Call Trace: [ 2762.141621] dump_stack+0x1b2/0x283 [ 2762.141638] warn_alloc.cold+0x96/0x1af [ 2762.141648] ? zone_watermark_ok_safe+0x250/0x250 [ 2762.141667] ? wait_for_completion_io+0x10/0x10 [ 2762.141683] __alloc_pages_nodemask+0x2129/0x2730 [ 2762.141722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2762.150627] 0 [ 2762.154164] ? mark_held_locks+0xa6/0xf0 [ 2762.154177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2762.154234] alloc_pages_current+0xe7/0x1e0 [ 2762.154249] kvm_mmu_create+0xd1/0x1c0 [ 2762.157023] 0 [ 2762.160429] kvm_arch_vcpu_init+0x282/0x890 [ 2762.160438] ? alloc_pages_current+0xef/0x1e0 [ 2762.160451] kvm_vcpu_init+0x26d/0x360 [ 2762.160464] vmx_create_vcpu+0xf5/0x2950 [ 2762.160485] ? alloc_loaded_vmcs+0x240/0x240 [ 2762.160497] ? kvm_arch_vcpu_create+0x60/0xb0 [ 2762.160512] kvm_vm_ioctl+0x4ae/0x1430 [ 2762.160523] ? __lock_acquire+0x655/0x42a0 [ 2762.160536] ? kvm_vcpu_release+0xa0/0xa0 17:11:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) read$FUSE(r2, &(0x7f0000000300), 0x1000) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2762.171065] 0 [ 2762.173988] ? trace_hardirqs_on+0x10/0x10 [ 2762.173999] ? check_preemption_disabled+0x35/0x240 [ 2762.174019] ? trace_hardirqs_on+0x10/0x10 [ 2762.174031] ? check_preemption_disabled+0x35/0x240 [ 2762.179112] 0 [ 2762.183719] ? retint_kernel+0x2d/0x2d [ 2762.183732] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2762.183745] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2762.183759] ? check_preemption_disabled+0x35/0x240 [ 2762.183769] ? kvm_vcpu_release+0xa0/0xa0 [ 2762.183783] do_vfs_ioctl+0x75a/0xfe0 [ 2762.185715] 0 17:11:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x23, 0x0, &(0x7f0000000400)) 17:11:25 executing program 1: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=""/202) 17:11:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:25 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2762.189612] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2762.189624] ? ioctl_preallocate+0x1a0/0x1a0 [ 2762.189645] ? security_file_ioctl+0x76/0xb0 [ 2762.189654] ? security_file_ioctl+0x83/0xb0 [ 2762.189665] SyS_ioctl+0x7f/0xb0 [ 2762.189672] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2762.189686] do_syscall_64+0x1d5/0x640 [ 2762.189703] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2762.202694] RIP: 0033:0x45cb29 [ 2762.202706] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 [ 2762.206960] Node 0 [ 2762.208791] ORIG_RAX: 0000000000000010 [ 2762.208798] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2762.208802] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2762.208807] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2762.208813] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2762.208818] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:25 executing program 3: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x100) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000080)) 17:11:25 executing program 1: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=""/202) [ 2762.415974] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:11:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r2, r4}) getsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, 0x0) dup3(r5, r1, 0x0) [ 2762.479119] lowmem_reserve[]: 0 0 0 0 0 [ 2762.483389] Node 1 Normal free:2008800kB min:53592kB low:66988kB high:80384kB active_anon:592776kB inactive_anon:64460kB active_file:39780kB inactive_file:177284kB unevictable:0kB writepending:308kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33632kB pagetables:62196kB bounce:0kB free_pcp:960kB local_pcp:612kB free_cma:0kB [ 2762.530973] lowmem_reserve[]: 0 0 0 0 0 [ 2762.535389] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2762.558471] Node 0 DMA32: 1444*4kB (UMEH) 2282*8kB (UME) 397*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33008kB [ 2762.582042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2762.613560] Node 1 Normal: 237*4kB (UME) 239*8kB (UME) 54*16kB (UME) 49*32kB (UME) 33*64kB (UME) 18*128kB (UM) 3*256kB (UME) 2*512kB (ME) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2008300kB [ 2762.638267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.647425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.657979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2762.667117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2762.679745] 55852 total pagecache pages [ 2762.683983] 0 pages in swap cache [ 2762.687444] Swap cache stats: add 0, delete 0, find 0/0 [ 2762.694502] Free swap = 0kB [ 2762.697534] Total swap = 0kB [ 2762.702070] 1965979 pages RAM [ 2762.705184] 0 pages HighMem/MovableOnly [ 2762.718976] 338456 pages reserved [ 2762.723792] 0 pages cma reserved 17:11:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x4b4b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, &(0x7f0000000000)=""/202) 17:11:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:25 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=""/202) [ 2762.975674] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2763.026548] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2763.050193] CPU: 0 PID: 1993 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2763.058023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2763.067387] Call Trace: [ 2763.069982] dump_stack+0x1b2/0x283 [ 2763.073623] warn_alloc.cold+0x96/0x1af [ 2763.077605] ? zone_watermark_ok_safe+0x250/0x250 [ 2763.082483] ? wait_for_completion_io+0x10/0x10 [ 2763.087163] __alloc_pages_nodemask+0x2129/0x2730 [ 2763.092026] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2763.096859] ? mark_held_locks+0xa6/0xf0 [ 2763.096870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2763.096882] ? retint_kernel+0x2d/0x2d [ 2763.096896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2763.096909] ? retint_kernel+0x2d/0x2d [ 2763.118306] alloc_pages_current+0xe7/0x1e0 [ 2763.122641] kvm_mmu_create+0xd1/0x1c0 [ 2763.126531] kvm_arch_vcpu_init+0x282/0x890 [ 2763.130859] kvm_vcpu_init+0x26d/0x360 [ 2763.134756] vmx_create_vcpu+0xf5/0x2950 [ 2763.138823] ? check_preemption_disabled+0x35/0x240 [ 2763.143844] ? retint_kernel+0x2d/0x2d [ 2763.147739] ? alloc_loaded_vmcs+0x240/0x240 [ 2763.152148] ? alloc_loaded_vmcs+0x240/0x240 [ 2763.156569] kvm_vm_ioctl+0x4ae/0x1430 [ 2763.160463] ? __lock_acquire+0x655/0x42a0 [ 2763.164714] ? kvm_vcpu_release+0xa0/0xa0 [ 2763.168872] ? retint_kernel+0x2d/0x2d [ 2763.172767] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2763.177789] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2763.182551] ? check_preemption_disabled+0x35/0x240 [ 2763.187574] ? retint_kernel+0x2d/0x2d [ 2763.191471] ? do_vfs_ioctl+0x76/0xfe0 [ 2763.195370] ? kvm_vcpu_release+0xa0/0xa0 [ 2763.199523] do_vfs_ioctl+0x75a/0xfe0 [ 2763.203328] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2763.208957] ? ioctl_preallocate+0x1a0/0x1a0 [ 2763.213388] ? security_file_ioctl+0x76/0xb0 [ 2763.217801] ? security_file_ioctl+0x83/0xb0 [ 2763.222214] SyS_ioctl+0x7f/0xb0 [ 2763.225580] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2763.229558] do_syscall_64+0x1d5/0x640 [ 2763.233447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2763.238637] RIP: 0033:0x45cb29 [ 2763.241817] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2763.249525] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2763.256796] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2763.264065] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2763.271334] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2763.278614] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2763.420251] warn_alloc_show_mem: 1 callbacks suppressed [ 2763.420295] Mem-Info: [ 2763.434182] active_anon:583458 inactive_anon:25891 isolated_anon:0 [ 2763.434182] active_file:9947 inactive_file:44324 isolated_file:0 [ 2763.434182] unevictable:0 dirty:82 writeback:0 unstable:0 [ 2763.434182] slab_reclaimable:63679 slab_unreclaimable:241021 [ 2763.434182] mapped:67603 shmem:31004 pagetables:26778 bounce:0 [ 2763.434182] free:513123 free_pcp:320 free_cma:0 [ 2763.474024] Node 0 active_anon:1740748kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2763.504961] Node 1 active_anon:593084kB inactive_anon:64460kB active_file:39784kB inactive_file:177296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61608kB dirty:224kB writeback:0kB shmem:79552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2763.534064] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.543369] syz-executor.5: [ 2763.561875] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2763.571668] Node 0 DMA32 free:33308kB min:36296kB low:45368kB high:54440kB active_anon:1738672kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 2763.576562] page allocation failure: order:0 [ 2763.602621] lowmem_reserve[]: [ 2763.607047] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2763.607057] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2763.607081] CPU: 1 PID: 2063 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2763.607086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2763.607090] Call Trace: [ 2763.607107] dump_stack+0x1b2/0x283 [ 2763.615883] 0 [ 2763.616629] warn_alloc.cold+0x96/0x1af [ 2763.616641] ? zone_watermark_ok_safe+0x250/0x250 [ 2763.623767] 0 [ 2763.629534] ? wait_for_completion_io+0x10/0x10 [ 2763.629554] __alloc_pages_nodemask+0x2129/0x2730 [ 2763.629581] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2763.629591] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2763.629612] ? HARDIRQ_verbose+0x10/0x10 [ 2763.641835] 0 [ 2763.645146] ? do_raw_spin_unlock+0x164/0x250 [ 2763.645162] alloc_pages_current+0xe7/0x1e0 [ 2763.645178] kvm_mmu_create+0xd1/0x1c0 [ 2763.647065] 0 [ 2763.650919] kvm_arch_vcpu_init+0x282/0x890 [ 2763.650928] ? alloc_pages_current+0xef/0x1e0 [ 2763.650940] kvm_vcpu_init+0x26d/0x360 [ 2763.650955] vmx_create_vcpu+0xf5/0x2950 [ 2763.650971] ? __mutex_unlock_slowpath+0x75/0x780 [ 2763.650982] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2763.660250] 0 [ 2763.662248] ? alloc_loaded_vmcs+0x240/0x240 [ 2763.662267] kvm_vm_ioctl+0x4ae/0x1430 [ 2763.662279] ? __lock_acquire+0x655/0x42a0 [ 2763.671924] ? kvm_vcpu_release+0xa0/0xa0 [ 2763.671935] ? trace_hardirqs_on+0x10/0x10 [ 2763.671945] ? check_preemption_disabled+0x35/0x240 [ 2763.671960] ? trace_hardirqs_on+0x10/0x10 [ 2763.671969] ? check_preemption_disabled+0x35/0x240 [ 2763.671983] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2763.681256] Node 0 [ 2763.682767] ? HARDIRQ_verbose+0x10/0x10 [ 2763.682781] ? kvm_vcpu_release+0xa0/0xa0 [ 2763.682795] do_vfs_ioctl+0x75a/0xfe0 [ 2763.687460] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.691592] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2763.691603] ? ioctl_preallocate+0x1a0/0x1a0 [ 2763.691622] ? security_file_ioctl+0x76/0xb0 [ 2763.691631] ? security_file_ioctl+0x83/0xb0 [ 2763.691642] SyS_ioctl+0x7f/0xb0 [ 2763.691650] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2763.691663] do_syscall_64+0x1d5/0x640 [ 2763.691680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2763.698467] lowmem_reserve[]: [ 2763.701642] RIP: 0033:0x45cb29 [ 2763.701647] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2763.701658] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2763.701664] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2763.701668] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2763.701677] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2763.709718] 0 [ 2763.710058] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 [ 2763.719598] 0 0 0 0 [ 2763.895132] Node 1 Normal free:2009896kB min:53592kB low:66988kB high:80384kB active_anon:592984kB inactive_anon:64472kB active_file:39788kB inactive_file:177332kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33312kB pagetables:61944kB bounce:0kB free_pcp:1200kB local_pcp:596kB free_cma:0kB [ 2763.929651] lowmem_reserve[]: 0 0 0 0 0 [ 2763.933664] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2763.955013] Node 0 DMA32: 1523*4kB (UMEH) 2291*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33412kB [ 2763.972901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2763.985369] Node 1 Normal: 172*4kB (UME) 221*8kB (UME) 130*16kB (UME) 63*32kB (UME) 30*64kB (UME) 30*128kB (UM) 4*256kB (UME) 2*512kB (ME) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2011160kB [ 2764.005045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.014539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:11:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r1, 0xd, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f00000000c0)={0xd42, 0x4c7289c5, 0xfffffffa, 0x5, 0x7, 0x6}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x50000, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, 0x0) 17:11:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d2130a696213bd6b7513f9273ae499d339886375abae953be00"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r2}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x9f8104f046ecf481}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080008bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x1, r6, 0x1) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000400)={0x0, "9181308e0f1b56c7846693f53ccc6f124c025bb2b7ccf4ad08493b817ee05c5747dc215315cdb73eb1d10b9a51e53438d61ee85f6e71c60634819ca8789fd1a2", {0x5, 0x4}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x90100, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 17:11:26 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=""/202) 17:11:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f0000000400)) [ 2764.023736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.033195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2764.042466] 55871 total pagecache pages [ 2764.046446] 0 pages in swap cache [ 2764.051133] Swap cache stats: add 0, delete 0, find 0/0 [ 2764.056497] Free swap = 0kB [ 2764.060478] Total swap = 0kB [ 2764.063499] 1965979 pages RAM [ 2764.066581] 0 pages HighMem/MovableOnly [ 2764.072058] 338456 pages reserved [ 2764.075517] 0 pages cma reserved 17:11:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=""/202) 17:11:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, 0x0) 17:11:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, 0x0) 17:11:27 executing program 3: r0 = socket$kcm(0x10, 0x7, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)=0xfffffffffffffc5f) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2d6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x88c4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000090) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'bond0\x00', {'bond0\x00'}, 0x1}) 17:11:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b4b, 0x0) 17:11:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="83dacf42c2b14de4cba68e80c2000001000000004c27aaaaaba1aaaabb8d00"/45]) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000001c0)={0x7, 0x74, 0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2764.529871] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2764.547393] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2764.580615] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2764.586944] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2764.592949] CPU: 0 PID: 2082 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2764.600769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.610151] Call Trace: [ 2764.612754] dump_stack+0x1b2/0x283 [ 2764.616395] warn_alloc.cold+0x96/0x1af [ 2764.620383] ? zone_watermark_ok_safe+0x250/0x250 [ 2764.625265] ? wait_for_completion_io+0x10/0x10 [ 2764.629945] __alloc_pages_nodemask+0x2129/0x2730 [ 2764.634813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2764.639676] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2764.644444] ? check_preemption_disabled+0x35/0x240 [ 2764.649482] alloc_pages_current+0xe7/0x1e0 [ 2764.653814] kvm_mmu_create+0xd1/0x1c0 [ 2764.657708] kvm_arch_vcpu_init+0x282/0x890 [ 2764.662030] ? alloc_pages_current+0xef/0x1e0 [ 2764.666531] kvm_vcpu_init+0x26d/0x360 [ 2764.670424] vmx_create_vcpu+0xf5/0x2950 [ 2764.674491] ? __mutex_unlock_slowpath+0x75/0x780 [ 2764.679340] ? alloc_loaded_vmcs+0x240/0x240 [ 2764.683759] kvm_vm_ioctl+0x4ae/0x1430 [ 2764.687656] ? __lock_acquire+0x655/0x42a0 [ 2764.691897] ? kvm_vcpu_release+0xa0/0xa0 [ 2764.696050] ? retint_kernel+0x2d/0x2d [ 2764.699943] ? retint_kernel+0x2d/0x2d [ 2764.703838] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2764.708867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2764.713634] ? check_preemption_disabled+0x35/0x240 [ 2764.718655] ? retint_kernel+0x2d/0x2d [ 2764.722557] ? do_vfs_ioctl+0x6fb/0xfe0 [ 2764.726536] ? kvm_vcpu_release+0xa0/0xa0 [ 2764.730688] do_vfs_ioctl+0x75a/0xfe0 [ 2764.734496] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2764.740123] ? ioctl_preallocate+0x1a0/0x1a0 [ 2764.744548] ? security_file_ioctl+0x76/0xb0 [ 2764.748959] ? security_file_ioctl+0x83/0xb0 [ 2764.753374] SyS_ioctl+0x7f/0xb0 [ 2764.756743] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2764.760721] do_syscall_64+0x1d5/0x640 [ 2764.764620] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2764.769810] RIP: 0033:0x45cb29 [ 2764.772998] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2764.780712] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2764.787991] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2764.795268] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2764.802543] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2764.809822] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2764.819543] warn_alloc_show_mem: 1 callbacks suppressed [ 2764.819577] Mem-Info: [ 2764.827983] active_anon:583504 inactive_anon:25894 isolated_anon:0 [ 2764.827983] active_file:9948 inactive_file:44333 isolated_file:0 [ 2764.827983] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2764.827983] slab_reclaimable:63710 slab_unreclaimable:240899 [ 2764.827983] mapped:67624 shmem:31009 pagetables:26843 bounce:0 [ 2764.827983] free:513171 free_pcp:337 free_cma:0 [ 2764.828845] CPU: 1 PID: 2111 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2764.862461] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2764.869822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.869827] Call Trace: [ 2764.869848] dump_stack+0x1b2/0x283 [ 2764.869863] warn_alloc.cold+0x96/0x1af [ 2764.869873] ? zone_watermark_ok_safe+0x250/0x250 [ 2764.869895] ? wait_for_completion_io+0x10/0x10 [ 2764.869911] __alloc_pages_nodemask+0x2129/0x2730 [ 2764.869937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2764.869947] ? mark_held_locks+0xa6/0xf0 [ 2764.869958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2764.869987] alloc_pages_current+0xe7/0x1e0 [ 2764.870003] kvm_mmu_create+0xd1/0x1c0 [ 2764.870016] kvm_arch_vcpu_init+0x282/0x890 [ 2764.870027] ? alloc_pages_current+0xef/0x1e0 [ 2764.870039] kvm_vcpu_init+0x26d/0x360 [ 2764.870053] vmx_create_vcpu+0xf5/0x2950 [ 2764.870066] ? __mutex_unlock_slowpath+0x75/0x780 [ 2764.870076] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2764.870094] ? alloc_loaded_vmcs+0x240/0x240 [ 2764.898638] Node 1 active_anon:593284kB inactive_anon:64472kB active_file:39788kB inactive_file:177332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61592kB dirty:0kB writeback:0kB shmem:79572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2764.907270] kvm_vm_ioctl+0x4ae/0x1430 [ 2764.907285] ? __lock_acquire+0x655/0x42a0 [ 2764.907295] ? kvm_vcpu_release+0xa0/0xa0 [ 2764.907305] ? trace_hardirqs_on+0x10/0x10 [ 2764.907315] ? check_preemption_disabled+0x35/0x240 [ 2764.907330] ? trace_hardirqs_on+0x10/0x10 [ 2764.910283] Node 0 [ 2764.913509] ? check_preemption_disabled+0x35/0x240 [ 2764.913522] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2764.913538] ? HARDIRQ_verbose+0x10/0x10 [ 2764.913549] ? kvm_vcpu_release+0xa0/0xa0 [ 2764.913561] do_vfs_ioctl+0x75a/0xfe0 [ 2764.913576] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2764.917861] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2764.922361] ? ioctl_preallocate+0x1a0/0x1a0 [ 2764.922385] ? security_file_ioctl+0x76/0xb0 [ 2764.922395] ? security_file_ioctl+0x83/0xb0 [ 2764.922407] SyS_ioctl+0x7f/0xb0 [ 2764.927212] lowmem_reserve[]: [ 2764.931878] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2764.931890] do_syscall_64+0x1d5/0x640 [ 2764.931907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2764.931915] RIP: 0033:0x45cb29 [ 2764.931921] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2764.931932] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2764.931938] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2764.931944] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2764.931949] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2764.931955] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2765.177294] 0 2559 2559 2559 2559 [ 2765.181861] Node 0 DMA32 free:33412kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2765.212624] lowmem_reserve[]: 0 0 0 0 0 [ 2765.216629] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2765.242876] lowmem_reserve[]: 0 0 0 0 0 [ 2765.246859] Node 1 Normal free:2010856kB min:53592kB low:66988kB high:80384kB active_anon:593108kB inactive_anon:64472kB active_file:39792kB inactive_file:177372kB unevictable:0kB writepending:160kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33344kB pagetables:62052kB bounce:0kB free_pcp:1332kB local_pcp:676kB free_cma:0kB [ 2765.278398] lowmem_reserve[]: 0 0 0 0 0 [ 2765.282408] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2765.298866] Node 0 DMA32: 1523*4kB (UMEH) 2291*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33412kB [ 2765.313521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2765.324309] Node 1 Normal: 219*4kB (UME) 299*8kB (UME) 67*16kB (UME) 62*32kB (UME) 29*64kB (UME) 28*128kB (UM) 4*256kB (UME) 2*512kB (ME) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2010612kB [ 2765.341873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2765.350780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2765.359426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2765.368327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2765.376894] 55882 total pagecache pages [ 2765.380941] 0 pages in swap cache 17:11:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r3, 0xd, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x6, 0x1, @tid=r3}, &(0x7f00000000c0)) 17:11:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, 0x0) 17:11:28 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:28 executing program 4: ioperm(0x0, 0xff, 0x80000001) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) 17:11:28 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000400)={{0x1c, 0x4, 0xfff, 0xc}, 'syz1\x00', 0xa}) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000001c0)={0x1, 0x879, &(0x7f0000000240)="dfb35200f50fbee72a7a189680ac779528236f06dae2b0eec864f597a014e2fd56aab4bff44fb5c2e2c8aad9e8a0eb3d90ec2b628a8f3dfe353582f72ec3f7b2b1b2c6bff3de0637b913960468ef03", &(0x7f0000000300)="5f31553f199a0aa9d8ee3c76b9fe1f4bdcfc01ae36d7d9ce580ed86c542da527238c5e9e6630ef411e699b33688871255cd02e4c4098705f5e5ea08d5451bbfd336adf48b3413e441b4516e13dfb306c04a48acd492c541d7c689d8d9c735fabe5e7ff862ab141a0fce46de0219f72598a229012590960540414637285de012aaedf9f76bfb725f936881cfa86446e4f0fe21b77ad9b9570073a99a03894b7049f6460ef3e6ac2b4162a650f477b43f1f0ce599ab73446d61382e1d883edcfa8741f050c09105fe215d4d4", 0x4f, 0xcb}) [ 2765.384502] Swap cache stats: add 0, delete 0, find 0/0 [ 2765.389925] Free swap = 0kB [ 2765.392935] Total swap = 0kB [ 2765.395932] 1965979 pages RAM [ 2765.399075] 0 pages HighMem/MovableOnly [ 2765.403042] 338456 pages reserved [ 2765.406473] 0 pages cma reserved 17:11:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400001, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x541c, 0x0) 17:11:28 executing program 4: ioperm(0x0, 0xff, 0x80000001) getxattr(0x0, 0x0, 0x0, 0x0) 17:11:28 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000082000002d0301000000000095000000000000006916000000000000bf67000000000000350200000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f84e8f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4671d295c45a6a0b9bdb7dd399703d6c4f4f3be00369289aa6812b8e007e733a9a4f16d00041282ee45a010fb94fe9de56c9d8a814261bdb94a0d742a81762bab8395fa546cad3f1d5af65727546e7c955cfa1f6ab6897c472d08a87db98e71a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aa5c0b35f02a880508ec88158f0200000000c8fb735fd552bdc2626f3f86ebf5cb9d9e7706004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c86723888fb1260300f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecad4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4002002000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4466e3fa9b899bb79696ae54917645d253887a5ad103649afa2705f5daf8d2001e03a651bb96589a7eab04871bc47287cd310000000000407d000000000000000000000000002b37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000009000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d36a425107ff51b1e3ee0152204db76a91a95ca0e51a9e812d3a7565bc571a1281ca383da2aa870054e07ca578763cec91240e97632e9129884768f20a7de7203084e84254e6895a784b81f501a8485a69efc6dd4f42650acfd36a0d6103a9fc5bfb35b86db94f9eaf213dd5fd84cb742af3958fedbc06636f41ee14e9c8b32a505756d3760b4616de293faf5144010388c21a0dd0e001a0b19349b69ae0389421bef5eb7b34fa11e6aadf9f200792b1547eab500b94fb3e6b5b6402274588d1a16ef371d81a9608046534921edc96089f8d0c0af6b4e5e44268bcf605240bf156229d13ffc53d222d2dd2fc5ffb293477aeac653eb314c8fc3fa7c9dfa2d8da347366e627382f8ee6d9ee3520f7645a033fc233aca4250f9d921595f4a83b202976fe1fe273f41d2a86d9462ed852e0d1b2a808380f52a8221105fbed8444e6f929c89028ce2d38d9c9e4c48251c2333da6d94a98eab0df3cda9d7cc1fb1eee36adb258449e3f91949a17b006c86e2114f3c30edc57f6d78ac078d84b20b731dc3d936683d6d646cdba0ba725e05597db54cb6553f02f2dfc5d0e0d223436dbb96442facab96c03ea23307d8c35ed1581be1f82f5e14ff865dc97a08d37e00103512ab996aec6033a9e75d89327981a9950022ec6d1fc7d2aab3c00413cc0c25596280d56d0e68c1adf72e341e2a1df8a35f874004cb0c949dd83952a83147b49a2429a3a0dc62d77e4f8f78ac2000"/1334], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:11:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1, &(0x7f0000000200)=""/47, 0x2f}, 0x20) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "f392977cc8fd0f96"}, 0x60) [ 2765.782553] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2765.805907] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2765.811414] CPU: 1 PID: 2138 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2765.819219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2765.828586] Call Trace: [ 2765.831192] dump_stack+0x1b2/0x283 [ 2765.834832] warn_alloc.cold+0x96/0x1af [ 2765.838811] ? zone_watermark_ok_safe+0x250/0x250 [ 2765.843668] ? wait_for_completion_io+0x10/0x10 [ 2765.848352] __alloc_pages_nodemask+0x2129/0x2730 [ 2765.853242] ? retint_kernel+0x2d/0x2d [ 2765.857139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2765.861987] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2765.867018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2765.871785] ? check_preemption_disabled+0x35/0x240 [ 2765.876808] ? retint_kernel+0x2d/0x2d [ 2765.880704] alloc_pages_current+0xe7/0x1e0 [ 2765.885016] kvm_mmu_create+0xd1/0x1c0 [ 2765.888901] kvm_arch_vcpu_init+0x282/0x890 [ 2765.893216] ? alloc_pages_current+0xef/0x1e0 [ 2765.897708] kvm_vcpu_init+0x26d/0x360 [ 2765.901604] vmx_create_vcpu+0xf5/0x2950 [ 2765.905663] ? __mutex_unlock_slowpath+0x75/0x780 [ 2765.910492] ? retint_kernel+0x2d/0x2d [ 2765.914366] ? alloc_loaded_vmcs+0x240/0x240 [ 2765.918762] kvm_vm_ioctl+0x4ae/0x1430 [ 2765.922635] ? __lock_acquire+0x655/0x42a0 [ 2765.926852] ? kvm_vcpu_release+0xa0/0xa0 [ 2765.930984] ? retint_kernel+0x2d/0x2d [ 2765.934854] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2765.939864] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2765.944614] ? check_preemption_disabled+0x35/0x240 [ 2765.949613] ? retint_kernel+0x2d/0x2d [ 2765.953487] ? selinux_file_ioctl+0x19a/0x560 [ 2765.957965] ? selinux_file_ioctl+0x213/0x560 [ 2765.962443] ? kvm_vcpu_release+0xa0/0xa0 [ 2765.966575] do_vfs_ioctl+0x75a/0xfe0 [ 2765.970361] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2765.975975] ? ioctl_preallocate+0x1a0/0x1a0 [ 2765.980397] ? security_file_ioctl+0x76/0xb0 [ 2765.984805] ? security_file_ioctl+0x83/0xb0 [ 2765.989205] SyS_ioctl+0x7f/0xb0 [ 2765.992554] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2765.996526] do_syscall_64+0x1d5/0x640 [ 2766.000411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2766.005600] RIP: 0033:0x45cb29 [ 2766.008780] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2766.016474] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2766.023726] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2766.030979] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2766.038238] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2766.045510] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2766.056090] warn_alloc_show_mem: 1 callbacks suppressed [ 2766.056109] Mem-Info: [ 2766.064284] active_anon:583559 inactive_anon:25894 isolated_anon:0 [ 2766.064284] active_file:9949 inactive_file:44344 isolated_file:0 [ 2766.064284] unevictable:0 dirty:88 writeback:0 unstable:0 [ 2766.064284] slab_reclaimable:63743 slab_unreclaimable:241180 [ 2766.064284] mapped:67601 shmem:31009 pagetables:26880 bounce:0 [ 2766.064284] free:512691 free_pcp:293 free_cma:0 [ 2766.102226] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2766.131062] Node 1 active_anon:593504kB inactive_anon:64472kB active_file:39792kB inactive_file:177376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61520kB dirty:352kB writeback:0kB shmem:79572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2766.159864] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.187455] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2766.192873] Node 0 DMA32 free:33412kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2766.222370] lowmem_reserve[]: 0 0 0 0 0 [ 2766.226609] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.252428] lowmem_reserve[]: 0 0 0 0 0 [ 2766.256637] Node 1 Normal free:2009204kB min:53592kB low:66988kB high:80384kB active_anon:593504kB inactive_anon:64472kB active_file:39792kB inactive_file:177376kB unevictable:0kB writepending:356kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33664kB pagetables:62388kB bounce:0kB free_pcp:1180kB local_pcp:516kB free_cma:0kB [ 2766.287594] lowmem_reserve[]: 0 0 0 0 0 [ 2766.291605] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2766.311109] Node 0 DMA32: 1523*4kB (UMEH) 2291*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33412kB [ 2766.326197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2766.337764] Node 1 Normal: 195*4kB (UME) 98*8kB (UME) 40*16kB (UME) 22*32kB (UME) 29*64kB (UME) 37*128kB (UM) 6*256kB (UME) 1*512kB (E) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2008348kB [ 2766.355235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2766.365114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2766.374418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2766.384092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2766.391855] syz-executor.5: [ 2766.393553] 55888 total pagecache pages [ 2766.394736] page allocation failure: order:0 [ 2766.396694] 0 pages in swap cache [ 2766.405348] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2766.410882] Swap cache stats: add 0, delete 0, find 0/0 [ 2766.415314] syz-executor.5 cpuset= [ 2766.421331] Free swap = 0kB [ 2766.425851] / mems_allowed=0-1 [ 2766.429578] Total swap = 0kB [ 2766.431647] CPU: 0 PID: 2179 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2766.434650] 1965979 pages RAM [ 2766.442357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.442361] Call Trace: [ 2766.442381] dump_stack+0x1b2/0x283 [ 2766.442396] warn_alloc.cold+0x96/0x1af [ 2766.442406] ? zone_watermark_ok_safe+0x250/0x250 [ 2766.442426] ? wait_for_completion_io+0x10/0x10 [ 2766.442440] __alloc_pages_nodemask+0x2129/0x2730 [ 2766.442465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2766.442477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2766.442499] ? HARDIRQ_verbose+0x10/0x10 [ 2766.451514] 0 pages HighMem/MovableOnly [ 2766.454940] ? do_raw_spin_unlock+0x164/0x250 [ 2766.454956] alloc_pages_current+0xe7/0x1e0 [ 2766.454981] kvm_mmu_create+0xd1/0x1c0 [ 2766.457722] 338456 pages reserved [ 2766.461162] kvm_arch_vcpu_init+0x282/0x890 [ 2766.461172] ? alloc_pages_current+0xef/0x1e0 [ 2766.461185] kvm_vcpu_init+0x26d/0x360 [ 2766.465230] 0 pages cma reserved [ 2766.469970] vmx_create_vcpu+0xf5/0x2950 [ 2766.469985] ? __mutex_unlock_slowpath+0x75/0x780 [ 2766.469994] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2766.470005] ? alloc_loaded_vmcs+0x240/0x240 [ 2766.470021] kvm_vm_ioctl+0x4ae/0x1430 [ 2766.470032] ? __lock_acquire+0x655/0x42a0 [ 2766.470041] ? kvm_vcpu_release+0xa0/0xa0 [ 2766.470051] ? trace_hardirqs_on+0x10/0x10 [ 2766.470060] ? check_preemption_disabled+0x35/0x240 [ 2766.470074] ? trace_hardirqs_on+0x10/0x10 [ 2766.573052] ? check_preemption_disabled+0x35/0x240 [ 2766.578060] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2766.582980] ? HARDIRQ_verbose+0x10/0x10 [ 2766.587030] ? kvm_vcpu_release+0xa0/0xa0 [ 2766.591166] do_vfs_ioctl+0x75a/0xfe0 [ 2766.594947] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2766.600565] ? ioctl_preallocate+0x1a0/0x1a0 [ 2766.604959] ? security_file_ioctl+0x76/0xb0 [ 2766.609510] ? security_file_ioctl+0x83/0xb0 [ 2766.613897] SyS_ioctl+0x7f/0xb0 [ 2766.617240] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2766.621209] do_syscall_64+0x1d5/0x640 [ 2766.625091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2766.630276] RIP: 0033:0x45cb29 [ 2766.633456] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2766.641153] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2766.648405] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2766.655654] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2766.662902] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2766.670158] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 17:11:29 executing program 4: ioperm(0x0, 0xff, 0x80000001) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17:11:29 executing program 1: ioperm(0x0, 0xff, 0x80000001) getresuid(&(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 17:11:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0xb, 0x7fe530d6, 0x7}, &(0x7f0000000300)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x4}}, 0x10) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:29 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r2, r4}) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r5, @ANYRES32=r6], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000500)={r6, r8}) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 17:11:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r7, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf8267749a49eb42c}}, 0x10) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 17:11:29 executing program 4: ioperm(0x0, 0xff, 0x80000001) socket$kcm(0x29, 0xe5aa3e5cd33299d5, 0x0) 17:11:29 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:11:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b30, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x10000, 0xffff, 0x2, 0x100, 0x1}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:29 executing program 4: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) 17:11:29 executing program 1: ioperm(0x0, 0xff, 0x80000001) keyctl$link(0x8, 0x0, 0x0) 17:11:29 executing program 4: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) 17:11:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b41, &(0x7f00000000c0)={0xe00, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x7, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480), 0x8}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x4, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2767.486913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 17:11:30 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 2768.049189] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2768.061847] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2768.067162] CPU: 0 PID: 2199 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2768.074956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.084298] Call Trace: [ 2768.086877] dump_stack+0x1b2/0x283 [ 2768.090516] warn_alloc.cold+0x96/0x1af [ 2768.094476] ? zone_watermark_ok_safe+0x250/0x250 [ 2768.099306] ? wait_for_completion_io+0x10/0x10 [ 2768.103961] __alloc_pages_nodemask+0x2129/0x2730 [ 2768.108796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2768.113621] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2768.118362] ? check_preemption_disabled+0x35/0x240 [ 2768.123369] alloc_pages_current+0xe7/0x1e0 [ 2768.127676] kvm_mmu_create+0xd1/0x1c0 [ 2768.131550] kvm_arch_vcpu_init+0x282/0x890 [ 2768.135851] ? alloc_pages_current+0xef/0x1e0 [ 2768.140339] kvm_vcpu_init+0x26d/0x360 [ 2768.144207] vmx_create_vcpu+0xf5/0x2950 [ 2768.148260] ? alloc_loaded_vmcs+0x240/0x240 [ 2768.152652] ? arch_uninstall_hw_breakpoint.cold+0x20/0x20 [ 2768.158259] kvm_vm_ioctl+0x4ae/0x1430 [ 2768.162131] ? __lock_acquire+0x655/0x42a0 [ 2768.166348] ? kvm_vcpu_release+0xa0/0xa0 [ 2768.170485] ? retint_kernel+0x2d/0x2d [ 2768.174356] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2768.179356] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2768.184095] ? check_preemption_disabled+0x35/0x240 [ 2768.189094] ? retint_kernel+0x2d/0x2d [ 2768.192978] ? selinux_file_ioctl+0x83/0x560 [ 2768.197369] ? selinux_file_ioctl+0xb8/0x560 [ 2768.201760] ? kvm_vcpu_release+0xa0/0xa0 [ 2768.205890] do_vfs_ioctl+0x75a/0xfe0 [ 2768.209680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2768.214416] ? ioctl_preallocate+0x1a0/0x1a0 [ 2768.218806] ? check_preemption_disabled+0x35/0x240 [ 2768.223806] ? retint_kernel+0x2d/0x2d [ 2768.227683] ? SyS_ioctl+0x6f/0xb0 [ 2768.231207] SyS_ioctl+0x7f/0xb0 [ 2768.234553] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2768.238508] do_syscall_64+0x1d5/0x640 [ 2768.242383] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2768.247558] RIP: 0033:0x45cb29 [ 2768.250732] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2768.258422] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2768.265675] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2768.272927] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2768.280179] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2768.287430] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2768.307430] warn_alloc_show_mem: 1 callbacks suppressed [ 2768.307487] Mem-Info: [ 2768.315489] active_anon:583589 inactive_anon:25895 isolated_anon:0 [ 2768.315489] active_file:9952 inactive_file:44356 isolated_file:0 [ 2768.315489] unevictable:0 dirty:31 writeback:10 unstable:0 [ 2768.315489] slab_reclaimable:63788 slab_unreclaimable:240939 [ 2768.315489] mapped:67626 shmem:31009 pagetables:26890 bounce:0 [ 2768.315489] free:512889 free_pcp:324 free_cma:0 [ 2768.359155] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:4kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2768.389835] Node 1 active_anon:593624kB inactive_anon:64476kB active_file:39808kB inactive_file:177420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61600kB dirty:124kB writeback:36kB shmem:79572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2768.426529] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.453430] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2768.459450] Node 0 DMA32 free:33288kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 2768.488470] lowmem_reserve[]: 0 0 0 0 0 [ 2768.492461] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2768.518023] lowmem_reserve[]: 0 0 0 0 0 [ 2768.522039] Node 1 Normal free:2008940kB min:53592kB low:66988kB high:80384kB active_anon:593188kB inactive_anon:64472kB active_file:39808kB inactive_file:177436kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33440kB pagetables:62472kB bounce:0kB free_pcp:1128kB local_pcp:652kB free_cma:0kB [ 2768.553015] lowmem_reserve[]: 0 0 0 0 0 [ 2768.557028] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2768.573397] Node 0 DMA32: 1492*4kB (UMEH) 2291*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33288kB [ 2768.587838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2768.598663] Node 1 Normal: 276*4kB (UME) 204*8kB (UM) 38*16kB (UME) 17*32kB (ME) 4*64kB (UE) 37*128kB (UM) 8*256kB (UME) 2*512kB (UE) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2008752kB [ 2768.615870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.624801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.633570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2768.642518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2768.651205] 55905 total pagecache pages [ 2768.655181] 0 pages in swap cache 17:11:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='vxcan1\x00') 17:11:31 executing program 1: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x1) clone(0x26800900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000440)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 17:11:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = getpgid(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6003, 0x0, 0x0, 0x2, 0x0, 0x588}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) read(r2, &(0x7f0000000240)=""/128, 0x80) 17:11:31 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0xec0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) [ 2768.658669] Swap cache stats: add 0, delete 0, find 0/0 [ 2768.664027] Free swap = 0kB [ 2768.667024] Total swap = 0kB [ 2768.670137] 1965979 pages RAM [ 2768.673232] 0 pages HighMem/MovableOnly [ 2768.677183] 338456 pages reserved [ 2768.681313] 0 pages cma reserved 17:11:31 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2768.785489] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2768.825497] print_req_error: I/O error, dev loop3, sector 2 17:11:31 executing program 1: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x88) connect$inet6(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) 17:11:31 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) ptrace$getsig(0x4205, 0x0, 0x2, &(0x7f0000000300)) [ 2768.831542] hfs: can't find a HFS filesystem on dev loop3 [ 2768.839136] print_req_error: I/O error, dev loop3, sector 2 [ 2768.845436] hfs: can't find a HFS filesystem on dev loop3 [ 2768.853145] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2768.892458] CPU: 1 PID: 2292 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2768.900300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.909659] Call Trace: [ 2768.912262] dump_stack+0x1b2/0x283 [ 2768.915902] warn_alloc.cold+0x96/0x1af [ 2768.919890] ? zone_watermark_ok_safe+0x250/0x250 [ 2768.924766] ? wait_for_completion_io+0x10/0x10 [ 2768.929457] __alloc_pages_nodemask+0x2129/0x2730 [ 2768.934333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2768.939207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2768.944076] ? HARDIRQ_verbose+0x10/0x10 [ 2768.948159] ? do_raw_spin_unlock+0x164/0x250 [ 2768.952677] alloc_pages_current+0xe7/0x1e0 [ 2768.957026] kvm_mmu_create+0xd1/0x1c0 [ 2768.960934] kvm_arch_vcpu_init+0x282/0x890 [ 2768.965273] ? alloc_pages_current+0xef/0x1e0 [ 2768.969787] kvm_vcpu_init+0x26d/0x360 [ 2768.973702] vmx_create_vcpu+0xf5/0x2950 [ 2768.977784] ? __mutex_unlock_slowpath+0x75/0x780 [ 2768.982641] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2768.987693] ? alloc_loaded_vmcs+0x240/0x240 [ 2768.992124] kvm_vm_ioctl+0x4ae/0x1430 [ 2768.996032] ? __lock_acquire+0x655/0x42a0 [ 2769.000285] ? kvm_vcpu_release+0xa0/0xa0 [ 2769.004449] ? trace_hardirqs_on+0x10/0x10 [ 2769.008693] ? check_preemption_disabled+0x35/0x240 [ 2769.013728] ? trace_hardirqs_on+0x10/0x10 [ 2769.017978] ? check_preemption_disabled+0x35/0x240 [ 2769.023013] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2769.027957] ? HARDIRQ_verbose+0x10/0x10 [ 2769.032031] ? kvm_vcpu_release+0xa0/0xa0 [ 2769.036194] do_vfs_ioctl+0x75a/0xfe0 17:11:31 executing program 4: ioperm(0x0, 0xff, 0x80000001) bpf$MAP_CREATE(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 17:11:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}}, &(0x7f00000002c0)=""/241, 0x32, 0xf1, 0x1}, 0x20) [ 2769.040009] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2769.045646] ? ioctl_preallocate+0x1a0/0x1a0 [ 2769.050079] ? security_file_ioctl+0x76/0xb0 [ 2769.054497] ? security_file_ioctl+0x83/0xb0 [ 2769.058918] SyS_ioctl+0x7f/0xb0 [ 2769.062289] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2769.066271] do_syscall_64+0x1d5/0x640 [ 2769.070171] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2769.075369] RIP: 0033:0x45cb29 [ 2769.078560] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2769.086279] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2769.093555] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2769.100831] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2769.108111] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2769.115392] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2769.300612] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2769.311659] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2769.316934] CPU: 1 PID: 2296 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2769.324722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.334076] Call Trace: [ 2769.336661] dump_stack+0x1b2/0x283 [ 2769.340279] warn_alloc.cold+0x96/0x1af [ 2769.344241] ? zone_watermark_ok_safe+0x250/0x250 [ 2769.349075] ? wait_for_completion_io+0x10/0x10 [ 2769.353733] __alloc_pages_nodemask+0x2129/0x2730 [ 2769.358571] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2769.363398] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2769.368234] ? HARDIRQ_verbose+0x10/0x10 [ 2769.372290] alloc_pages_current+0xe7/0x1e0 [ 2769.376602] kvm_mmu_create+0xd1/0x1c0 [ 2769.380475] kvm_arch_vcpu_init+0x282/0x890 [ 2769.384779] ? alloc_pages_current+0xef/0x1e0 [ 2769.389259] kvm_vcpu_init+0x26d/0x360 [ 2769.393133] vmx_create_vcpu+0xf5/0x2950 [ 2769.397179] ? __mutex_unlock_slowpath+0x75/0x780 [ 2769.402008] ? alloc_loaded_vmcs+0x240/0x240 [ 2769.406402] kvm_vm_ioctl+0x4ae/0x1430 [ 2769.410274] ? __lock_acquire+0x655/0x42a0 [ 2769.414489] ? kvm_vcpu_release+0xa0/0xa0 [ 2769.418618] ? trace_hardirqs_on+0x10/0x10 [ 2769.422952] ? check_preemption_disabled+0x35/0x240 [ 2769.427969] ? trace_hardirqs_on+0x10/0x10 [ 2769.432196] ? check_preemption_disabled+0x35/0x240 [ 2769.437223] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2769.442146] ? HARDIRQ_verbose+0x10/0x10 [ 2769.446193] ? kvm_vcpu_release+0xa0/0xa0 [ 2769.450337] do_vfs_ioctl+0x75a/0xfe0 [ 2769.454132] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2769.459739] ? ioctl_preallocate+0x1a0/0x1a0 [ 2769.464137] ? security_file_ioctl+0x76/0xb0 [ 2769.468527] ? security_file_ioctl+0x83/0xb0 [ 2769.472926] SyS_ioctl+0x7f/0xb0 [ 2769.476287] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2769.480254] do_syscall_64+0x1d5/0x640 [ 2769.484129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2769.489303] RIP: 0033:0x45cb29 [ 2769.492472] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2769.500159] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2769.507408] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2769.514664] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2769.521944] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2769.529205] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2769.538222] warn_alloc_show_mem: 1 callbacks suppressed [ 2769.538243] Mem-Info: [ 2769.546350] active_anon:583587 inactive_anon:25894 isolated_anon:0 [ 2769.546350] active_file:9953 inactive_file:44367 isolated_file:0 [ 2769.546350] unevictable:0 dirty:15 writeback:0 unstable:0 [ 2769.546350] slab_reclaimable:63759 slab_unreclaimable:241239 [ 2769.546350] mapped:67368 shmem:31010 pagetables:26969 bounce:0 [ 2769.546350] free:512444 free_pcp:222 free_cma:0 [ 2769.581213] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2769.609333] Node 1 active_anon:593616kB inactive_anon:64472kB active_file:39812kB inactive_file:177464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60568kB dirty:56kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2769.637865] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.665086] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2769.671523] Node 0 DMA32 free:33288kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 2769.701122] lowmem_reserve[]: 0 0 0 0 0 [ 2769.705118] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2769.731540] lowmem_reserve[]: 0 0 0 0 0 [ 2769.735539] Node 1 Normal free:2005872kB min:53592kB low:66988kB high:80384kB active_anon:593616kB inactive_anon:64472kB active_file:39812kB inactive_file:177464kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33664kB pagetables:62744kB bounce:0kB free_pcp:752kB local_pcp:128kB free_cma:0kB [ 2769.769570] lowmem_reserve[]: 0 0 0 0 0 [ 2769.773592] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2769.790645] Node 0 DMA32: 1492*4kB (UMEH) 2291*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33288kB [ 2769.806035] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2769.817589] Node 1 Normal: 320*4kB (UME) 263*8kB (UM) 126*16kB (UME) 20*32kB (UME) 4*64kB (UME) 9*128kB (UM) 8*256kB (UME) 2*512kB (UE) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2007320kB [ 2769.835233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.845084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2769.854282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2769.863785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2769.873026] 55918 total pagecache pages [ 2769.877000] 0 pages in swap cache [ 2769.881364] Swap cache stats: add 0, delete 0, find 0/0 [ 2769.886726] Free swap = 0kB [ 2769.890800] Total swap = 0kB [ 2769.893824] 1965979 pages RAM [ 2769.896907] 0 pages HighMem/MovableOnly 17:11:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r3, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='net/if_inet6\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4b41, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, "c7c6af1342a6edc35487eaa5671e423ab6bd78"}) 17:11:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x29, 0x39, 0xf, 0xf, 0x8, 0x20, 0x2, 0x111, 0xffffffffffffffff}}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8df9999d7313f5963abadee40f"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2769.902094] 338456 pages reserved [ 2769.905548] 0 pages cma reserved 17:11:32 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) ptrace$getsig(0x4205, 0x0, 0x2, &(0x7f0000000300)) 17:11:32 executing program 4: 17:11:32 executing program 1: 17:11:32 executing program 3: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:32 executing program 4: 17:11:32 executing program 4: 17:11:32 executing program 1: [ 2770.220940] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2770.232364] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2770.238990] CPU: 0 PID: 2365 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2770.246801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.256166] Call Trace: [ 2770.258768] dump_stack+0x1b2/0x283 [ 2770.262408] warn_alloc.cold+0x96/0x1af [ 2770.266390] ? zone_watermark_ok_safe+0x250/0x250 [ 2770.271252] ? wait_for_completion_io+0x10/0x10 [ 2770.275936] __alloc_pages_nodemask+0x2129/0x2730 [ 2770.280805] ? retint_kernel+0x2d/0x2d [ 2770.284700] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.289554] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2770.294581] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.299456] alloc_pages_current+0xe7/0x1e0 [ 2770.303788] kvm_mmu_create+0xd1/0x1c0 [ 2770.307683] kvm_arch_vcpu_init+0x282/0x890 [ 2770.312008] ? alloc_pages_current+0xef/0x1e0 [ 2770.316508] kvm_vcpu_init+0x26d/0x360 [ 2770.320404] vmx_create_vcpu+0xf5/0x2950 [ 2770.324481] ? alloc_loaded_vmcs+0x240/0x240 [ 2770.328902] ? arch_uninstall_hw_breakpoint.cold+0x20/0x20 [ 2770.334541] kvm_vm_ioctl+0x4ae/0x1430 [ 2770.338440] ? __lock_acquire+0x655/0x42a0 [ 2770.342688] ? kvm_vcpu_release+0xa0/0xa0 [ 2770.346847] ? trace_hardirqs_on+0x10/0x10 [ 2770.351087] ? check_preemption_disabled+0x35/0x240 [ 2770.356118] ? trace_hardirqs_on+0x10/0x10 [ 2770.360360] ? check_preemption_disabled+0x35/0x240 [ 2770.365390] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2770.370349] ? HARDIRQ_verbose+0x10/0x10 [ 2770.374417] ? kvm_vcpu_release+0xa0/0xa0 [ 2770.378574] do_vfs_ioctl+0x75a/0xfe0 [ 2770.382385] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2770.388021] ? ioctl_preallocate+0x1a0/0x1a0 [ 2770.392451] ? security_file_ioctl+0x76/0xb0 [ 2770.396870] ? security_file_ioctl+0x83/0xb0 [ 2770.401289] SyS_ioctl+0x7f/0xb0 [ 2770.404659] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2770.408644] do_syscall_64+0x1d5/0x640 [ 2770.412543] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2770.417736] RIP: 0033:0x45cb29 [ 2770.420924] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.428632] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2770.435913] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2770.443185] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2770.450458] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2770.457716] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/154) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x1407, 0x400, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r3, r6}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x7fff, 0x732, 0x3ff, 0x1}, 0x14) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_config_ext={0x7, 0xdb1d}, 0x40004, 0x0, 0x3fffffff, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x3f, 0x1, 0x7ff, 0xbdf]}) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:33 executing program 4: 17:11:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r1, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000300)=ANY=[]) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:modem_device_t:s0\x00', 0x24, 0x1) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 17:11:33 executing program 1: [ 2770.758442] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2770.782689] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2770.799134] CPU: 1 PID: 2415 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2770.806966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.816324] Call Trace: [ 2770.818921] dump_stack+0x1b2/0x283 [ 2770.822551] warn_alloc.cold+0x96/0x1af [ 2770.826522] ? zone_watermark_ok_safe+0x250/0x250 [ 2770.831371] ? wait_for_completion_io+0x10/0x10 [ 2770.836030] __alloc_pages_nodemask+0x2129/0x2730 [ 2770.840872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2770.845700] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2770.850442] ? check_preemption_disabled+0x35/0x240 [ 2770.855449] alloc_pages_current+0xe7/0x1e0 [ 2770.859758] kvm_mmu_create+0xd1/0x1c0 [ 2770.863631] kvm_arch_vcpu_init+0x282/0x890 [ 2770.867934] ? alloc_pages_current+0xef/0x1e0 [ 2770.872413] kvm_vcpu_init+0x26d/0x360 [ 2770.876285] vmx_create_vcpu+0xf5/0x2950 [ 2770.880328] ? __mutex_unlock_slowpath+0x75/0x780 [ 2770.885149] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2770.890147] ? alloc_loaded_vmcs+0x240/0x240 [ 2770.894543] kvm_vm_ioctl+0x4ae/0x1430 [ 2770.898413] ? __lock_acquire+0x655/0x42a0 [ 2770.902630] ? kvm_vcpu_release+0xa0/0xa0 [ 2770.906760] ? retint_kernel+0x2d/0x2d [ 2770.910629] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2770.915626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2770.920365] ? check_preemption_disabled+0x35/0x240 [ 2770.925366] ? retint_kernel+0x2d/0x2d [ 2770.929253] ? selinux_file_ioctl+0x19a/0x560 [ 2770.933731] ? selinux_file_ioctl+0x22c/0x560 [ 2770.938206] ? kvm_vcpu_release+0xa0/0xa0 [ 2770.942337] do_vfs_ioctl+0x75a/0xfe0 [ 2770.946122] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2770.951729] ? ioctl_preallocate+0x1a0/0x1a0 [ 2770.956127] ? security_file_ioctl+0x76/0xb0 [ 2770.960519] ? security_file_ioctl+0x83/0xb0 [ 2770.964910] SyS_ioctl+0x7f/0xb0 [ 2770.968265] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2770.972222] do_syscall_64+0x1d5/0x640 [ 2770.976183] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2770.981355] RIP: 0033:0x45cb29 [ 2770.984524] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2770.992215] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2770.999567] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 17:11:33 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() ptrace(0x10, 0x0) ptrace$getsig(0x4205, 0x0, 0x2, &(0x7f0000000300)) 17:11:33 executing program 4: 17:11:33 executing program 1: 17:11:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2, 0x3, 0x3}}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 2771.006820] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2771.014071] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2771.021323] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r2]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af7500000800f1babbbb000000000001000000004c27aaaa8ba1aa8fbb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = getpid() recvmsg$kcm(r3, &(0x7f0000000800)={&(0x7f0000000240)=@ax25={{0x3, @bcast}, [@null, @remote, @remote, @default, @rose, @rose, @netrom, @rose]}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f00000001c0)}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/163, 0xa3}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000002900)=""/247, 0xf7}], 0xa}, 0x40002003) ptrace$pokeuser(0x6, r5, 0xc2e5, 0xd9b) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pkey_alloc(0x0, 0x3) r6 = dup(r3) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_init_net_socket$ax25(0x3, 0x2, 0x8) 17:11:33 executing program 4: 17:11:33 executing program 4: [ 2771.154677] warn_alloc_show_mem: 1 callbacks suppressed [ 2771.154693] Mem-Info: [ 2771.182200] active_anon:583681 inactive_anon:25895 isolated_anon:0 [ 2771.182200] active_file:9957 inactive_file:44379 isolated_file:0 [ 2771.182200] unevictable:0 dirty:19 writeback:18 unstable:0 [ 2771.182200] slab_reclaimable:63663 slab_unreclaimable:241225 [ 2771.182200] mapped:67404 shmem:31010 pagetables:27130 bounce:0 [ 2771.182200] free:512228 free_pcp:288 free_cma:0 [ 2771.307289] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2771.398878] Node 1 active_anon:594492kB inactive_anon:64476kB active_file:39824kB inactive_file:177516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61812kB dirty:172kB writeback:72kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2771.461233] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.482273] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2771.504649] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2771.510874] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2771.516085] Node 0 DMA32 free:33272kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 2771.554602] lowmem_reserve[]: 0 0 0 0 0 [ 2771.558868] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2771.598523] lowmem_reserve[]: 0 0 0 0 0 [ 2771.602725] Node 1 Normal free:2006640kB min:53592kB low:66988kB high:80384kB active_anon:593992kB inactive_anon:64476kB active_file:39824kB inactive_file:177516kB unevictable:0kB writepending:244kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33792kB pagetables:63092kB bounce:0kB free_pcp:1396kB local_pcp:732kB free_cma:0kB [ 2771.634900] lowmem_reserve[]: 0 0 0 0 0 [ 2771.639916] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2771.657185] Node 0 DMA32: 1457*4kB (UMEH) 2290*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33140kB [ 2771.671946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2771.684276] Node 1 Normal: 346*4kB (UME) 356*8kB (UME) 20*16kB (UME) 20*32kB (UME) 3*64kB (ME) 4*128kB (U) 8*256kB (UME) 3*512kB (UE) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2006280kB [ 2771.702513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.712403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.722110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2771.731995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2771.741688] 55927 total pagecache pages [ 2771.745879] 0 pages in swap cache [ 2771.751004] Swap cache stats: add 0, delete 0, find 0/0 [ 2771.756524] Free swap = 0kB [ 2771.761212] Total swap = 0kB [ 2771.764389] 1965979 pages RAM [ 2771.769001] 0 pages HighMem/MovableOnly [ 2771.773095] 338456 pages reserved [ 2771.776645] 0 pages cma reserved [ 2771.794237] CPU: 0 PID: 2465 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2771.802082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.811454] Call Trace: [ 2771.814062] dump_stack+0x1b2/0x283 [ 2771.817706] warn_alloc.cold+0x96/0x1af [ 2771.821698] ? zone_watermark_ok_safe+0x250/0x250 [ 2771.826582] ? wait_for_completion_io+0x10/0x10 [ 2771.831271] __alloc_pages_nodemask+0x2129/0x2730 [ 2771.836139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.840995] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2771.845865] ? HARDIRQ_verbose+0x10/0x10 [ 2771.849948] ? do_raw_spin_unlock+0x164/0x250 [ 2771.854453] alloc_pages_current+0xe7/0x1e0 [ 2771.858807] kvm_mmu_create+0xd1/0x1c0 [ 2771.862709] kvm_arch_vcpu_init+0x282/0x890 [ 2771.867042] ? alloc_pages_current+0xef/0x1e0 [ 2771.871550] kvm_vcpu_init+0x26d/0x360 [ 2771.875452] vmx_create_vcpu+0xf5/0x2950 [ 2771.879526] ? __mutex_unlock_slowpath+0x75/0x780 [ 2771.884376] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2771.889408] ? alloc_loaded_vmcs+0x240/0x240 [ 2771.893833] kvm_vm_ioctl+0x4ae/0x1430 [ 2771.897733] ? __lock_acquire+0x655/0x42a0 [ 2771.901977] ? kvm_vcpu_release+0xa0/0xa0 [ 2771.906139] ? trace_hardirqs_on+0x10/0x10 [ 2771.910379] ? check_preemption_disabled+0x35/0x240 [ 2771.915406] ? trace_hardirqs_on+0x10/0x10 [ 2771.919645] ? check_preemption_disabled+0x35/0x240 [ 2771.924673] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2771.929618] ? HARDIRQ_verbose+0x10/0x10 [ 2771.933689] ? kvm_vcpu_release+0xa0/0xa0 [ 2771.937848] do_vfs_ioctl+0x75a/0xfe0 [ 2771.941665] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2771.947306] ? ioctl_preallocate+0x1a0/0x1a0 [ 2771.951742] ? security_file_ioctl+0x76/0xb0 [ 2771.956166] ? security_file_ioctl+0x83/0xb0 [ 2771.960593] SyS_ioctl+0x7f/0xb0 [ 2771.963976] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2771.967971] do_syscall_64+0x1d5/0x640 [ 2771.971886] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2771.977088] RIP: 0033:0x45cb29 [ 2771.980297] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2771.988023] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2771.995303] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2772.002581] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2772.009863] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2772.017146] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 17:11:34 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:34 executing program 1: 17:11:34 executing program 4: 17:11:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_config_ext={0x3f, 0x3ff}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) accept$unix(r0, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=r5], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000500)={r5, r7}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000300)=0x80000001, 0x4) 17:11:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') recvfrom$rxrpc(r5, &(0x7f0000000300)=""/31, 0x1f, 0x40000002, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r4, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4}, &(0x7f00000000c0)=0x8) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:11:34 executing program 1: 17:11:34 executing program 4: 17:11:35 executing program 1: 17:11:35 executing program 4: 17:11:35 executing program 1: 17:11:35 executing program 4: 17:11:35 executing program 1: [ 2772.659795] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2772.685274] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2772.695262] CPU: 0 PID: 2504 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2772.703107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.712483] Call Trace: [ 2772.715093] dump_stack+0x1b2/0x283 [ 2772.718745] warn_alloc.cold+0x96/0x1af [ 2772.722742] ? zone_watermark_ok_safe+0x250/0x250 [ 2772.727614] ? wait_for_completion_io+0x10/0x10 [ 2772.732417] __alloc_pages_nodemask+0x2129/0x2730 [ 2772.737301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2772.742167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2772.747042] ? HARDIRQ_verbose+0x10/0x10 [ 2772.751124] ? do_raw_spin_unlock+0x164/0x250 [ 2772.755644] alloc_pages_current+0xe7/0x1e0 [ 2772.759993] kvm_mmu_create+0xd1/0x1c0 [ 2772.763902] kvm_arch_vcpu_init+0x282/0x890 [ 2772.768238] ? alloc_pages_current+0xef/0x1e0 [ 2772.772748] kvm_vcpu_init+0x26d/0x360 [ 2772.776654] vmx_create_vcpu+0xf5/0x2950 [ 2772.780739] ? __mutex_unlock_slowpath+0x75/0x780 [ 2772.785595] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2772.790632] ? alloc_loaded_vmcs+0x240/0x240 [ 2772.795059] kvm_vm_ioctl+0x4ae/0x1430 [ 2772.798966] ? __lock_acquire+0x655/0x42a0 [ 2772.803214] ? kvm_vcpu_release+0xa0/0xa0 [ 2772.807378] ? trace_hardirqs_on+0x10/0x10 [ 2772.811625] ? check_preemption_disabled+0x35/0x240 [ 2772.816656] ? trace_hardirqs_on+0x10/0x10 [ 2772.820903] ? check_preemption_disabled+0x35/0x240 [ 2772.825946] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2772.830896] ? HARDIRQ_verbose+0x10/0x10 [ 2772.834973] ? kvm_vcpu_release+0xa0/0xa0 [ 2772.839136] do_vfs_ioctl+0x75a/0xfe0 [ 2772.842959] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2772.848598] ? ioctl_preallocate+0x1a0/0x1a0 [ 2772.853034] ? security_file_ioctl+0x76/0xb0 [ 2772.857465] ? security_file_ioctl+0x83/0xb0 [ 2772.861901] SyS_ioctl+0x7f/0xb0 [ 2772.865286] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2772.869280] do_syscall_64+0x1d5/0x640 [ 2772.873188] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2772.878387] RIP: 0033:0x45cb29 [ 2772.881591] RSP: 002b:00007f2d8ae5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2772.889313] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2772.896595] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2772.903880] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.911165] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2772.918447] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae5e6d4 17:11:35 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0xd, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 17:11:35 executing program 4: 17:11:35 executing program 1: [ 2772.964296] warn_alloc_show_mem: 1 callbacks suppressed [ 2772.964300] Mem-Info: [ 2772.979277] active_anon:583685 inactive_anon:25895 isolated_anon:0 [ 2772.979277] active_file:9958 inactive_file:44387 isolated_file:0 [ 2772.979277] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2772.979277] slab_reclaimable:63631 slab_unreclaimable:241653 [ 2772.979277] mapped:67402 shmem:31010 pagetables:27060 bounce:0 [ 2772.979277] free:511838 free_pcp:373 free_cma:0 [ 2773.153623] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2773.203672] Node 1 active_anon:594108kB inactive_anon:64476kB active_file:39832kB inactive_file:177544kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60704kB dirty:20kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2773.289364] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.334004] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2773.350757] Node 0 DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:232kB local_pcp:116kB free_cma:0kB [ 2773.381094] lowmem_reserve[]: 0 0 0 0 0 [ 2773.388395] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2773.423158] lowmem_reserve[]: 0 0 0 0 0 [ 2773.427315] Node 1 Normal free:2004056kB min:53592kB low:66988kB high:80384kB active_anon:594108kB inactive_anon:64476kB active_file:39832kB inactive_file:177544kB unevictable:0kB writepending:316kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33792kB pagetables:63108kB bounce:0kB free_pcp:1352kB local_pcp:716kB free_cma:0kB [ 2773.459894] lowmem_reserve[]: 0 0 0 0 0 [ 2773.463983] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2773.481531] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2773.497338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2773.508354] Node 1 Normal: 371*4kB (UME) 119*8kB (UME) 61*16kB (UME) 14*32kB (UME) 3*64kB (UME) 6*128kB (U) 4*256kB (UME) 3*512kB (UE) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2004180kB [ 2773.527169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2773.536095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2773.547855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2773.556792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2773.566757] 55936 total pagecache pages [ 2773.571668] 0 pages in swap cache [ 2773.575286] Swap cache stats: add 0, delete 0, find 0/0 [ 2773.582200] Free swap = 0kB [ 2773.585291] Total swap = 0kB [ 2773.590056] 1965979 pages RAM [ 2773.593357] 0 pages HighMem/MovableOnly [ 2773.599014] 338456 pages reserved [ 2773.602703] 0 pages cma reserved [ 2773.690017] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2773.706227] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2773.720783] CPU: 0 PID: 2546 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2773.728630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.738148] Call Trace: [ 2773.740771] dump_stack+0x1b2/0x283 [ 2773.744426] warn_alloc.cold+0x96/0x1af [ 2773.748418] ? zone_watermark_ok_safe+0x250/0x250 [ 2773.753288] ? wait_for_completion_io+0x10/0x10 [ 2773.757983] __alloc_pages_nodemask+0x2129/0x2730 [ 2773.762872] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2773.767738] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2773.772616] ? HARDIRQ_verbose+0x10/0x10 [ 2773.776703] ? do_raw_spin_unlock+0x164/0x250 [ 2773.781222] alloc_pages_current+0xe7/0x1e0 [ 2773.785570] kvm_mmu_create+0xd1/0x1c0 [ 2773.789482] kvm_arch_vcpu_init+0x282/0x890 [ 2773.793835] ? alloc_pages_current+0xef/0x1e0 [ 2773.798361] kvm_vcpu_init+0x26d/0x360 [ 2773.802269] vmx_create_vcpu+0xf5/0x2950 [ 2773.806360] ? __mutex_unlock_slowpath+0x75/0x780 [ 2773.811221] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2773.816262] ? alloc_loaded_vmcs+0x240/0x240 [ 2773.820698] kvm_vm_ioctl+0x4ae/0x1430 [ 2773.824612] ? __lock_acquire+0x655/0x42a0 [ 2773.828870] ? kvm_vcpu_release+0xa0/0xa0 [ 2773.833034] ? trace_hardirqs_on+0x10/0x10 [ 2773.837282] ? check_preemption_disabled+0x35/0x240 [ 2773.842322] ? trace_hardirqs_on+0x10/0x10 [ 2773.846565] ? check_preemption_disabled+0x35/0x240 [ 2773.851572] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2773.856488] ? HARDIRQ_verbose+0x10/0x10 [ 2773.860537] ? kvm_vcpu_release+0xa0/0xa0 [ 2773.864672] do_vfs_ioctl+0x75a/0xfe0 [ 2773.868460] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2773.874154] ? ioctl_preallocate+0x1a0/0x1a0 [ 2773.878553] ? security_file_ioctl+0x76/0xb0 [ 2773.882947] ? security_file_ioctl+0x83/0xb0 [ 2773.887368] SyS_ioctl+0x7f/0xb0 [ 2773.890722] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2773.894697] do_syscall_64+0x1d5/0x640 [ 2773.898582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2773.903754] RIP: 0033:0x45cb29 [ 2773.906935] RSP: 002b:00007f2d8ae1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2773.914639] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2773.921896] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000a [ 2773.929153] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.936407] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2773.943664] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae1c6d4 [ 2773.974613] Mem-Info: [ 2773.977165] active_anon:583663 inactive_anon:25895 isolated_anon:0 [ 2773.977165] active_file:9958 inactive_file:44394 isolated_file:0 [ 2773.977165] unevictable:0 dirty:6 writeback:0 unstable:0 [ 2773.977165] slab_reclaimable:63622 slab_unreclaimable:241439 [ 2773.977165] mapped:67407 shmem:31010 pagetables:27023 bounce:0 [ 2773.977165] free:512123 free_pcp:399 free_cma:0 [ 2774.011812] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2774.040524] Node 1 active_anon:593908kB inactive_anon:64476kB active_file:39832kB inactive_file:177572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60744kB dirty:76kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2774.069414] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2774.096540] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2774.101725] Node 0 DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:228kB local_pcp:116kB free_cma:0kB [ 2774.131966] lowmem_reserve[]: 0 0 0 0 0 [ 2774.136011] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2774.161823] lowmem_reserve[]: 0 0 0 0 0 [ 2774.165850] Node 1 Normal free:2004492kB min:53592kB low:66988kB high:80384kB active_anon:593908kB inactive_anon:64476kB active_file:39832kB inactive_file:177572kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33632kB pagetables:63004kB bounce:0kB free_pcp:1372kB local_pcp:728kB free_cma:0kB [ 2774.196259] lowmem_reserve[]: 0 0 0 0 0 [ 2774.200584] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2774.216758] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2774.231320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2774.242124] Node 1 Normal: 391*4kB (UME) 127*8kB (UME) 66*16kB (UME) 20*32kB (UME) 3*64kB (UME) 3*128kB (U) 4*256kB (UME) 3*512kB (UE) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2004212kB [ 2774.259437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2774.269072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.278252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:11:37 executing program 1: 17:11:37 executing program 4: 17:11:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000004c27aaaaaba10100"/31]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000300)}, 0x20000810) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80341, 0x0) write$9p(r3, &(0x7f0000000000)="0600000000000000c9b90003040500002a1ff7adf576f3790f61bc2c197cbf8d63735e09ab8383afd2de1a5587fe067fde18fa64249e1dbae8886cc4318c81733d8af5a72e2a678a537d233abc5afa4d18f8d88392cafbbf33b3aacfcf04f7b0bdd78687423a6bff", 0xae) r4 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004801) r5 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x1, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000440)={0xff, 0x0, {0xffffffffffffffff, 0x0, 0x982}, 0x80000001}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x26, &(0x7f0000000080)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 17:11:37 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x0) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="ba610066b80001c0fe66ef0f013226f20f51cb66b8010000000f01c10f1e4c00f3ab0f01cf0f350f01c50faf3d", 0x2d}], 0x1, 0x10, &(0x7f0000000100)=[@dstype0={0x6, 0x6}], 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2774.287783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2774.296371] 55948 total pagecache pages [ 2774.300735] 0 pages in swap cache [ 2774.304238] Swap cache stats: add 0, delete 0, find 0/0 [ 2774.310119] Free swap = 0kB [ 2774.313152] Total swap = 0kB [ 2774.316168] 1965979 pages RAM [ 2774.319342] 0 pages HighMem/MovableOnly [ 2774.323325] 338456 pages reserved [ 2774.326763] 0 pages cma reserved 17:11:37 executing program 4: 17:11:37 executing program 1: [ 2774.406961] dlm: no local IP address has been set [ 2774.428789] dlm: cannot start dlm lowcomms -107 17:11:37 executing program 4: 17:11:37 executing program 1: [ 2774.505835] dlm: no local IP address has been set [ 2774.536377] dlm: cannot start dlm lowcomms -107 17:11:37 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af75000008f7fffffbffffffff000001000000004c0d1c6b6fd056c99d8d"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x1, 0x40, 0x1, 0x1, 0xffff, 0x7, 0x2, 0x8, 0x80000001, 0x2749, 0x5, 0x2, 0x7ff, 0x1, 0x1, 0x0, {0x6, 0x5}, 0x7e, 0xfc}}) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) bind$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed={[], 0x12}}, 0x8) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000080)) getsockopt$sock_int(r2, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:37 executing program 1: 17:11:37 executing program 4: 17:11:37 executing program 4: [ 2774.657169] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2774.678399] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2774.694518] CPU: 1 PID: 2560 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2774.702366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.711738] Call Trace: [ 2774.714348] dump_stack+0x1b2/0x283 [ 2774.717995] warn_alloc.cold+0x96/0x1af [ 2774.721987] ? zone_watermark_ok_safe+0x250/0x250 [ 2774.726855] ? wait_for_completion_io+0x10/0x10 [ 2774.731565] __alloc_pages_nodemask+0x2129/0x2730 [ 2774.736443] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2774.741306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2774.746179] ? HARDIRQ_verbose+0x10/0x10 [ 2774.750255] ? kvm_vm_ioctl+0x43d/0x1430 [ 2774.754343] alloc_pages_current+0xe7/0x1e0 [ 2774.758690] kvm_mmu_create+0xd1/0x1c0 [ 2774.762597] kvm_arch_vcpu_init+0x282/0x890 [ 2774.766955] ? alloc_pages_current+0xef/0x1e0 [ 2774.771473] kvm_vcpu_init+0x26d/0x360 [ 2774.775380] vmx_create_vcpu+0xf5/0x2950 [ 2774.779462] ? __mutex_unlock_slowpath+0x75/0x780 [ 2774.784317] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2774.789353] ? alloc_loaded_vmcs+0x240/0x240 [ 2774.793782] kvm_vm_ioctl+0x4ae/0x1430 [ 2774.797689] ? __lock_acquire+0x655/0x42a0 [ 2774.801969] ? kvm_vcpu_release+0xa0/0xa0 [ 2774.806134] ? trace_hardirqs_on+0x10/0x10 [ 2774.810379] ? check_preemption_disabled+0x35/0x240 [ 2774.815410] ? trace_hardirqs_on+0x10/0x10 [ 2774.819656] ? check_preemption_disabled+0x35/0x240 [ 2774.824686] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2774.829636] ? HARDIRQ_verbose+0x10/0x10 [ 2774.833711] ? kvm_vcpu_release+0xa0/0xa0 [ 2774.837869] do_vfs_ioctl+0x75a/0xfe0 [ 2774.841684] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2774.847322] ? ioctl_preallocate+0x1a0/0x1a0 [ 2774.851750] ? security_file_ioctl+0x76/0xb0 [ 2774.856254] ? security_file_ioctl+0x83/0xb0 [ 2774.860677] SyS_ioctl+0x7f/0xb0 [ 2774.864049] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2774.868036] do_syscall_64+0x1d5/0x640 [ 2774.871941] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2774.877136] RIP: 0033:0x45cb29 [ 2774.880327] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.888044] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2774.895412] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2774.902765] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2774.910049] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2774.917332] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 17:11:37 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r3}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080025bbbbbb01c36290e0451074c86ed4bb59d380c20000dfff"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_int(r4, 0x1, 0x5, 0x0, &(0x7f0000000080)) 17:11:37 executing program 1: [ 2775.016168] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2775.039129] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2775.045297] CPU: 1 PID: 2564 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2775.053120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.062607] Call Trace: [ 2775.065213] dump_stack+0x1b2/0x283 [ 2775.068856] warn_alloc.cold+0x96/0x1af [ 2775.072835] ? zone_watermark_ok_safe+0x250/0x250 [ 2775.077707] ? wait_for_completion_io+0x10/0x10 [ 2775.082399] __alloc_pages_nodemask+0x2129/0x2730 [ 2775.087272] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2775.092130] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2775.096982] ? retint_kernel+0x2d/0x2d [ 2775.100876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2775.105624] ? retint_kernel+0x2d/0x2d [ 2775.109516] alloc_pages_current+0xe7/0x1e0 [ 2775.113838] kvm_mmu_create+0xd1/0x1c0 [ 2775.117857] kvm_arch_vcpu_init+0x282/0x890 [ 2775.122183] ? alloc_pages_current+0xef/0x1e0 [ 2775.126673] kvm_vcpu_init+0x26d/0x360 [ 2775.130554] vmx_create_vcpu+0xf5/0x2950 [ 2775.134606] ? __mutex_unlock_slowpath+0x75/0x780 [ 2775.139437] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2775.144447] ? alloc_loaded_vmcs+0x240/0x240 [ 2775.148848] kvm_vm_ioctl+0x4ae/0x1430 [ 2775.152737] ? __lock_acquire+0x655/0x42a0 [ 2775.156967] ? kvm_vcpu_release+0xa0/0xa0 [ 2775.161108] ? retint_kernel+0x2d/0x2d [ 2775.164982] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2775.169986] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2775.174737] ? check_preemption_disabled+0x35/0x240 [ 2775.179743] ? retint_kernel+0x2d/0x2d [ 2775.183634] ? selinux_file_ioctl+0x83/0x560 [ 2775.188057] ? selinux_file_ioctl+0x42b/0x560 [ 2775.192562] ? kvm_vcpu_release+0xa0/0xa0 [ 2775.196718] do_vfs_ioctl+0x75a/0xfe0 [ 2775.200513] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2775.206124] ? ioctl_preallocate+0x1a0/0x1a0 [ 2775.210525] ? security_file_ioctl+0x76/0xb0 [ 2775.214918] ? security_file_ioctl+0x83/0xb0 [ 2775.219310] SyS_ioctl+0x7f/0xb0 [ 2775.222660] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2775.226623] do_syscall_64+0x1d5/0x640 [ 2775.230503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2775.235678] RIP: 0033:0x45cb29 [ 2775.238850] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.246544] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2775.253801] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 17:11:38 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2775.261055] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2775.268310] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2775.275564] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2775.302774] warn_alloc_show_mem: 1 callbacks suppressed [ 2775.302811] Mem-Info: [ 2775.311683] active_anon:583656 inactive_anon:25895 isolated_anon:0 [ 2775.311683] active_file:9959 inactive_file:44403 isolated_file:0 [ 2775.311683] unevictable:0 dirty:47 writeback:0 unstable:0 [ 2775.311683] slab_reclaimable:63507 slab_unreclaimable:241879 [ 2775.311683] mapped:67418 shmem:31010 pagetables:27076 bounce:0 [ 2775.311683] free:511670 free_pcp:327 free_cma:0 [ 2775.346604] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2775.375506] Node 1 active_anon:593988kB inactive_anon:64476kB active_file:39832kB inactive_file:177628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60776kB dirty:216kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2775.404584] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.433341] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2775.439206] Node 0 DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:236kB local_pcp:128kB free_cma:0kB [ 2775.473995] lowmem_reserve[]: 0 0 0 0 0 [ 2775.479000] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2775.505565] lowmem_reserve[]: 0 0 0 0 0 [ 2775.511102] Node 1 Normal free:2002828kB min:53592kB low:66988kB high:80384kB active_anon:593988kB inactive_anon:64476kB active_file:39832kB inactive_file:177628kB unevictable:0kB writepending:220kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33888kB pagetables:63040kB bounce:0kB free_pcp:1024kB local_pcp:336kB free_cma:0kB [ 2775.542953] lowmem_reserve[]: 0 0 0 0 0 [ 2775.548244] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2775.566169] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2775.581463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2775.593141] Node 1 Normal: 481*4kB (UME) 84*8kB (ME) 95*16kB (UME) 15*32kB (UME) 1*64kB (E) 1*128kB (U) 2*256kB (ME) 1*512kB (E) 14*1024kB (UME) 6*2048kB (U) 481*4096kB (M) = 2002612kB [ 2775.610588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2775.620160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2775.629769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2775.639309] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2775.639361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2775.654026] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2775.664132] CPU: 0 PID: 2571 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2775.672084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.681452] Call Trace: [ 2775.684045] dump_stack+0x1b2/0x283 [ 2775.687669] warn_alloc.cold+0x96/0x1af [ 2775.691635] ? zone_watermark_ok_safe+0x250/0x250 [ 2775.696473] ? wait_for_completion_io+0x10/0x10 [ 2775.701135] __alloc_pages_nodemask+0x2129/0x2730 [ 2775.705982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2775.710815] ? retint_kernel+0x2d/0x2d [ 2775.714707] alloc_pages_current+0xe7/0x1e0 [ 2775.719026] kvm_mmu_create+0xd1/0x1c0 [ 2775.722906] kvm_arch_vcpu_init+0x282/0x890 [ 2775.727218] ? alloc_pages_current+0xef/0x1e0 [ 2775.731707] kvm_vcpu_init+0x26d/0x360 [ 2775.735586] vmx_create_vcpu+0xf5/0x2950 [ 2775.739650] ? __mutex_unlock_slowpath+0x75/0x780 [ 2775.744484] ? alloc_loaded_vmcs+0x240/0x240 [ 2775.748887] kvm_vm_ioctl+0x4ae/0x1430 [ 2775.752767] ? __lock_acquire+0x655/0x42a0 [ 2775.756992] ? kvm_vcpu_release+0xa0/0xa0 [ 2775.761129] ? retint_kernel+0x2d/0x2d [ 2775.765009] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2775.770026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2775.774782] ? check_preemption_disabled+0x35/0x240 [ 2775.779788] ? retint_kernel+0x2d/0x2d [ 2775.783668] ? do_vfs_ioctl+0x76/0xfe0 [ 2775.787543] ? kvm_vcpu_release+0xa0/0xa0 [ 2775.791677] do_vfs_ioctl+0x75a/0xfe0 [ 2775.795467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2775.800211] ? ioctl_preallocate+0x1a0/0x1a0 [ 2775.804641] ? check_preemption_disabled+0x35/0x240 [ 2775.809647] ? retint_kernel+0x2d/0x2d [ 2775.813523] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2775.817509] ? security_file_ioctl+0x83/0xb0 [ 2775.821906] SyS_ioctl+0x7f/0xb0 [ 2775.825262] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2775.829225] do_syscall_64+0x1d5/0x640 [ 2775.833108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2775.838287] RIP: 0033:0x45cb29 [ 2775.841462] RSP: 002b:00007f2d8ae5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2775.849158] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2775.856416] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2775.863673] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.870931] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2775.878188] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae5e6d4 [ 2775.886462] 55957 total pagecache pages [ 2775.892685] 0 pages in swap cache [ 2775.896588] Swap cache stats: add 0, delete 0, find 0/0 [ 2775.902644] Free swap = 0kB [ 2775.905917] Total swap = 0kB [ 2775.909514] 1965979 pages RAM [ 2775.912809] 0 pages HighMem/MovableOnly [ 2775.917201] 338456 pages reserved [ 2775.920905] 0 pages cma reserved 17:11:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x8f940, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0xc, r3, 0x12) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)={0x4, "b61499c3"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:38 executing program 4: 17:11:38 executing program 1: 17:11:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="00004000fd79a78960918706020000000178bfa99a99aa7bde8080e4dd361e82d12bebb9000000300000000024ea4c675c0e92c68e1378d21b8a726bd8f2a2c1faba6de1976f1340c76169e9e8daf9814dc7c5196335a4c0d4efa9a90000000000002d125f6277843aff61001ff04beb070a820e2e23e32f65c5054c273b967c8c753e9d3fb416c54bd2fd18027bc32e5043156fde3adda7e7c09945e9610ba3a5d6530473366af9a4b06a2ac8ae49ec79136b50eaf76817b7dc0537e5bdff14441eff8b048826f69fe079bda600396ec2e844b917f9235751eff30af675145e392267c878922e0fcb4188f21933f2704b0d143abea1c5fa86e0500618919990aea54b6bdfbb"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) ioctl$KDENABIO(r0, 0x4b36) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 17:11:38 executing program 3: r0 = socket$kcm(0x10, 0x7, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:38 executing program 4: 17:11:38 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x1024, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000280)=""/129) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1, r4}) getsockopt$sock_int(r1, 0x1, 0x2d, 0x0, &(0x7f0000000400)) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000140)=0xfb) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) 17:11:38 executing program 4: 17:11:38 executing program 1: 17:11:38 executing program 4: 17:11:38 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:38 executing program 1: [ 2776.222118] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2776.241654] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2776.249557] CPU: 0 PID: 2628 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2776.257393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.266760] Call Trace: [ 2776.269380] dump_stack+0x1b2/0x283 [ 2776.273026] warn_alloc.cold+0x96/0x1af [ 2776.277013] ? zone_watermark_ok_safe+0x250/0x250 [ 2776.281886] ? wait_for_completion_io+0x10/0x10 [ 2776.286577] __alloc_pages_nodemask+0x2129/0x2730 [ 2776.291455] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.296319] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.301190] ? HARDIRQ_verbose+0x10/0x10 [ 2776.305275] ? do_raw_spin_unlock+0x164/0x250 [ 2776.309790] alloc_pages_current+0xe7/0x1e0 [ 2776.314134] kvm_mmu_create+0xd1/0x1c0 [ 2776.318039] kvm_arch_vcpu_init+0x282/0x890 [ 2776.322379] ? alloc_pages_current+0xef/0x1e0 [ 2776.326897] kvm_vcpu_init+0x26d/0x360 [ 2776.330821] vmx_create_vcpu+0xf5/0x2950 [ 2776.334906] ? __mutex_unlock_slowpath+0x75/0x780 [ 2776.339762] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2776.344800] ? alloc_loaded_vmcs+0x240/0x240 [ 2776.349239] kvm_vm_ioctl+0x4ae/0x1430 [ 2776.353150] ? __lock_acquire+0x655/0x42a0 [ 2776.357407] ? kvm_vcpu_release+0xa0/0xa0 [ 2776.361576] ? trace_hardirqs_on+0x10/0x10 [ 2776.365833] ? check_preemption_disabled+0x35/0x240 [ 2776.370872] ? trace_hardirqs_on+0x10/0x10 [ 2776.375122] ? check_preemption_disabled+0x35/0x240 [ 2776.380160] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2776.385121] ? HARDIRQ_verbose+0x10/0x10 [ 2776.389208] ? kvm_vcpu_release+0xa0/0xa0 [ 2776.393378] do_vfs_ioctl+0x75a/0xfe0 [ 2776.397207] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2776.402851] ? ioctl_preallocate+0x1a0/0x1a0 [ 2776.407285] ? security_file_ioctl+0x76/0xb0 [ 2776.411701] ? security_file_ioctl+0x83/0xb0 [ 2776.416122] SyS_ioctl+0x7f/0xb0 [ 2776.419493] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2776.423480] do_syscall_64+0x1d5/0x640 [ 2776.427401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2776.432585] RIP: 0033:0x45cb29 [ 2776.435765] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2776.443464] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2776.450730] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2776.457995] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2776.465251] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2776.472506] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2776.492441] warn_alloc_show_mem: 1 callbacks suppressed [ 2776.492445] Mem-Info: [ 2776.500334] active_anon:583709 inactive_anon:25895 isolated_anon:0 [ 2776.500334] active_file:9959 inactive_file:44412 isolated_file:0 [ 2776.500334] unevictable:0 dirty:54 writeback:4 unstable:0 [ 2776.500334] slab_reclaimable:63467 slab_unreclaimable:242120 [ 2776.500334] mapped:67412 shmem:31010 pagetables:27104 bounce:0 [ 2776.500334] free:511393 free_pcp:311 free_cma:0 [ 2776.534577] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2776.563314] Node 1 active_anon:594104kB inactive_anon:64476kB active_file:39832kB inactive_file:177648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60756kB dirty:232kB writeback:16kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2776.591843] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.618713] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2776.623764] Node 0 DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:236kB local_pcp:108kB free_cma:0kB [ 2776.652954] lowmem_reserve[]: 0 0 0 0 0 [ 2776.657041] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.682535] lowmem_reserve[]: 0 0 0 0 0 [ 2776.686545] Node 1 Normal free:2002600kB min:53592kB low:66988kB high:80384kB active_anon:594104kB inactive_anon:64476kB active_file:39832kB inactive_file:177648kB unevictable:0kB writepending:300kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33824kB pagetables:63284kB bounce:0kB free_pcp:1020kB local_pcp:384kB free_cma:0kB [ 2776.716966] lowmem_reserve[]: 0 0 0 0 0 [ 2776.720973] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2776.737124] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2776.751636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2776.762436] Node 1 Normal: 544*4kB (UME) 338*8kB (UME) 42*16kB (UME) 20*32kB (UME) 4*64kB (UME) 3*128kB (UM) 3*256kB (UME) 2*512kB (ME) 11*1024kB (UE) 6*2048kB (U) 481*4096kB (M) = 2002352kB [ 2776.780003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.789057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.797736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.806582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.815243] 55969 total pagecache pages [ 2776.819322] 0 pages in swap cache [ 2776.822791] Swap cache stats: add 0, delete 0, find 0/0 [ 2776.829251] Free swap = 0kB [ 2776.832290] Total swap = 0kB [ 2776.835320] 1965979 pages RAM [ 2776.840138] 0 pages HighMem/MovableOnly [ 2776.844133] 338456 pages reserved [ 2776.848589] 0 pages cma reserved [ 2776.858323] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2776.881063] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2776.886545] CPU: 1 PID: 2667 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2776.894357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.903718] Call Trace: [ 2776.906305] dump_stack+0x1b2/0x283 [ 2776.909928] warn_alloc.cold+0x96/0x1af [ 2776.913893] ? zone_watermark_ok_safe+0x250/0x250 [ 2776.918733] ? wait_for_completion_io+0x10/0x10 [ 2776.923507] __alloc_pages_nodemask+0x2129/0x2730 [ 2776.928364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.933203] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2776.938049] ? HARDIRQ_verbose+0x10/0x10 [ 2776.942105] ? do_raw_spin_unlock+0x164/0x250 [ 2776.946603] alloc_pages_current+0xe7/0x1e0 [ 2776.950939] kvm_mmu_create+0xd1/0x1c0 [ 2776.954837] kvm_arch_vcpu_init+0x282/0x890 [ 2776.959156] ? alloc_pages_current+0xef/0x1e0 [ 2776.963654] kvm_vcpu_init+0x26d/0x360 [ 2776.967541] vmx_create_vcpu+0xf5/0x2950 [ 2776.971602] ? __mutex_unlock_slowpath+0x75/0x780 [ 2776.976441] ? alloc_loaded_vmcs+0x240/0x240 [ 2776.980851] kvm_vm_ioctl+0x4ae/0x1430 [ 2776.984748] ? __lock_acquire+0x655/0x42a0 [ 2776.988980] ? kvm_vcpu_release+0xa0/0xa0 [ 2776.993143] ? trace_hardirqs_on+0x10/0x10 [ 2776.997398] ? check_preemption_disabled+0x35/0x240 [ 2777.002439] ? trace_hardirqs_on+0x10/0x10 [ 2777.006687] ? check_preemption_disabled+0x35/0x240 [ 2777.011697] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2777.016626] ? HARDIRQ_verbose+0x10/0x10 [ 2777.020689] ? kvm_vcpu_release+0xa0/0xa0 [ 2777.024834] do_vfs_ioctl+0x75a/0xfe0 [ 2777.028633] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2777.034256] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.038672] ? security_file_ioctl+0x76/0xb0 [ 2777.043084] ? security_file_ioctl+0x83/0xb0 [ 2777.047483] SyS_ioctl+0x7f/0xb0 [ 2777.050842] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2777.054810] do_syscall_64+0x1d5/0x640 [ 2777.058693] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.063873] RIP: 0033:0x45cb29 [ 2777.067051] RSP: 002b:00007f2d8ae1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.074873] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 17:11:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c67aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000240)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x306, @local}, 0x40, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 'team_slave_0\x00'}) ptrace$pokeuser(0x6, r1, 0xc2e5, 0xd9b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17:11:39 executing program 4: 17:11:39 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x11, 0xb, 0x0) sendmsg(r0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:39 executing program 1: 17:11:39 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2777.082132] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2777.089392] RBP: 000000000078c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.096657] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2777.103924] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae1c6d4 17:11:39 executing program 4: 17:11:39 executing program 1: 17:11:39 executing program 4: 17:11:39 executing program 1: 17:11:40 executing program 3: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000084) r3 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r3, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:40 executing program 1: [ 2777.488237] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2777.501464] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2777.519081] CPU: 1 PID: 2686 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2777.526910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.536275] Call Trace: [ 2777.538870] dump_stack+0x1b2/0x283 [ 2777.542520] warn_alloc.cold+0x96/0x1af [ 2777.546516] ? zone_watermark_ok_safe+0x250/0x250 [ 2777.551384] ? wait_for_completion_io+0x10/0x10 [ 2777.556077] __alloc_pages_nodemask+0x2129/0x2730 [ 2777.560942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2777.565792] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2777.570665] alloc_pages_current+0xe7/0x1e0 [ 2777.575006] kvm_mmu_create+0xd1/0x1c0 [ 2777.578910] kvm_arch_vcpu_init+0x282/0x890 [ 2777.583240] ? alloc_pages_current+0xef/0x1e0 [ 2777.587746] kvm_vcpu_init+0x26d/0x360 [ 2777.591623] vmx_create_vcpu+0xf5/0x2950 [ 2777.595686] ? __mutex_unlock_slowpath+0x75/0x780 [ 2777.600541] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2777.605574] ? alloc_loaded_vmcs+0x240/0x240 [ 2777.609983] kvm_vm_ioctl+0x4ae/0x1430 [ 2777.613854] ? __lock_acquire+0x655/0x42a0 [ 2777.618084] ? kvm_vcpu_release+0xa0/0xa0 [ 2777.622227] ? retint_kernel+0x2d/0x2d [ 2777.626103] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2777.631110] ? trace_hardirqs_on+0x10/0x10 [ 2777.635333] ? check_preemption_disabled+0x35/0x240 [ 2777.640347] ? retint_kernel+0x2d/0x2d [ 2777.644243] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2777.649311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2777.654053] ? kvm_vcpu_release+0xa0/0xa0 [ 2777.658193] do_vfs_ioctl+0x75a/0xfe0 [ 2777.661999] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2777.667633] ? ioctl_preallocate+0x1a0/0x1a0 [ 2777.672050] ? security_file_ioctl+0x76/0xb0 [ 2777.676451] ? security_file_ioctl+0x83/0xb0 [ 2777.680861] SyS_ioctl+0x7f/0xb0 [ 2777.684228] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2777.688203] do_syscall_64+0x1d5/0x640 [ 2777.692085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2777.697270] RIP: 0033:0x45cb29 [ 2777.700455] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2777.708160] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2777.715413] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2777.722670] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2777.729926] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2777.737194] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2777.746655] warn_alloc_show_mem: 1 callbacks suppressed [ 2777.746712] Mem-Info: [ 2777.754697] active_anon:583742 inactive_anon:25897 isolated_anon:0 [ 2777.754697] active_file:9959 inactive_file:44426 isolated_file:0 [ 2777.754697] unevictable:0 dirty:28 writeback:0 unstable:0 [ 2777.754697] slab_reclaimable:63431 slab_unreclaimable:241812 [ 2777.754697] mapped:67460 shmem:31010 pagetables:27141 bounce:0 [ 2777.754697] free:511606 free_pcp:358 free_cma:0 [ 2777.789351] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2777.817642] Node 1 active_anon:594236kB inactive_anon:64484kB active_file:39840kB inactive_file:177696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60952kB dirty:120kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2777.846674] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2777.873669] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2777.879871] Node 0 DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:240kB local_pcp:128kB free_cma:0kB [ 2777.909485] lowmem_reserve[]: 0 0 0 0 0 [ 2777.913715] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2777.939492] lowmem_reserve[]: 0 0 0 0 0 [ 2777.943683] Node 1 Normal free:2003904kB min:53592kB low:66988kB high:80384kB active_anon:594240kB inactive_anon:64480kB active_file:39840kB inactive_file:177696kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33824kB pagetables:63400kB bounce:0kB free_pcp:1220kB local_pcp:496kB free_cma:0kB [ 2777.974633] lowmem_reserve[]: 0 0 0 0 0 [ 2777.978954] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2777.996071] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2778.012771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2778.025070] Node 1 Normal: 571*4kB (UME) 134*8kB (UME) 80*16kB (UME) 56*32kB (UME) 4*64kB (ME) 10*128kB (UM) 6*256kB (UME) 1*512kB (E) 11*1024kB (UE) 6*2048kB (U) 481*4096kB (M) = 2003740kB [ 2778.043639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2778.053165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2778.062466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2778.072136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2778.081777] 55979 total pagecache pages [ 2778.085776] 0 pages in swap cache [ 2778.090351] Swap cache stats: add 0, delete 0, find 0/0 [ 2778.096328] Free swap = 0kB [ 2778.099972] Total swap = 0kB [ 2778.102862] syz-executor.5: page allocation failure: order:0 [ 2778.102993] 1965979 pages RAM [ 2778.102999] 0 pages HighMem/MovableOnly [ 2778.116619] 338456 pages reserved [ 2778.120082] 0 pages cma reserved [ 2778.120472] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2778.135575] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2778.142414] CPU: 1 PID: 2708 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2778.150237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.159593] Call Trace: [ 2778.162172] dump_stack+0x1b2/0x283 [ 2778.165800] warn_alloc.cold+0x96/0x1af [ 2778.169769] ? zone_watermark_ok_safe+0x250/0x250 [ 2778.174609] ? wait_for_completion_io+0x10/0x10 [ 2778.179284] __alloc_pages_nodemask+0x2129/0x2730 [ 2778.184225] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.189060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.193899] ? HARDIRQ_verbose+0x10/0x10 [ 2778.197963] ? do_raw_spin_unlock+0x164/0x250 [ 2778.202465] alloc_pages_current+0xe7/0x1e0 [ 2778.206794] kvm_mmu_create+0xd1/0x1c0 [ 2778.210679] kvm_arch_vcpu_init+0x282/0x890 [ 2778.214984] ? alloc_pages_current+0xef/0x1e0 [ 2778.219489] kvm_vcpu_init+0x26d/0x360 [ 2778.223374] vmx_create_vcpu+0xf5/0x2950 [ 2778.227431] ? __mutex_unlock_slowpath+0x75/0x780 [ 2778.232271] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2778.237284] ? alloc_loaded_vmcs+0x240/0x240 [ 2778.241690] kvm_vm_ioctl+0x4ae/0x1430 [ 2778.245563] ? __lock_acquire+0x655/0x42a0 [ 2778.249785] ? kvm_vcpu_release+0xa0/0xa0 [ 2778.253916] ? trace_hardirqs_on+0x10/0x10 [ 2778.258138] ? check_preemption_disabled+0x35/0x240 [ 2778.263150] ? trace_hardirqs_on+0x10/0x10 [ 2778.267377] ? check_preemption_disabled+0x35/0x240 [ 2778.272396] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2778.277331] ? HARDIRQ_verbose+0x10/0x10 [ 2778.281384] ? kvm_vcpu_release+0xa0/0xa0 [ 2778.285517] do_vfs_ioctl+0x75a/0xfe0 [ 2778.289305] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2778.294911] ? ioctl_preallocate+0x1a0/0x1a0 [ 2778.299328] ? security_file_ioctl+0x76/0xb0 [ 2778.303730] ? security_file_ioctl+0x83/0xb0 [ 2778.308132] SyS_ioctl+0x7f/0xb0 [ 2778.311487] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2778.315447] do_syscall_64+0x1d5/0x640 [ 2778.319332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2778.324517] RIP: 0033:0x45cb29 [ 2778.327694] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.335403] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 17:11:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) flock(r2, 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:41 executing program 4: 17:11:41 executing program 1: 17:11:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1c}}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={0x9dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xd442}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x1241, 0xe0, 0x40, 0x80000000}, {0x4, 0x0, 0x1f, 0x401}, {0x1ca, 0x40, 0xda, 0x4}, {0x0, 0x3, 0x8, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7ab2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff8000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xca}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xf092, 0x7f, 0xff, 0xffff}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x9dc}, 0x1, 0x0, 0x0, 0x80}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r6 = getpid() ptrace$pokeuser(0x6, r6, 0xc2e5, 0xd9b) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 17:11:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) sendmmsg$alg(r0, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="ff1c147061627abb8aa809aa077defe121977f3141190f33c7c22f2075c2e4c6e410cbe46c04d82f41c62b5a3023f758dbbb7123dcbe1b323841882b5cd5dbf27f1c9336760f81ad9b3e2be0c6e2756035ea0a4580be5fec148b9cc7268131c5d8b84fca2eb14260faf5d699d28b2336f0be1f13c9676578fdbf70c739cd52d32537223cb08207146f8add3601dcccd2473ba881a1be78674bfcc01bbeb06ee4107974caf095d1d9370014", 0xab}, {&(0x7f00000000c0)="a790ce23ca7cd5ee12c90b014af40d05d9b8977afb32d358f9850071f7482b4c7bd8162895c02a7f50b5d32c604f2c0a4b364c440a7dd3d8de1f89deade3219c4cb7c7deee442a9739de32f125b3f3", 0x4f}, {&(0x7f0000000140)="4c97ac76de1870f124f25ceb1c3f340d0db85d44540553c0ea915e85fdbb8c8b", 0x20}, {&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="629413c27aada8168a5ce4a440e9695d039d455d2c6c1007d80e9c0499baeac3ff46f62999e79f1cb90001871a9ee68e84d7dd53f0c03382afdb9a459f85f2758daf800d2173b877d2f4c31a2f1057457e8ad015ed66a2860dead4e2246d10f42290bdbbebd8024c53fd08149b2564308d44b42317199451f7a9c9340583bc47a6f68a119026fd6c00f63c9d57af71d24f0142504c34ba3d5566149590c23767486ef1fb92183d5fd1af0bd3d9dc0c1403712d7c8d42fa5503fefd2f8daa4b0f75ea538ea394ec037617dcab40d65c0801ed6c40c877cc176af61f573befae2eb61a50de97c3d8f5a57c36b59938793e1a83e0a9", 0xf4}, {&(0x7f0000000440)="599d286f5b3d387367ad9af217b430d739cd68d409a105819cb48d1464774ed90865b66630da8c2e73dbd776237cb54bbeeafaaae9bb6198d9072add3007cbd9c5d0ac7deea86635930462ef4e4514b2906ecc1bce52ad3e50b9e2b5d3ce0b0417fdd0b04fa631295309c6ebd4b2385b8b34fde73f848c1dedfe1d558335f5d3a87f2d3014fb41a2f3bc93bd3b6a0cbd0297119d4f0b65a00b65385c7321ff4eeab12c442b5d1dfcba8954bae230a3212f4f52c39d95b9005a202b2a8737b3110a44eef2557c9745740a0b560ecf550e47495c1101cf411acb8a04cdde4ce4b41d5e9e0e553208e1dd8df24d8c6f6a050cabce", 0xf3}, {&(0x7f0000000540)="536eee6f6e4d6e2621fbb575551f21038e282104319825e37971b7897ae2f46f2971ae383429177ada71ed39acd6632a0185cd497cee4034cf9d12784e0d45669478572ee89502fb5df1d1a5f803143f2ffe46cb9ef408221675f42f52301ee814e1fd2c21911fb38799ef18fc9409285aa1a1e4cda42f8176218f74e274f0390f8e2df14e241740c33f3399d00181fa6f4f1d34f546ee6bd5118ca980b44ab2e1cf26cb9ae7aefb9d8e6dde31563dd5feda2ebae5467de6da7721df7446743bb5627a45596aa748d22a2e192335e80ba5ae22eadee7", 0xd6}, {&(0x7f0000000380)="0065074d038d7ae1c7d2b8be2e6d2864a705f0139117848c88c0c114165d054a51b5139a3c6505a3db31decf4399c129a75b72c06351cd0dba", 0x39}, {&(0x7f0000000640)="6adf876380cc648029f8fd10a32c9231ae2568dece74b587aa709eba38e7998cc3ccac66dee7041558173a860a87bab5bcb7b800e7080898a5483515c32e727ec72dc6d452974edbae9d4cb86e19caab47883d166f131c9ead6e575c7b8f981f", 0x60}, {&(0x7f00000006c0)="8bc06758ec05360faaf6552ef8321c7d5a7f8746da134e7d678369046771a0cd8b822a2e43babce29248574711264eba449ae139276f5db0e874d389bae82dc2ae2efc39f900a9ea144e941070b91489", 0x50}], 0xa, &(0x7f0000003dc0)=ANY=[@ANYBLOB="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"], 0x1108, 0x40085}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001940)="3652d1cf162420e13b87d1ba1c2c80c99908b8722a50c7cbb0382acba71e92a197963eb4851d77bc1df24e63e1a93f9e18f98911f943c68ad6cad303e33df7cba902b1fa7202fe1e490d2eee3e1be6c2dedef836b6dfe2b12e8fd027c3c17b470bd11784fc55551f87e67ee9e1a4fed1713b7446f40fa37a61c29ee824e72aa923cae148b312f8afd15132f93f86029027b80f31ed759f5f5f2720a777de369b5b272a16c7e1ae", 0xa7}, {&(0x7f00000003c0)="6fcc438f0d99b5aba9c67c1dbfbc0032ac64c3241ad453f240d972d681bffc691d220d", 0x23}], 0x2, 0x0, 0x0, 0x20000800}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a40)="3e2a4c7f267bf6c291a564f85843de3ed92ab4628543d9dd2099edc36945cd353fcb4f38c87a9d6afb0d8b9e", 0x2c}, {&(0x7f0000001a80)="270cf99f3e43707c38e150fae0a329ceb7f58debf6814a6767908c12fc5fd0ebb3d4f1c72fa70ac0d7f2208604553df27a7adae405f6bafa9527d6d32ed06235c76fa8efca2846de1e844dc653e6125c82e130fe6ee083da05455c04761034112945f143f1c95ee03045078b7eba45b507", 0x71}], 0x2, &(0x7f0000001b40)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x68, 0x117, 0x2, 0x51, "008fbd8612f453a42a964b4bfdb0f4d1f2fefa798f0de3146385eb2353502b20b9fa9c62f2eef3040b4c87b1515383fe97c5e55485d99d46971852c18484c4065b3165d03420c7478b649edc853487fc39"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x98, 0x4}, {0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c00)="0cc6bfefa129f5ae4f02e916aaafe2d042bdba3ae5356b24d13e1a783c6f18d12b06ad3caefbb24437a920082091ffafd118cb3fccabb3a4bd37d597dfd02c7a6b65685d0fb5033f0e2ebe86c9e025b7ba63fbc5ff86a60cae672b120a616eb65641f135c6c561896f3830a90ed0e873fe3bbf710b174f251dfa16f543a52e01dab7cc78af61f9977798f605560d27b4ae3b00b947d792da880712664ebdc4a97009a896b0d7196ea3b0bd3aaef08a27cb62c0694fec1e4d2d4845bd00af131a002de8b7abf3", 0xc6}, {&(0x7f0000001d00)="7d22d93232dc4e49cbc426b4693a10dd640baea7a9a3857e44cf3529d86fb7d28c99b594273f671dcf4ef41c4b706a5645e78f972d36cd8b7269ddbbadb19074bd", 0x41}, {&(0x7f0000001d80)="424ce7ee2c6e36cdd8c450d57919b0f85883e4f4b28afec9f2ce20cf7b049695fc2b1904d76a7061c8d00536778392dfa150fb18ef3bd9138dd2c8970c0d2e19de34d50f1391a7875b342aba04f14f2b", 0x50}, {&(0x7f0000001e00)="fb99a2d5f0b4e92b5087444cacf824d8fc2476300115fe2a030da22bb7996fce676f62cc6bab5593969932f8453d86d22aa86ec1059a577be2df008691680a86849aeed4ab0e0739e549df0487d5c119e66384237194dc10299d46e511821f5b89012930123fb647940b66ca0ac602f92d5cafcae8a96286761c826835", 0x7d}, {&(0x7f0000001e80)="825af40917f75b046ebe9551b633275dca334b67b07f82966413f6c3b6e528ce24a4e24247c07507b5a1439784681f35c8040176c1cf10377b971053b170fc4784501e5c2ad2e311d786cb6c34f7ef48c94837649b1089e6739100895b9c575d7fd40c8a37a85434a412fcb719dcdb916bb624e6fa7b48809930e7b11ba1a5409ccf0233d17d09832da31b9bfe0efe1c3bb5d3870a5cd8bb696aff80bcc4c94fdea960242bb35935d32315c2bdb64840e633ae2e781e4f12ca6c3111c971b7f13793057e7709da66aaa065c967b620c4ea805fee5a511bb5a0115cea66f68b185ad7994ae9d31e4c49594754b6", 0xed}, {&(0x7f0000001f80)="96497335476264d441ab01a96f39c8dcb0f9d45f2be241d91f6c22d875", 0x1d}, {&(0x7f0000001fc0)="2882143be1a9d2e30c8125e30e7add986773cafb3ecaee2647224da4b3410df431e50d312f660ea34ffb5e434797831f63b1bcac6967c252b49e7143858ebe45124877d2c565e2c176e3347316d77d6d8c997e613d0a", 0x56}], 0x7, &(0x7f00000020c0)=[@iv={0xb0, 0x117, 0x2, 0x95, "b19a04752ccdc929d5a812aa7a8ba293e550a96603d494e093ac0bbc3d9cb638f46789936d0a05d00b96cddefd465414f381f2f2cec6b39d7ad97da8366e01957de8dece27491ac1edfcb990ac57b6f5640eb2612f220cc1bb4be6e61fd89a4bf0fd47c705c83b8ddaab34956a9cf091f741341b5d8d5550a2447d6c3ce55e08e28acf883cd1079a5fe7fd2259eb85ffee25c85d8d"}, @op={0x18, 0x117, 0x3, 0x1}], 0xc8, 0x8001}, {0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000021c0)="f3b44180e370f11757bf4ae8e3b82ceb86acb8d094c3fbeb973c901bda17c4", 0x1f}, {&(0x7f0000002200)="26d39c96f55b152071e5ada3afb6c6690a4990b07c137ba556ccee386e3707a67a2e7c41a007528eca2069517f0b34eaa73d3548a0d8002ee0bfa12c6f69cffd7ad96928190e1011ea4bb0c84cbd2326fc0486726b044a55afa3e387534e", 0x5e}, {&(0x7f0000002280)="f0af0de48c662fa2efa7a565c9b3880be2cabb3a062a4fad04c0f03937f75c31d4465da334d3526a41315da3a90fd0d13f9f1d185408063d04cc80160789b5ec953ee39608fc0c0ae32f61388537ee9ff65d70d1311560ac7bffe7d63c661bcdacdaad329df6334eb91cd1456fae42b63666ae903c288ffc2fafc0679f856db99ee743878a9d32e4d3e908c41fe95b6b6245cef05005b211669e84c988d6eca344e8ef9b9435800f", 0xa8}, {&(0x7f0000002340)="700be2bd581cf033e069905c82d5baef4eb06036a3d32641aa5072a68798a60ea591107c", 0x24}, {&(0x7f0000002380)="a5c4b44234389c0475d2a4ef426484d59cbc6bd43ef9cee6e94ebd0e833f88ce9a0e26403f77f8eeffc4ab016abd8024ea2328b1b4bc72f69726c59275f66735c1565b5e2c9485b01e88993dc95f89505755b867675a756033fd81cca8f73549722b6c5da9fa7decabe9453df4207ba6a2f2ac349cb349c0091dcc3f7d1d7528abed9cd807", 0x85}, {&(0x7f0000002440)="2da78d9a2b7091e92c3685cf8f3a29233555d8d1e304ab7b01f74d5fe430074ac928fb641250689896d19cfde4dbe316ce9902eb766a0066ec0bc21878de186854a5b4b0e19c9f7da35b46a1a8f68ed2da692891b87672cd24c1a32f95680dd1c00ff50bd0e320797d2cf74770f978d12863f1f8472baec6ab60662b6c2ae6bb5f2e984552fde7d576bc1b748d1d1b5431615851a812f948d18853a76459d4e6aa76551b3556db1fc4f52346b125259b9db68a140cb44e30a0fd9ecd0880abaa65ce", 0xc2}, {&(0x7f0000002540)="a373a9d5c9a8e9294dfed630", 0xc}], 0x7, &(0x7f0000002600)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x3c, "7d47f5aa4538690d6c39f9a7ed12a73d01e44096d114580c34e86ecc830d3754cb7bf74a7d27f65a15a60e3a4d243361d47c94fa1a5c6d4d3503b84a"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xc8, 0x4}, {0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002700)="86b1ebd9a33be8a7632dd623b7d80ca9e3fdf507ce235b0e79a1d9dda350d8fa104ed470a74d23f575a817d0435e65502000c1b7d77d4f85df1730be38c10749cf0ab9548643a0a83838c8e95fb1e613f14d35fe99103f14ef807e17f3b0b442b6c6c7c2cd85f3bb9f1eba3744f4edfae8e365bed4b713c1f856b659137451460fff2d8680c987df14ea4e16c0b8dfda90dbf1704555a026b94ff6deaa707128186d890bdd21c65174a8d519ffe868dc318d5b0394e1170de4ef8daa4fbdcf51fc6c89c17cf43fe3aa09e36b782ab91d91103a58f1be56362ef7d9ea822b4fa38ed96896806001a86805c13324742f", 0xef}, {&(0x7f0000002800)="dd9bc92ef2f42e17de39f62c3901bc358a93749a46120d4f33b02cedb1f892785d1f755685a8b180fa15a0d54e3555d199cd0f71fb1e3b212e730813e2c12747d3a400e177462bcb80e9b34709e052174d209b0785994e081394d08829a0e0a0a7b7386127b777d23ab35fcab24cfffd0f4e767828a86894352ff98f5031e5120d686ac313c59609464bf0ba67ba1ea98794533cc4e581084cc129f695cbc43bf674", 0xa2}, {&(0x7f00000028c0)="580878db475dec67a585f1421ddc703b5b86e7e83b30a758479fd488fe99fa3d1a83d50026c212e2b0adb9e10368eeb5fdb85b45a9dfa599ee15f290d073a21adb", 0x41}, {&(0x7f0000002940)="f8782c78eabe8eaf0860726a019bfc2545f6269ff878578252c0ce5fd7d892c244182b09014fc2f8c5e4f02a93c5cbe45c81798e98643e7107da69458c4b765c9fe925949f0a39b55f04b6ed56bc098d2ffd0fa2d1428d25654907bb7846327b4319174e30e65aa8a82094dc91a39818b5ec6b9213fe87e2ece9c168ea87c240dfcb2278b051cb7a4bf321098be44ef5f28c6b73", 0x94}, {&(0x7f0000002a00)="05dd71d286a24a4271d880d28a6080ba83b4b68db8896eadd98aa9550b87bae0615e12a3c1a4fcb1c68482304064d67e907db898227991d0613bf844ff59f3bbefdb2d1c842bdc04ffdbebe5e90e0e669656838cb5dc393d0d451baf0cca941378b5ba7cafae546fb5581d31eca8ee42781099fa822fc5d07755b0570709c6b0fff45d0099235191dbcfb5684fb76502635f738620d380adacc22d81083b8fabc68da6fbfe0e835275331a51ca8a04ee00eefc1a4def962fe2d4c9a34225af4591a71e5aec1b4e95f4105a4db230abaa24a6c64aaf247e0766a0b84976e0d3c3f571d613890ba981d20fe2256d4e48881b578630", 0xf4}, {&(0x7f0000002b00)="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", 0x1000}], 0x6, &(0x7f0000003b80)=[@assoc={0x18, 0x117, 0x4, 0xfffffffe}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x20}, @assoc={0x18, 0x117, 0x4, 0x58}, @op={0x18}, @op={0x18}], 0xa8, 0x2000c000}], 0x6, 0x20008012) r1 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:41 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2778.342656] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2778.349907] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2778.357161] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2778.364418] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 17:11:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:11:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x5522, 0x0) [ 2778.459543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2778.608853] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2778.642278] syz-executor.4 cpuset=/ mems_allowed=0-1 17:11:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00', {0x2}}) [ 2778.655446] CPU: 0 PID: 2740 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 2778.655451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2778.671854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2778.681227] Call Trace: [ 2778.683827] dump_stack+0x1b2/0x283 [ 2778.687471] warn_alloc.cold+0x96/0x1af [ 2778.691460] ? zone_watermark_ok_safe+0x250/0x250 [ 2778.696328] ? wait_for_completion_io+0x10/0x10 [ 2778.701014] __alloc_pages_nodemask+0x2129/0x2730 [ 2778.705864] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.710696] ? mark_held_locks+0xa6/0xf0 [ 2778.714743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2778.719584] alloc_pages_current+0xe7/0x1e0 [ 2778.723893] kvm_mmu_create+0xd1/0x1c0 [ 2778.727769] kvm_arch_vcpu_init+0x282/0x890 [ 2778.732071] ? alloc_pages_current+0xef/0x1e0 [ 2778.736552] kvm_vcpu_init+0x26d/0x360 [ 2778.740425] vmx_create_vcpu+0xf5/0x2950 [ 2778.744471] ? __mutex_unlock_slowpath+0x75/0x780 [ 2778.749293] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2778.754293] ? alloc_loaded_vmcs+0x240/0x240 [ 2778.758686] kvm_vm_ioctl+0x4ae/0x1430 [ 2778.762560] ? __lock_acquire+0x655/0x42a0 [ 2778.766779] ? kvm_vcpu_release+0xa0/0xa0 [ 2778.770912] ? retint_kernel+0x2d/0x2d [ 2778.774797] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2778.779798] ? trace_hardirqs_on+0x10/0x10 [ 2778.784056] ? check_preemption_disabled+0x35/0x240 [ 2778.789052] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2778.793965] ? retint_kernel+0x2d/0x2d [ 2778.797855] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2778.802854] ? kvm_vcpu_release+0xa0/0xa0 [ 2778.806982] do_vfs_ioctl+0x75a/0xfe0 [ 2778.810765] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2778.816369] ? check_preemption_disabled+0x35/0x240 [ 2778.821371] ? ioctl_preallocate+0x1a0/0x1a0 [ 2778.825772] ? security_file_ioctl+0x76/0xb0 [ 2778.830168] ? security_file_ioctl+0x83/0xb0 [ 2778.834566] SyS_ioctl+0x7f/0xb0 [ 2778.837921] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2778.841888] do_syscall_64+0x1d5/0x640 [ 2778.845772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2778.850951] RIP: 0033:0x45cb29 17:11:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x26, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x2, @perf_config_ext={0x20, 0x3}, 0x44004, 0xbde, 0x0, 0x2, 0x10008, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3f7, 0x4, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x8ce4a4c769875e6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2778.854124] RSP: 002b:00007f660c21dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2778.861822] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2778.869080] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2778.876362] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2778.883620] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2778.890883] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f660c21e6d4 17:11:41 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0xd, 0xffffffffffffffff, 0x0) r1 = geteuid() r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r5, 0xd, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000500)={0xf143, 0x40, {r5}, {0xee01}, 0x9, 0x2}) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./bus\x00', r7, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(r9, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x63, &(0x7f0000000280)=[{&(0x7f0000000080)="2607fb4562fe77e14de5c2dd8d5315fd600e1af82b0d8b813fc84bda59f3c63e84b79f252ede5f153f2e0f18506d842502e5c12c796812ba8e7a9598ec5a92a5081625577fa0eba0fa2fd13388bc7f5e6de61599bf76fd6ee1a2677841f1567ec4875b72b313d071c93e6e3ce9e3d44a502cf19d4ae9ea79878a05251c57ce9d6c7188fd15334b1f6d847f85f225b703db3669e3e18fed4f263396b9b3ffb345caf703c203508277fa2d765a0f400dc5b29ef71831ebbe4b9e070793749ee814a49e85f8f4f4e72f3cc8ea63756308a5348f321f86b3c557ad36ae1df7ed371abeba936d", 0xe4}, {&(0x7f0000000180)="3121b9d13342dd553505139480814a16da04afd631d06227831862cfd5b2834943994bb46e64242662442d1fea7b59bf693caf5d4ccb0a", 0x37}, {&(0x7f00000001c0)="0ef7dc2a4fd48ddfda7177e38ad0ae2a4c0477aece8ea4da31ebbc2f564e1faef49dd42b37995e253839a627826f7025b52440f7262a5a1fd870512f8cf54f428b8774dbf6e89c997e041dc8f143286022ef7bf7c2d9c4ce6ad5241666c2f1ea016041f30811d5d1a4d1a01017ac09dd8ce562871703fe8ca3349b3c1772a554f9d8ee3daff8120240f2f5c81ce88f0e3934ddb458110fa8c75ad91845e40e04f4c591f92b758b350f662630ca830c4827065ec626ad8effbc28b11a", 0xbc}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, r3}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}], 0xe0, 0x44000}, 0x0) r10 = socket$kcm(0x10, 0x0, 0x10) getsockopt$sock_int(r10, 0x1, 0x9, 0x0, &(0x7f0000000400)) 17:11:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x501002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x9, 0x4) [ 2779.071055] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2779.084418] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2779.103364] CPU: 1 PID: 2758 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2779.111210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.120573] Call Trace: [ 2779.123179] dump_stack+0x1b2/0x283 [ 2779.126817] warn_alloc.cold+0x96/0x1af [ 2779.130796] ? zone_watermark_ok_safe+0x250/0x250 [ 2779.135651] ? wait_for_completion_io+0x10/0x10 [ 2779.140331] __alloc_pages_nodemask+0x2129/0x2730 [ 2779.145195] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2779.150039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2779.154899] ? HARDIRQ_verbose+0x10/0x10 [ 2779.158968] ? do_raw_spin_unlock+0x164/0x250 [ 2779.163469] alloc_pages_current+0xe7/0x1e0 [ 2779.167804] kvm_mmu_create+0xd1/0x1c0 [ 2779.171700] kvm_arch_vcpu_init+0x282/0x890 [ 2779.176029] ? alloc_pages_current+0xef/0x1e0 [ 2779.180536] kvm_vcpu_init+0x26d/0x360 [ 2779.184432] vmx_create_vcpu+0xf5/0x2950 [ 2779.188501] ? __mutex_unlock_slowpath+0x75/0x780 [ 2779.193355] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2779.198389] ? alloc_loaded_vmcs+0x240/0x240 [ 2779.202810] kvm_vm_ioctl+0x4ae/0x1430 [ 2779.206707] ? __lock_acquire+0x655/0x42a0 [ 2779.210952] ? kvm_vcpu_release+0xa0/0xa0 [ 2779.215105] ? trace_hardirqs_on+0x10/0x10 [ 2779.219345] ? check_preemption_disabled+0x35/0x240 [ 2779.221854] warn_alloc_show_mem: 1 callbacks suppressed [ 2779.221873] Mem-Info: [ 2779.224366] ? trace_hardirqs_on+0x10/0x10 [ 2779.224377] ? check_preemption_disabled+0x35/0x240 [ 2779.224390] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2779.230018] active_anon:583872 inactive_anon:25895 isolated_anon:0 [ 2779.230018] active_file:9961 inactive_file:44435 isolated_file:0 [ 2779.230018] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2779.230018] slab_reclaimable:63390 slab_unreclaimable:242234 [ 2779.230018] mapped:67466 shmem:31010 pagetables:27273 bounce:0 [ 2779.230018] free:510827 free_pcp:331 free_cma:0 [ 2779.232143] ? HARDIRQ_verbose+0x10/0x10 [ 2779.232155] ? kvm_vcpu_release+0xa0/0xa0 [ 2779.232169] do_vfs_ioctl+0x75a/0xfe0 [ 2779.248156] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2779.280433] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2779.280446] ? ioctl_preallocate+0x1a0/0x1a0 [ 2779.280464] ? security_file_ioctl+0x76/0xb0 [ 2779.280472] ? security_file_ioctl+0x83/0xb0 [ 2779.280483] SyS_ioctl+0x7f/0xb0 [ 2779.280508] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2779.280521] do_syscall_64+0x1d5/0x640 [ 2779.280541] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2779.280550] RIP: 0033:0x45cb29 [ 2779.280555] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2779.280566] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2779.280571] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2779.280577] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2779.280584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2779.280589] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2779.412762] Node 1 active_anon:594656kB inactive_anon:64476kB active_file:39844kB inactive_file:177736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60960kB dirty:148kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2779.441430] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2779.471454] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2779.481491] Node 0 DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:240kB local_pcp:112kB free_cma:0kB [ 2779.540393] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2779.564121] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2779.583715] CPU: 1 PID: 2726 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2779.591551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.600816] lowmem_reserve[]: [ 2779.600907] Call Trace: [ 2779.600911] 0 0 [ 2779.604015] dump_stack+0x1b2/0x283 [ 2779.604031] warn_alloc.cold+0x96/0x1af [ 2779.604042] ? zone_watermark_ok_safe+0x250/0x250 [ 2779.610744] 0 [ 2779.612204] ? wait_for_completion_io+0x10/0x10 [ 2779.612222] __alloc_pages_nodemask+0x2129/0x2730 [ 2779.616304] 0 [ 2779.621024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2779.621034] ? mark_held_locks+0xa6/0xf0 [ 2779.621043] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2779.621052] ? retint_kernel+0x2d/0x2d [ 2779.621083] ? retint_kernel+0x2d/0x2d [ 2779.621100] alloc_pages_current+0xe7/0x1e0 [ 2779.621117] kvm_mmu_create+0xd1/0x1c0 [ 2779.623449] 0 [ 2779.627556] kvm_arch_vcpu_init+0x282/0x890 [ 2779.627568] ? alloc_pages_current+0xef/0x1e0 [ 2779.627580] kvm_vcpu_init+0x26d/0x360 [ 2779.627594] vmx_create_vcpu+0xf5/0x2950 [ 2779.627608] ? __mutex_unlock_slowpath+0x75/0x780 [ 2779.627619] ? alloc_loaded_vmcs+0x240/0x240 [ 2779.627634] kvm_vm_ioctl+0x4ae/0x1430 [ 2779.634280] ? __lock_acquire+0x655/0x42a0 [ 2779.634292] ? kvm_vcpu_release+0xa0/0xa0 [ 2779.634303] ? retint_kernel+0x2d/0x2d [ 2779.639538] Node 0 [ 2779.643170] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2779.643182] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2779.643195] ? check_preemption_disabled+0x35/0x240 [ 2779.648400] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2779.651893] ? retint_kernel+0x2d/0x2d [ 2779.651912] ? selinux_file_ioctl+0x19a/0x560 [ 2779.651923] ? selinux_file_ioctl+0x1fb/0x560 [ 2779.655919] lowmem_reserve[]: [ 2779.660095] ? kvm_vcpu_release+0xa0/0xa0 [ 2779.660105] do_vfs_ioctl+0x75a/0xfe0 [ 2779.660117] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2779.660127] ? ioctl_preallocate+0x1a0/0x1a0 [ 2779.660150] ? security_file_ioctl+0x76/0xb0 17:11:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x201}) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00', {}, 0xe71}) 17:11:42 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x80000000000001, 0x301080) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000080)=[{r1, 0x24ce}, {0xffffffffffffffff, 0x300}, {r2}, {r0, 0x20}, {r3}, {0xffffffffffffffff, 0x284}, {r4, 0x2002}, {r0, 0x500}, {r0, 0x80}], 0x9, &(0x7f0000000100), &(0x7f0000000140)={[0x29]}, 0x8) r5 = socket$kcm(0x11, 0xb, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r6, 0x1) r7 = accept4$packet(r6, 0x0, &(0x7f0000000800), 0x0) sendmsg(r7, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)) 17:11:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000300)=""/229, 0xe5, 0x20120, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x1000) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2779.660157] ? security_file_ioctl+0x83/0xb0 [ 2779.660168] SyS_ioctl+0x7f/0xb0 [ 2779.665518] 0 [ 2779.665820] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2779.681170] 0 [ 2779.682544] do_syscall_64+0x1d5/0x640 [ 2779.682561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2779.699849] 0 [ 2779.699881] RIP: 0033:0x45cb29 [ 2779.709674] 0 [ 2779.710113] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 [ 2779.720770] 0 [ 2779.724857] ORIG_RAX: 0000000000000010 [ 2779.724864] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2779.724869] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2779.724875] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2779.724881] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2779.724886] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:42 executing program 3: [ 2780.065159] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2780.105757] Node 1 Normal free:1998304kB min:53592kB low:66988kB high:80384kB active_anon:596168kB inactive_anon:64476kB active_file:39848kB inactive_file:177772kB unevictable:0kB writepending:280kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34080kB pagetables:63900kB bounce:0kB free_pcp:788kB local_pcp:428kB free_cma:0kB [ 2780.122317] syz-executor.5 cpuset= [ 2780.137351] lowmem_reserve[]: 0 0 0 0 0 [ 2780.145297] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2780.148805] / [ 2780.165135] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2780.171444] mems_allowed=0-1 [ 2780.183191] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2780.195189] CPU: 1 PID: 2793 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2780.197364] Node 1 [ 2780.203847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.203852] Call Trace: [ 2780.203869] dump_stack+0x1b2/0x283 [ 2780.203885] warn_alloc.cold+0x96/0x1af [ 2780.206123] Normal: [ 2780.215442] ? zone_watermark_ok_safe+0x250/0x250 [ 2780.215460] ? wait_for_completion_io+0x10/0x10 [ 2780.215475] __alloc_pages_nodemask+0x2129/0x2730 [ 2780.215501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2780.215511] ? retint_kernel+0x2d/0x2d [ 2780.215546] alloc_pages_current+0xe7/0x1e0 [ 2780.215561] kvm_mmu_create+0xd1/0x1c0 [ 2780.215573] kvm_arch_vcpu_init+0x282/0x890 [ 2780.215582] ? alloc_pages_current+0xef/0x1e0 [ 2780.215595] kvm_vcpu_init+0x26d/0x360 [ 2780.215608] vmx_create_vcpu+0xf5/0x2950 [ 2780.215619] ? __mutex_unlock_slowpath+0x75/0x780 [ 2780.215629] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2780.215640] ? alloc_loaded_vmcs+0x240/0x240 [ 2780.215656] kvm_vm_ioctl+0x4ae/0x1430 [ 2780.215668] ? __lock_acquire+0x655/0x42a0 [ 2780.215679] ? kvm_vcpu_release+0xa0/0xa0 [ 2780.215692] ? retint_kernel+0x2d/0x2d [ 2780.215704] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2780.215717] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2780.227505] 308*4kB [ 2780.228173] ? check_preemption_disabled+0x35/0x240 [ 2780.236422] (ME) [ 2780.237649] ? retint_kernel+0x2d/0x2d [ 2780.237666] ? do_vfs_ioctl+0x76/0xfe0 [ 2780.242509] 74*8kB [ 2780.247390] ? kvm_vcpu_release+0xa0/0xa0 [ 2780.247403] do_vfs_ioctl+0x75a/0xfe0 [ 2780.247417] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2780.247426] ? ioctl_preallocate+0x1a0/0x1a0 [ 2780.247447] ? security_file_ioctl+0x76/0xb0 [ 2780.247456] ? security_file_ioctl+0x83/0xb0 [ 2780.247465] SyS_ioctl+0x7f/0xb0 [ 2780.247473] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2780.247484] do_syscall_64+0x1d5/0x640 [ 2780.247501] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2780.258516] (UE) [ 2780.259571] RIP: 0033:0x45cb29 [ 2780.259577] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.259589] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2780.263927] 33*16kB [ 2780.268378] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2780.268384] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2780.268390] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2780.268395] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2780.280259] warn_alloc_show_mem: 2 callbacks suppressed [ 2780.280281] Mem-Info: [ 2780.291826] (UE) [ 2780.302072] active_anon:583825 inactive_anon:25895 isolated_anon:0 [ 2780.302072] active_file:9962 inactive_file:44444 isolated_file:0 [ 2780.302072] unevictable:0 dirty:21 writeback:0 unstable:0 [ 2780.302072] slab_reclaimable:63367 slab_unreclaimable:242645 [ 2780.302072] mapped:67473 shmem:31010 pagetables:27184 bounce:0 [ 2780.302072] free:510638 free_pcp:388 free_cma:0 [ 2780.306295] 20*32kB [ 2780.316168] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2780.319111] (UME) [ 2780.323810] Node 1 active_anon:594568kB inactive_anon:64476kB active_file:39848kB inactive_file:177772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60988kB dirty:80kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2780.325913] 5*64kB (UME) 2*128kB (M) 4*256kB (UME) 2*512kB (UE) 10*1024kB (UE) 6*2048kB (U) [ 2780.333617] Node 0 [ 2780.336607] 481*4096kB [ 2780.341534] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2780.342553] (M) [ 2780.347822] lowmem_reserve[]: [ 2780.352112] = 1998320kB [ 2780.361632] 0 [ 2780.367033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.369254] 2559 [ 2780.373988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.377534] 2559 [ 2780.383241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.384224] 2559 [ 2780.388452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.400162] 2559 [ 2780.403983] 56000 total pagecache pages [ 2780.413576] 0 pages in swap cache [ 2780.425442] Node 0 [ 2780.428598] Swap cache stats: add 0, delete 0, find 0/0 17:11:43 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="5f03c3de2f33", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xff, 0x11, 0x0, @remote={0xac, 0x1c}, @local}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4454fe1d0137dd186a76f65f74ee5d183c45f2ee4a895463", "eded7455734c4c24155f0104a46d202e0e232bb5d2c89e135448b08417d6a9fc"}}}}}}, 0x0) 17:11:43 executing program 3: 17:11:43 executing program 1: socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) 17:11:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/192, &(0x7f0000000000)=0xc0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:43 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="5f03c3de2f33", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xff, 0x11, 0x0, @remote={0xac, 0x1c}, @local}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4454fe1d0137dd186a76f65f74ee5d183c45f2ee4a895463", "eded7455734c4c24155f0104a46d202e0e232bb5d2c89e135448b08417d6a9fc"}}}}}}, 0x0) 17:11:43 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2780.435599] DMA32 free:33164kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:248kB local_pcp:136kB free_cma:0kB [ 2780.444468] Free swap = 0kB [ 2780.450599] lowmem_reserve[]: [ 2780.480411] Total swap = 0kB [ 2780.488256] 0 [ 2780.511020] 1965979 pages RAM [ 2780.519081] 0 [ 2780.541327] 0 pages HighMem/MovableOnly [ 2780.555669] 0 [ 2780.581255] 338456 pages reserved [ 2780.581261] 0 pages cma reserved [ 2780.711571] new mount options do not match the existing superblock, will be ignored [ 2780.743401] 0 0 [ 2780.745710] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2780.811624] lowmem_reserve[]: 0 0 0 0 0 [ 2780.821726] Node 1 Normal free:2000280kB min:53592kB low:66988kB high:80384kB active_anon:595204kB inactive_anon:64476kB active_file:39848kB inactive_file:177796kB unevictable:0kB writepending:276kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34240kB pagetables:64036kB bounce:0kB free_pcp:1036kB local_pcp:716kB free_cma:0kB [ 2780.856511] new mount options do not match the existing superblock, will be ignored [ 2780.874133] lowmem_reserve[]: 0 0 0 0 0 [ 2780.879418] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2780.899104] Node 0 DMA32: 1457*4kB (UMEH) 2293*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33164kB [ 2780.920126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2780.932889] Node 1 Normal: 378*4kB (UME) 181*8kB (UME) 113*16kB (UME) 35*32kB (UME) 5*64kB (UME) 2*128kB (M) 4*256kB (UME) 1*512kB (E) 10*1024kB (UE) 6*2048kB (U) 481*4096kB (M) = 2000704kB [ 2780.953834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.964782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2780.984240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2780.993412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2781.003161] 56011 total pagecache pages [ 2781.008040] 0 pages in swap cache [ 2781.011675] Swap cache stats: add 0, delete 0, find 0/0 [ 2781.018612] Free swap = 0kB [ 2781.021779] Total swap = 0kB [ 2781.024945] 1965979 pages RAM [ 2781.030072] 0 pages HighMem/MovableOnly [ 2781.034206] 338456 pages reserved [ 2781.039336] 0 pages cma reserved 17:11:43 executing program 5: socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:43 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffde2, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e4800001f000502d25a80648c63940d7e24fc6008000f000a000b0005358221f0792e370900098000f01700d1bd", 0x33fe0}], 0x1}, 0x20008840) 17:11:43 executing program 3: r0 = socket(0x25, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:11:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="88af750000080000bbbbbb014445566e1e80c2002000000000004c27aaaaaba1aaaabb8d1082d1be70c3407ea90000000000000000ef040100ba473b33b2d403ed87e239d86a1de0e833121e51d4e27abb4629d93308c595a6282b463c04"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/176, &(0x7f0000000100)=0xb0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x200440c0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:43 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2781.150229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:11:43 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="2c13b3a162797ccad36be4b8137b2d653f55d3d51859fb96a249df86ca3712ee9a39ef5b20accb354f8d99a7b74aca4aef8d263abee6b626ee0fd5c58a72906ff9c2f1fc5c5d9d134693540a2947b2ee56ef6dca7ae277ffcc1461606e00ea4e40641aeba5e93ba3491f91c9621c21f6eac616d4a43809fddd21f99c4558b6ce03c317250a19cba1a85e472c0c8f5a4202cc65d646fe853d8501d0b200b6a0880099cc186deaf3409504aee5dc473aed1b3c15a1b687eb2e286580a7f7772dc63b39baedc375063f61edb1124244bd91e44691eb24108139daf5d96da669e0abca", 0xe1}, {&(0x7f0000000180)="d54df5c3aecc69db8ca3587e39bdb3d59930102750541f2dfe46d627649e02f523c4e9fe4c0b09094bb0bcf23f02602d0020996db64c28ca49a1d9", 0x3b}, {&(0x7f0000000340)="d6ff0d3b23d7a627cebab02ef688d41da20719d788", 0x15}, {&(0x7f00000006c0)="8c769a02ee6a464207623e3050fefa6f508f57fc249d76d9743996ed3ab5733f2e911e330060a6df2834d7483ba32a55ec9e3d0bdf40eb54124a18cabdc6c629709d4e8b118ff597e4369a4a4c24796e2daf742e070501edac3f4873ded8e029db366e5b7f96ae4548ad8428f25dd0b296dcb86790ebf2de80b9ae5e3a879338c92c886dc8a2d90c33edcfa4dbbd086f2f03c76118ad3ff438abb8b90f5fbf90593d", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000003c0)="c06d8dafd89dc4a30df966b5510577ba00bb189d56334a132fd2f9020b07d0e66022ae6e2d7f3bfc4e967fad882665ba3ba7dce01e7a", 0x36}, {&(0x7f0000000780)="dd95b5f38f6a793e14cdbaaaff8032af944a599b584ef80d37d8e183d7e7b98e5ce46469a3a414434d951f0de90c1b81908d7cdf975af6a9c4b8ad1bd2655408a2d32a89dccbad4951f0e8d157bc1fb45c5646effbe0cf8454841371f2b7ee935588d5292f797b4c09fe81e4b4d6ff3627c11b8089b789e093f8e8606b0cc237d9bce0f65cf05b76", 0x88}, {&(0x7f0000000840)="dda5f58a3ca46e45ced7135f33526d6395a6ef435f3ed48887d6b8f4555de6683765b4326571e02497a59c2358f8e8707c6666b75b1057bb5bb00b5a0ef1b73e4ce5c0600b3edb08a54d4e8b4e2d5880ef6da17389e941a0a36c418d5cb64304cc7e98cbbb274927c947418ad32398b4ae8e6ced0e91da3c3f6c6df7a660b75e19f8704b9f2f467561bde8b5c337e78a6f04ef33f33a0fd23fb7db89cd5a2c9c8f5040c24531b5629e27567aae745ebd7061083919c866b4e17d994f1a6eaeb6fa26db6ea0b95fc6698c3df9ae6aeb5e9f1e8087685636906404d1dfdcbf785cba99c1729fc24b10aa47", 0xea}, {&(0x7f0000000940)="239147b086404c9938162c62c3901ac711e4f7e2d0bb9b1a34fd5956d0d02af264f4e15d1dd387a96fa5cfecae0048367c8e118eeb928e816b1d1474dce8030c201bac2e61d55281f1836f192f89d3bea3440de9eb93162c8a185cbc485c4ba382cf8f1f76c1f6cf66bd71b7ea95fb107720b551a1047d2bf07a2c9281edfb3bbbf0", 0x82}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="bcb65eb7cdd712fc7312fe55f29be6188984790c70cd00fa0b1a0a96e27d28678bfe1d81cb2614a70860209a356bb7ea0c983dc0e0db486efaebb978e5112024aa0c68ef3e610a885a2454fa61bc0a93d80f253d9e6ab2331af469cf7ce633833b9b04d0407515ae79bafa19e00c986408b4d108847c51b484405a", 0x7b}], 0x6, &(0x7f0000001b00)=[{0x18, 0xff, 0x7, "5a024b74bc"}, {0xd8, 0x84, 0x8c3, "f6355bd3456f020658f083cf939eba7d53b2f8c48c863b9e9765f07993b0fda0f75f89ebce5315c8c223ab048b50a53e38eba5d6c6cc6cb0277183e30b64e2be5a689ad89ebf79bb1ff662fc7356b9c27a5a877367691f236c57fadcc939648a59ff0f9ff65130c9a7a667d94b632da651bea827eaa03a7a30b81abbb0371762df8f235ee8d7f8c5a62e491c6b62d6a3577568d3eb38a423a7d480d3fedd7c87040f61c3723d87f1305673899199889fb2206f46b68cbadaf6d5d48d3eee234c83"}, {0x108, 0x114, 0xbffc, "b394fd1b392eb24edd308cc1d7dd5e76d0d827b3ff58b3c11f227cca78c83831b5e619330665b8876e8e7430a757526c79a147ff801627cd7eeb552a3d7417afc1384104ed8ff49b080cce3b7e80e434a21393f86d6690fd560f120d262ed3e686a62db1bbb429016c2f10e7f8782c33b99e2a7b489b8b98cd6c6c90af2719b92d7698fb76f8d2913af10ce999fc8db3c1b9aefe6b7be42d4fcd6575bd7b35286ace789d783490ce960c7206bd450342400406baa1c868ddddee63e9dab74a28f58f4b41f8938c148b98a20993c53b19fc371c54f280efbad6eb73f5769eafeb5d46d28b69ae2377e26db6c96f65cad13392"}], 0x1f8}}, {{&(0x7f0000001d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x3, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001d80)="936ae9654bffe0035813e7c323", 0xd}, {&(0x7f0000001dc0)="2b542a10c5f05dcdd53a2fb176c17303040913ef37f2bb8ac0dd718f0b1890b4273771cb8fa0d94d44502cf99f2fbcf49f90d16e45cf5e948f5fdbb313405c3069361b1d4f50cedf2c97fed32e7f2d5ba93fa1cb3888d68b030c4b9edbaf63d16c40e6fbd9ea2a75dc7c38b60a0773b1728af1b683c5b4bede096d78d620c957646ccc4a5890b9b876920eeb427a2caadd816e3419044f7147f53e9a09825d2924dfb80d483382fb9f7dea7efe9357bf8fbb5ba013272ee64fbfb0033a455d567182bbdfed1e88d49014d2", 0xcb}, {&(0x7f0000001ec0)="f13b4755c7fced72d1ac7f5c1ea114e0b1c5d35265597b86ba843fe5ec3052aa72b2", 0x22}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="db5248", 0x3}], 0x5, &(0x7f0000003100)=[{0x98, 0x100, 0xffffffc0, "1b8c87d336cc57c73ed3dd47e6e439f5eef8ba54635d6880c29a1e236d0d27854121976e77edd4ecdfb7a5c041059a4533c783e652a8719ad34fce571fd23f4e22214202d9d762e884aeee075b10bc18abaef4449d4bdd51383dec08956566877adfcb8ca3d74410112c3ae71c77b1b4b27eb07b4d9013e09e11c361bc3eb1d0b8a303"}, {0x100, 0x110, 0x0, "84d75b5efff93384a131f4f3590c43578d5e39b0081d922658ec0640880e57f9dfdf1c4f7fba34b8faf64cb87098ad5f229c33da34ac9ec7d8f32cf9a4f3a01fcca74de933fa3ace93f363a21adfdb39886038c1630382b98a57e7e3a67c24fce8260e309c3ecc4b6806dc3977a627b42a3c74d1d0acc3f16b35de6add905941476dd3f7add9ad0d4a16ddb8f47cda2847624f18e88d2fedef9237cc8829b18e9cb8c09db6e5a250e66abbcf94031cca458423a828f8ef81462ba10ad46b4ae4748d758ee165b0e1dfff9125c8a274d2376a0c3ff82f00092f9d57f4a84a18a453a4d555836ac1a33e8a026e1bfa"}, {0x58, 0x29, 0x9, "a135b64895e5e6b94bfd9ef0e6bbd5665b6930ae929e279d438e8d4c8814716bb060722350bee1b97a2a71f6f25b59280ccaad15902d7ae3039587ebe32c5eb3e5b6e933efb92b"}, {0x1010, 0x108, 0xffffffff, "07e94da5cf7b5643a9a62de990b2a18db73f1d2585a87ecffebe54dd0b4dc11b3e0550d0106f84ebeb0ebcb0db4cff23c10a5fbf6bf6848f5f2d5973acf935c41a6ef71e4f8cfb52c704ec6abf1f703d7f658f966e5ee0393ab31c9f199353b02877db39f68a415913dfa9ab8081f4d46a195297de6e1283a835be75e9490d64492bed3f3206698f1afc61173107a81ed36e6dae86aec72563c6935b8d698af23776171657402a94c56cc4fa57958f1d41a72e5cff36c7c7c29f0fc580a3e27484859fb5b725086e1ee1f3bf93384fdf181eb5eeaee3b5ee3c829125604fbce89e5f2be5244741f4093d8396339e381df6e7fdada52c98b513386631bc719483c7ac94abf8ddac4ce48dee51f151a02d8d61c422945453b2a2a9a0606d31e39580114b607c1206b77f06dce603643ac75bc714a8caf04fa13a6ac9f169d6424cdb31a30c1e8d93b76a93d9f83b85ed62bebe62973e1c34483bfbfe27385313d3df99456bd0f7be19fb9eb79e58a3eb3a94cff3ff35deb04f89af1d75f7e987d10ee2bf794c08ab875579e28167557febce26bb46817a743c87c7d60e257c1e86d6c7eb47d7cd10163d4b53c2497cfcc1bfc09fc9a4f3f8ea327c51664b3e004becd6aa4b2645baeb70ea98fe46c6ce837f59f0ea992cb37efcff46a3a17238e005e0c02ac0e54ec12d34b1912e8fec14dc46a9438a77ec164a8da7443971283a8c11e1982f3826b4de861098785ea64bcb5c927a6543da4a3cca49c4b84cbbd1dc20ffebbfd7e2e0ff2abe12cc1d9156b8d0d02d1af63d77ae7262350e0f2ee7ddebf48e8ccd85d68c1d9627a44e8c2c7fcbebcee8b2ce1cf59a6c78bbc167f54b0b643112955fddef69e48ed9d9e1ca12fcbfca134ec6bcd74f7bc2ec19be2940e49f046ebac99c5d4660f9c2f70c49db6da12b6fd0980ab4aeec8e7b9c19995ac5450bd27ccc3b417331952e95b99eec655e5aa5b7074bca5aea6d569c2d24399af99653e64d0bcadb28d2e840136b643f6e89b939c963212e608248532a17ae6c9923f102bbce7a5e1777ab4a900b4e728e46d8870bb188c1903ffab882248bf45c0084b40bb1830e88fedac98e69e2ba6de0cef700e854ee4b903c5ad32bd06b124aa06eb1f82b2f8adcfd072cd3ef920faecf74c51f62904f1e6189062fb5e4b6f4745beb46b4310995d4472d24ceda999aba2482990ff34f539939d153d81477e3ac94ffb3a9e4ec5ec95ceff456102df886664701878fca52bfbd6f62dc5e5d3cdc190646c3b3357e2726e11af0548d6af4bd5b04072738c9cf0543e87b7f7ac0b80287039e8ea6281368ffd757bc5d832707c508363f9b6ae94169993831d02e5163d103e981f9431041d7c1f32c9a2f750435d7bbe8511fbc6f11214d24b8ba9265c11edc03b0c7d7c73ef93e6ab21a9d653f4295506d3cf4c9d067d33aba6514e99e48fcdc84dabcf77a41e42bbe01f47c9f3d2ed575d43cda147b408c06942589e270d3eced91560ade5285c056ab7653ecaef871d32b4e35e732b3b0bccf941d36f25414227eae4e9de2755e27406b607235d45c754206fc82b935af72c8d2e1d9611f1f8cc7b13f849db06b8edc2786df3b7df2a8a4aa842dcb1556fcedcf6946462b45a2967051132732ad8b77331991b5b925e9448d550ebe06e5e319377a94e8219e4fdc175c31c3b3664d6272871f7d9e0b0662e97a5d4ae3bbee701887e5b4721bce7444ca0c7c95f7fbe47c1820a9526444e55dcf6b17a6933109e93ea0931d1be11316c8b8ed8fee4f288a2a6f75cdc9922b64f16098be8376859769a180b6c7e69bd2ad68bccc3194601d1c3569a3e749db77ea1bb3dbddc111e74188691956a85d144f4679baae16c0ceefec049f336e35e481228cbf1ee347ae3121670c10e97e75df4136a442f795579fcebeb4e4531c37307228d7d25facf57712f5445c5a500c95666474a39041bfd2c92d506aafc822856b5409c2b52e4bd97f0a6b07cfa6acd7581d5e2404cb619488a9d77b6303207680c90be9a100d21e6046e6c2babe8cba79dc999f7f9e3eba13a3dc71f1e815e9b00ad72b4afaf7713ac9618a69d0bed96fb45a10b374d660886c443d6d8e32b32ce9daf333d8fe835fe35d88e36b0c3ee95c6c34fd26c74442a7ba55e4b11959b1336c09ae082b112e0e0474f1a69463c9b8541c079e8c5c72d8c05131d0dd3b46a0ee9d60e6c4ef1f1eeb9c2a5a1d4eab0fe0760c36161c1843526a7564cd2671949e7268a8258f0dc9084ffa46fd237a61f7713981adee74b7b8794ddd48464615705fa80c7ef6e8ca9a38bf1014b171565495d3542995b540cbb931972b2110a6f17a38b6cba2439d1a3dfc06d301d7f0145f6e2c823887787c3f321edb94090bcd1bf498e89887dcbdf9f91152be59f527332a0d61455335a25c05c1bb0e74af8c0c685280171c32c36839a3289a87617566087180d6adb8bc0a2f1455eba5850a56fd82de1ca7b4b1e6d3dddf46db5f96666b66f18f38190847cc70c11afdef41504e34a05c2d64450932fb0e4a1d649aba6c21904a8fcc1a0ad6db20f1adac74438c20257111e4f38fc6759beab7dc98e982ddffe49872832f828829886652a21180f575b7af365e337e8b2c86140182ed9bf2d39505db929a7b5f375dbc39e56df7d0eb4e6e2a7f9f15208bb003134605bfc528b35f8bb2e31336fa2f654d3415a7bb96b1ffcf97731745e7719bca54073a06a5b7a7e2d08873e188f68e960ff8a71d5ea49f938965bda7fd1ccbae4dc4b04b38b6563bc111163042c5e630c887e02085743b9891fcac12562173e8531d4d272549456c9d73315b2893ee90232b94534a00e019bf8bb0dcecad0803a90f225f1766c57e2f14eaf4535f0fe64938673e8552d51fdcc305592b3bf7968fc0ef8cefb30009d537f148e4be54f490e4b46393cb14f05783db94b590a508bd28b86281addd5621611df829c8d392d0ccc180605fc7f5fa669b8ec613e4d386a037473ab75e6a8c42e597e5deba810a31f6c60401a3094f84400fc200161155ec0b842d5d272f7cb06ff25bd251f1b1a7eb83b548d24a28dd3e3085a63e45c4414bbdd7aff551390cd7e56c5905393dbdb05f96b381af32cbcf7005025785084879540bd25b580dd64306ed44323b0df6d02f422181f07480222ae2b31c3bc59cdc09b53bb50651c394d73367c864638cd318ca68e65fa99a79055c008403f09257178bd2785c58f2a98c70f5b9d51e9ea70af79e43837828263db2ac55371a7345c883d987777ce285c0679fea83a2f7136fa40be6c3720edb1ae26c1fca5a985635394183d0fb8698307f5a15af5fbbab967f28618f3df53efd3e042769f93b33b30f9978d03cc7d65ca8c4032624d4d5d7a3681ca474bf3ef3e20242543b7753861194cebd142560610170ad8a54e10d31f63e421abe42260adc13afe9da3384eb674dba557aaa6568b9ecf8e1564437c07487e65485b898046b805a8826d8b083f49b8f134aad2a06cdc13c3df3001965a37afddaf722f6cfb7f0587941cdbbf9e3a1ac33d487b71c5a470150506d5772bbb40a4c7969097b49ce311d6c9d9279d0714bb7e81c7b01fbea9793fc97b0b5bb2b6501c2169aa7a93ba3069aceeae0c14ed904958e59680299dd1ebffa94cb3dbe71197429f4dce2da883ea0f01f38b9ea778436a46a04add1fc43f5efeba135195b435bac6284dd885dbfbe811bc2fd45a791a328e9915d4eea71a26079b805e4b8559442200297a05b92e71461c48ba372f2dc660823b236f7d339f0dae75125842541efba15f2a6786ab30c448edfd495637bdc3a4fd2afa67fb69bb3e44a2f43b5bc15382b7b9ec07e828e8b7178d3f272976a4f7de2250165ba1d9fb48498a5de988bbded07e4d29229ff8446c2caaa798b671452a109e10a202d507041b5ecd51113b83cc2998cc5919c2a2f21b0054358504e75d44f086fda1cfd292d51217d83b78c800453709fdc76ecbb87168473d8051d88ebdb77b1fd6bfe2c01433f4d85b7b83b1c1ed4a2ba9b034906f2c4c2dc08002843aa3febca7409e9a19f49211eafa9c70531d5ecd64c067773ae76b3360438d379965d7c5d668c126140c81fb9c9659b3eb28505e5e829fd918d5b3437190288a28223fe89fa8306cf7266e501b880ea8fd101526b8f251328d5f580abd920396f0856d8265ea3c3b74163d259bad97954fa199fbbe94fc37ec3ff807d9372e1f07ec4e45357662fda95786632d65e3280257a3ddc0ea3b0485356ba04f8edbe5db56f267337307b8504e468bcb272f16651f2bc3da418b8befc0b677f767b7229ba7ae309c85d9fb707058afcf155baf62fd72f478a9ff2c5bc656b2badbe5a424190639ff6db8f3685f17c95cfd4d4794454b87eb864e1ceae7714d53cd313831d6f2410110dbffe103e3d2ce5844af775c7ab895deed95bec57323d9ab1a5b29cc5d1848602c1a3d9b039cad0abe20f1d9df84a48474e613a445dae133267341bd1440079b366bb02a7d05e2cf6e4622ac1c4eea8323cf047f69d896cbd2dbc8c14f64157305b2d8318512c0e5efec2cdc7155a4121a0085ed207fa424b36c73f6cbb0035a155a7371893c29e950a814b10acf8b51cf1d24c8855cd3af9106878f8b32eb6f5f5d6cd7897aabe0edf64d6202233b8c50f4f1a686045f70245a10cd1a858f18962e701b1c77db8a2f610e939fc71953ad673a97a9cf54b6f37dff894924ce73f248b6a9bfdf7e89bc63f14d3ba63243d9e59e0ff7ce3aa2276dd5b4e74e5cf29a697bb8388278e7996ac0fe200c03b402f6f0454978e7b5b5999ffe4a2c887861b2b7c69daeaca1bb6f8223ca24770418ad8274c893fe75997bd86cf9a6349744891a088ca14674f4e8608be8bdf04c3ba597fc583d85e55398ea2168b39f792d3dc3a68154d3334c25f9179ea4348cea30aa4374f5565e2d8951f49257ce65482e0d17e8cd15fde8ae94d4451a32a3233e2036c50adc426378ca5499aa67cbbec643931890d4d2589e26aca644254ca1ecacb4e2471caf87ee7bbaf4680d67c7c50b3ecc11a1f705640bbab8c92a7b40726e7822f5bef9a9275d5ce8d54d7c4146bec10ac73547df05d5a3670a0ef978878e1249ff5e4a6f97bae3a47f1939fc2a23e48bb2f569c88c7d0178c18fe87e8a2a22203fea201a35126f2ecc91ddaf737758e5088e4355288712e2b2d687a4bd890e89588a9255df78986dc9823ff770fcaa3e25914bcd2db113f4e53c82a42f708b55e07e87ad26bf52dce9dedc3c1cb97bdf2695da94cae564e9fe927d1eec0346ca6affed8e65f2563fd71450a717cbadd02200147f1f53318946dc334b5bd252f2c9f03c713a6bb9244cb5790ed3589d4ca7da3a989624d6a3843d9b9ab335ad6bbf6cb7be115f6610cbb72aff7a2e31d7b33cfc8ba4bafd00987a17684db23bae60466563895ac77acc133fc5c3e3f7b44cdf0f91bde8581c64270c99661f441dde76c64e668550d642795e46e56f079ce5e04c40bcf9bd06dffb7a3efdd0b9e8eb2319b3d9498796f7da2606fea546a9fbba199118c8a23648104f34ea1b112849cf71b154a1d037b126d8d05b6738de07d236f6471ca43e900d5c159580e47878c7b8a9a2e2a86251d7d6ec1fd7a91dced817e26e24ef6ee09dd1c33c51f2e4c6dc4b6424c92f916277043fc6b290e5771cbb4d1099bc8ab6eb2d0e399c9441ce979990578c5cd7bdde20cc65646ef4494ee514e1c644672498e11e96dfb0dac29d2dd382b78d9a3"}], 0x1200}}, {{&(0x7f0000002fc0)=@ipx={0x4, 0x20, 0x80, "16ba9bda3273", 0x3f}, 0x80, &(0x7f0000004880)=[{&(0x7f0000003040)="56565aaf8b46e3f13f86d9fe1ad6f466df60ab8f2809f32886c127202843fd5c2dd0927e", 0x24}, {&(0x7f0000003080)="f5465133b94fb8f1b4ae3aa5", 0xc}, {&(0x7f0000004300)="5782acc77fe251447b33f4a2c9ccb9ad2287dbf840250b1732aa87566c83c58f55330ee75a18783b45195f3ab15e85d81ae7796f818ea46aaaf605e7da1383c5241ceb13ac11357da0986497a1c976dd2804526b45b69f23a4651164207d907fee24cf4dd43ac00be4d553a85470b730a2163fb47bbe277fa1bc1c8d53be96009728ac5b907761ce6e2adfad3cab9d30a64c7516b713214308", 0x99}, {&(0x7f00000043c0)="0ba4f72c0ec1bd434933e35f0c50dc812bed760ad21f8b8e7a18c3cb01c36dca52431f22c710ec01d78c52eb5ffc937478dc527429069e91f22943102591e17c85874e8e0ef697fb181ec97267e29c6834750dccb37d8ad42b5f6301fca99087a64d7419a6ee0b3db24075c268e95692572148bb6212cd5b97886af3ba000f175cb0d120035b1c886fece73f138fe9c6d1b150b68871119469215ae904dc7a537b8e45f23d0150cf7ce5b53a4f184df661a971878930ec87e31a11ec2190756f362f7ba7796699eae5b5334184144f", 0xcf}, {&(0x7f00000044c0)="39311800b15a7038bcc4ff327705bad90dae4cb7615cb8f6d1940ca7728f1a343cba70fc9a769e79783790c783eef4c33819bb407a9f9ddc309fb2ca227e60e89178aa34a30b3a373cc17b3f16fcb0785b3bc0156b1e88903f330ffe2e97d9a9b4ead7981a88c982fa05bb42955cb995c6cc0e2e7e635f6e07251debe8276bc91b3de05c12fc418a675884504f9876e19ee0aaeba902adcf9039ae938e2df7ca3c9ea78162991f5795ffd9228430c4ca025d63c0ec6231e4784617115669c6e8", 0xc0}, {&(0x7f0000004580)="43e1f6868ac3dba6f2f09455fabb44df0f", 0x11}, {&(0x7f00000045c0)="9164584631ad0dd1cab952e884528389cc9ea7eefe53f20b4d42c90936f76b6a355e8c2015333f3cefdc9e2f545ed910f1cc66eb0b6abce9954f8e6427e70b72e97402dd5f6c286440b22896c527e3ea5c607c8b128f4da39ef961d65c0f4688d4f719cff45f24b86aa0611d0dacc0553cffd504c32f43fcf067809c7a827846fa432197cfe76b6d67a8fd52ffc9e6ddaf10e1ef2b8b82566faa4b1383f3aaff2a5168309bf0d10856c66c188345367780b2104a21", 0xb5}, {&(0x7f0000004680)="62f62aff9da05c2f25ea74a961d27b86eceb71ff367a231b719b91fd1b5de17016ec03af948339257242f5fb6d97fd0c173f2b640151df8c74f59dd8f88ddcf0157605aba83efa1550fc2abd435b250963c76ec269e35e9918926102d6b9545a46e46040f3c205c4fe8f06904590aa135308a4dbd7918ef4d428198c2f2c90ef0e10dffa4cddcec6f730e0f6d4d13c6e3a4cd80076bc502dcdd278df58b2e8b7aa32ef29e694a4c8a096b095d808f1f715258391c3e4f36099c018a945649553331219c7b6f89176897d83e9", 0xcc}, {&(0x7f0000004780)="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", 0xfe}], 0x9}}, {{&(0x7f0000004940)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000006d00)=[{&(0x7f00000049c0)="c486a8675a47dc25059da2c03739e3f6a3acbadd9747de3e2bcf2f18af5e44b0f3007757f383661b9131d68fd7414f36a28e8e5953771e127d242709b09c0b44de771be11af0d5d88d7e359b2bcbea9cdf7a", 0x52}, {&(0x7f0000004a40)="32b2c43c94d71caf08a6357114478f741b770d88a8982862d2a7593ffbd09e19dc3100a5e43344b4ec5c9d3652f4011ad3a46ff153e24d8861bef21942a7d38f8702cabb4f5c527274c70b9a942065dcb2", 0x51}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="3fbbae6119d0d921ae51360590d8138e70f4099fb3ebd9ae8d7378eec6a9ab72ac4f93acfff9b683052f0e429e703becdefd5573ecb37e417434546408c2f4f744aac912802275f318e9984368e02ec74084707958a79194c96626450ed46b2ebc2c013267b3fd59249aa581fca19438601f6d7ba1c045f05b142995f64bdbdd9c6d91219514b2d851347aae25a386da6080f54a3a7f276224b1", 0x9a}, {&(0x7f0000005b80)="d546c78d610461a0ead07d4e73f4a4f8e18254807818152b5ff3513689feb867209bea9acce1cfca3218a8ad8b53300aa3ac8b53dc8f4af24317ffff3ac27dc89fd8b155a04a5dbe1613462b479fe88427f9bf1e44f2fac6745907e078d077e7bf45df24b9cd444e97ab577f0dd9fe0c15dbfec51adb5f5e7d2c396b2f944dd137c421e6f720afc9e9964ebdca2943caec9df0f75617e3e32d98fb4baefe351117dfcf", 0xa3}, {&(0x7f0000005c40)="54b878a81654b5d779a61a16d933e4f2ad87e217f71feb71b7a2ff6b4d97042bb4", 0x21}, {&(0x7f0000005c80)="ec6a9a00d21f241c4f9943f46a49f4afd9a354bed3c984d2b96d43ed06b47423", 0x20}, {&(0x7f0000005cc0)="5ff92ca56a6bbcba1de276c63a38134c02fc4bf736fe2529d3b2c45cb674da2d", 0x20}, {&(0x7f0000005d00)="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", 0x1000}], 0x9, &(0x7f0000006dc0)=[{0x110, 0x10e, 0x20, "c7428ddefd1f5c32c93f5529d375fa7271dd845dc3257c7a825144059cfe3a6aa83fbeb2b93810f7ac347220caf1a1426cea04e7c0c976098ed7c9fcfd86a6ce51338b6d8b124309f4b0f6eb97df56c77ae7dbff1793e70988361ecda995dce8a140eb2d1e55c0470d1167ee2a3f975a1518a8d5824c08e2ad6a7c29d8df71ffe55a946c220f84ed6d6dd22cb0bd574d6bb9c5465e7169f3381eb801ed3288cf3f0c6d25ee6d6ceca299a8d1b8360055f3fd91b69976700a248845ca1bfc26c9c8bff2993c898b48b013991283e87c4ca7760be8e4295bc90a5991b8db3c7ac3c3777c1244e9637ed32ea184512a4673bbfc3e15353f3530f668"}, {0x100, 0x117, 0x4, "23c535cc5c81b8ed7a1039a5dc8b52e0192994bd3a7fd1679f54d510f34e10248c25602c658d6370a90eea016b6c53c246b3372aedb8c0946540d430ffef859cf390ceb685a3126a718ae9b15e0a7a9e93881d6d6a999e94a0c8d3463add54d8cc071168ef7cb5a3a7c407674ac472605e8670e4a76b17e62a324209769c31eb55861d61672301d60256d253a2be57ad8763db01794c88366e3d000bacca3f49b4f3a3484872207e85b3b5b5096e3f7dad728bd16555e380079472aa06edcce8a75931575f95cc5880e3f80327903edb1ee77c1a107d41b0a9b438c83c40289b3203db268164aa92e7e993bb"}, {0xc8, 0x1, 0x4, "cb3e6e8986cf1382ba66c273f6c1caec45f32563e47722e3d48a1acfebf5ab22e5c6797de799a7de677148c8bef4b96922016f5a3898dfa0d1e807c1dc1c65459d1bf9c8b73ad28e2eeecb908ae98fed6518bc737c6884f8a4aa9b7a8c61df98241235fa85b0f4ebe977bdefbbe7acc0c3720a9b3a4423bf3b17fe498294b9348252a2e12eb0a708762b986f7e1c18198ce1d7cb75aff37a83f1b4cc90ab383120fe5da82424862e2ce3c0ca6ccfb26f38"}, {0x78, 0x10e, 0x800, "3fca13619b57f6f49b5dd36db998e3cd430dbf9fef88c3afc34e35b03cdec2dcbfa537f2e3dd5ebbfd61eba2d5e988e2aaf26d0001a3810186870c9bf61444396697c56fb9d3c704c0d581f87f511ef18283746ede79cca53953dc327d1a490fb661f04b2cad37"}, {0xc0, 0x117, 0x16, "f6c98e0fb2c64c9aa492c94e4a21fe3de91efc0f5cb216d16a3fb04a06caee46403b723711a3642d01c180519668f44b776471ba11e5c86fd046e9e298869f236f9f623b46cc02a151adf5677e2763c6dfac2e9233e4c73d5e76e7221ca42b618de3991cfacabddfd0996bd4d9aef122acfb749e791777828283164f4b9b9289465a822e01ccbf6cdd38d7695004d8e8e80b3f584760965eee04eca8330be68e1bc9e51b6954fae443516004fab3"}, {0xe8, 0x109, 0x7, "5211a302c3b2c2fc0a45859cb56984c4c6a44e36101919306d0bae6ec14a3b7ab0e33f8665b8eb4a7b25c24207826e470ccae5a601718917e619e567988ee1ac0d8addb016683645e94f543d76f09bf990c0281a4af5dd1de6bf06cf384ef94f76ca132df8dd09e8d1a5b597f6703ea980f0886116443877cc0f4ff5f17765d724c28c6c978a8d572fef87548f9cff985bc6f20bc85e001c0a084740a3b714cb5f46675e897f96beff788cce641ceb891a7adb2cbf389ef318c7b5274ae8964d69b9295939f26a649f14806d4324b2f10fe462af73"}], 0x4f8}}, {{&(0x7f00000072c0)=@sco, 0x80, &(0x7f0000007400)=[{&(0x7f0000007340)="af27c4e4972dc20e74222d2fff945f5ee0e083bd202b86adc8bdcb70ed9295ec69625f6a7a90dc8a38b6b19de0a7e74fe566fd4ad523c10f6b202eccb4c899294f309656be6e302fde35e8fe35381927d777dc62a6c530cc4de6d31cb7dd6455dc01a5adb2ea0f3129066fdd942ae7c391e9eb4cb970bba02828c6ad0f3ad7db3ece7a480bc43c62dd1f", 0x8a}], 0x1}}], 0x7, 0x4040881) dup3(r1, r0, 0x0) r2 = socket(0x0, 0x80000, 0x0) r3 = socket(0x26, 0x0, 0xffffffc0) dup3(r3, r2, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffffffffffd2f) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x2843, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000480)={{0x4, 0x0, 0x3, 0x5, 'syz1\x00', 0x7}, 0x5, 0x30, 0x0, r5, 0x2, 0x0, 'syz0\x00', &(0x7f00000001c0)=['-\x00', ']--5\x00'], 0x7, [], [0x4, 0x1, 0x7, 0x2]}) 17:11:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ftruncate(r4, 0x208200) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 2781.297238] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2781.339174] [ 2781.342479] ============================= [ 2781.351062] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2781.353908] WARNING: suspicious RCU usage [ 2781.373934] 4.14.184-syzkaller #0 Not tainted [ 2781.384502] ----------------------------- [ 2781.399957] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2781.400264] net/sched/act_sample.c:95 suspicious rcu_dereference_protected() usage! [ 2781.414344] CPU: 0 PID: 2873 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2781.422162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.431530] Call Trace: [ 2781.434128] dump_stack+0x1b2/0x283 [ 2781.436006] [ 2781.436006] other info that might help us debug this: [ 2781.436006] [ 2781.437760] warn_alloc.cold+0x96/0x1af [ 2781.437773] ? zone_watermark_ok_safe+0x250/0x250 [ 2781.437794] ? wait_for_completion_io+0x10/0x10 [ 2781.437812] __alloc_pages_nodemask+0x2129/0x2730 [ 2781.437839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2781.450319] [ 2781.450319] rcu_scheduler_active = 2, debug_locks = 1 [ 2781.454767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2781.454799] alloc_pages_current+0xe7/0x1e0 [ 2781.454817] kvm_mmu_create+0xd1/0x1c0 [ 2781.459803] 1 lock held by syz-executor.1/2881: [ 2781.464300] kvm_arch_vcpu_init+0x282/0x890 [ 2781.464312] ? alloc_pages_current+0xef/0x1e0 [ 2781.464325] kvm_vcpu_init+0x26d/0x360 [ 2781.464340] vmx_create_vcpu+0xf5/0x2950 [ 2781.464355] ? __mutex_unlock_slowpath+0x75/0x780 [ 2781.473827] #0: [ 2781.475840] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2781.475857] ? alloc_loaded_vmcs+0x240/0x240 [ 2781.475876] kvm_vm_ioctl+0x4ae/0x1430 [ 2781.475888] ? __lock_acquire+0x655/0x42a0 [ 2781.475899] ? kvm_vcpu_release+0xa0/0xa0 [ 2781.484014] ( [ 2781.484952] ? trace_hardirqs_on+0x10/0x10 [ 2781.484964] ? check_preemption_disabled+0x35/0x240 [ 2781.484979] ? trace_hardirqs_on+0x10/0x10 [ 2781.484989] ? check_preemption_disabled+0x35/0x240 [ 2781.491532] rtnl_mutex [ 2781.493527] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2781.493544] ? HARDIRQ_verbose+0x10/0x10 [ 2781.493557] ? kvm_vcpu_release+0xa0/0xa0 [ 2781.493569] do_vfs_ioctl+0x75a/0xfe0 [ 2781.493582] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2781.502528] ){+.+.} [ 2781.506239] ? ioctl_preallocate+0x1a0/0x1a0 [ 2781.506265] ? security_file_ioctl+0x76/0xb0 [ 2781.506275] ? security_file_ioctl+0x83/0xb0 17:11:44 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0xffffffffffffffff, r0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:44 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="2321202e2f66696c653020f0a763c15ceda0bb3576ed3a"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x10, 0x0, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 2781.506286] SyS_ioctl+0x7f/0xb0 [ 2781.506293] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2781.506306] do_syscall_64+0x1d5/0x640 [ 2781.506322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2781.506332] RIP: 0033:0x45cb29 [ 2781.514525] , at: [] rtnetlink_rcv_msg+0x31d/0xb10 [ 2781.515203] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2781.518410] [ 2781.518410] stack backtrace: [ 2781.522255] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2781.522261] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2781.522267] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2781.522273] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2781.522279] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2781.590852] Mem-Info: [ 2781.608025] CPU: 1 PID: 2881 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 2781.608032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.608036] Call Trace: [ 2781.608054] dump_stack+0x1b2/0x283 [ 2781.608071] tcf_sample_init+0x71c/0x8c0 [ 2781.608087] ? tcf_sample_cleanup_rcu+0x80/0x80 [ 2781.608109] tcf_action_init_1+0x51a/0x9f0 [ 2781.608124] ? tcf_action_dump_old+0x80/0x80 [ 2781.608135] ? depot_save_stack+0x1dd/0x401 [ 2781.608157] ? nla_parse+0x162/0x220 [ 2781.608172] tcf_action_init+0x26d/0x400 [ 2781.608190] ? tcf_action_init_1+0x9f0/0x9f0 [ 2781.608201] ? basic_change+0x2b3/0xf00 [ 2781.608210] ? tc_ctl_tfilter+0xf13/0x18e7 [ 2781.608220] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 2781.608257] ? fs_reclaim_acquire+0x10/0x10 [ 2781.608272] tcf_exts_validate+0x2d7/0x490 [ 2781.608287] ? tcf_exts_change+0x120/0x120 [ 2781.608304] basic_change+0x3ef/0xf00 [ 2781.608321] ? basic_init+0xf0/0xf0 [ 2781.608343] ? basic_init+0xf0/0xf0 [ 2781.608351] tc_ctl_tfilter+0xf13/0x18e7 [ 2781.608374] ? tcf_chain_tp_remove.isra.0+0x200/0x200 [ 2781.608387] ? HARDIRQ_verbose+0x10/0x10 [ 2781.608398] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 2781.608421] ? tcf_chain_tp_remove.isra.0+0x200/0x200 [ 2781.608435] rtnetlink_rcv_msg+0x3be/0xb10 [ 2781.637026] active_anon:583903 inactive_anon:25895 isolated_anon:0 [ 2781.637026] active_file:9964 inactive_file:44457 isolated_file:0 [ 2781.637026] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2781.637026] slab_reclaimable:63353 slab_unreclaimable:242847 [ 2781.637026] mapped:67509 shmem:31010 pagetables:27267 bounce:0 [ 2781.637026] free:510191 free_pcp:306 free_cma:0 [ 2781.639463] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2781.639479] ? netdev_pick_tx+0x2e0/0x2e0 [ 2781.639490] ? HARDIRQ_verbose+0x10/0x10 [ 2781.639513] netlink_rcv_skb+0x127/0x370 [ 2781.660677] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2781.661301] ? memcpy+0x35/0x50 [ 2781.661315] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 2781.674991] Node 1 active_anon:594880kB inactive_anon:64476kB active_file:39856kB inactive_file:177824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61132kB dirty:68kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2781.675848] ? netlink_ack+0x970/0x970 [ 2781.675868] netlink_unicast+0x437/0x610 [ 2781.679057] Node 0 [ 2781.686061] ? netlink_sendskb+0x50/0x50 [ 2781.686076] netlink_sendmsg+0x64a/0xbb0 [ 2781.686092] ? nlmsg_notify+0x160/0x160 [ 2781.686104] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 2781.686124] ? security_socket_sendmsg+0x83/0xb0 [ 2781.696213] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2781.698044] ? nlmsg_notify+0x160/0x160 [ 2781.698057] sock_sendmsg+0xb5/0x100 [ 2781.698070] ___sys_sendmsg+0x349/0x840 [ 2781.698081] ? trace_hardirqs_on+0x10/0x10 [ 2781.698097] ? copy_msghdr_from_user+0x380/0x380 [ 2781.701934] lowmem_reserve[]: [ 2781.705757] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2781.705770] ? trace_hardirqs_on+0x10/0x10 [ 2781.705780] ? check_preemption_disabled+0x35/0x240 [ 2781.705793] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2781.705808] ? HARDIRQ_verbose+0x10/0x10 [ 2781.705826] ? __might_fault+0x104/0x1b0 [ 2781.711394] 0 [ 2781.714711] ? lock_acquire+0x170/0x3f0 [ 2781.714742] __sys_sendmmsg+0x129/0x330 [ 2781.714756] ? SyS_sendmsg+0x40/0x40 [ 2781.714770] ? __might_fault+0x104/0x1b0 [ 2781.742855] 2559 [ 2781.743832] ? __might_fault+0x177/0x1b0 [ 2781.743845] ? _copy_to_user+0x82/0xd0 17:11:44 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:44 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2781.743858] ? put_timespec64+0xaa/0xf0 [ 2781.743870] ? nsecs_to_jiffies+0x30/0x30 [ 2781.755410] 2559 [ 2781.756816] ? SyS_clock_gettime+0xf5/0x180 [ 2781.756831] SyS_sendmmsg+0x2f/0x50 [ 2781.756840] ? __sys_sendmmsg+0x330/0x330 [ 2781.756852] do_syscall_64+0x1d5/0x640 [ 2781.756871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2781.756879] RIP: 0033:0x45cb29 [ 2781.756884] RSP: 002b:00007f0341156c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2781.756894] RAX: ffffffffffffffda RBX: 00000000004fd900 RCX: 000000000045cb29 [ 2781.756900] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 2781.756906] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.756912] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2781.756917] R13: 0000000000000907 R14: 00000000004cbe4e R15: 00007f03411576d4 [ 2781.856092] syz-executor.5: [ 2781.986338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2781.991279] page allocation failure: order:0 [ 2782.002013] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2782.006900] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 2782.106730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2782.153916] (null) [ 2782.175837] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2782.181480] CPU: 1 PID: 2876 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2782.189284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.198648] Call Trace: [ 2782.201249] dump_stack+0x1b2/0x283 [ 2782.204895] warn_alloc.cold+0x96/0x1af [ 2782.208883] ? zone_watermark_ok_safe+0x250/0x250 [ 2782.213745] ? wait_for_completion_io+0x10/0x10 [ 2782.218431] __alloc_pages_nodemask+0x2129/0x2730 [ 2782.223304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2782.228158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2782.233048] ? HARDIRQ_verbose+0x10/0x10 [ 2782.237119] ? do_raw_spin_unlock+0x164/0x250 [ 2782.241623] alloc_pages_current+0xe7/0x1e0 [ 2782.245956] kvm_mmu_create+0xd1/0x1c0 [ 2782.249848] kvm_arch_vcpu_init+0x282/0x890 [ 2782.254174] ? alloc_pages_current+0xef/0x1e0 [ 2782.258671] kvm_vcpu_init+0x26d/0x360 [ 2782.262566] vmx_create_vcpu+0xf5/0x2950 [ 2782.266634] ? __mutex_unlock_slowpath+0x75/0x780 [ 2782.271478] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2782.276500] ? alloc_loaded_vmcs+0x240/0x240 [ 2782.280890] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2782.283019] 2559 [ 2782.289476] kvm_vm_ioctl+0x4ae/0x1430 [ 2782.289491] ? __lock_acquire+0x655/0x42a0 [ 2782.289503] ? kvm_vcpu_release+0xa0/0xa0 [ 2782.289515] ? trace_hardirqs_on+0x10/0x10 [ 2782.289523] ? check_preemption_disabled+0x35/0x240 [ 2782.289537] ? trace_hardirqs_on+0x10/0x10 [ 2782.289544] ? check_preemption_disabled+0x35/0x240 [ 2782.289555] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2782.289566] ? HARDIRQ_verbose+0x10/0x10 [ 2782.289576] ? kvm_vcpu_release+0xa0/0xa0 [ 2782.289588] do_vfs_ioctl+0x75a/0xfe0 [ 2782.289599] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2782.289611] ? ioctl_preallocate+0x1a0/0x1a0 [ 2782.289631] ? security_file_ioctl+0x76/0xb0 [ 2782.289639] ? security_file_ioctl+0x83/0xb0 [ 2782.289653] SyS_ioctl+0x7f/0xb0 [ 2782.308910] 2559 [ 2782.313165] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2782.313182] do_syscall_64+0x1d5/0x640 [ 2782.313201] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2782.313211] RIP: 0033:0x45cb29 [ 2782.317945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2782.322429] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2782.322441] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2782.322446] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2782.322452] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2782.322458] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2782.322464] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:45 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2782.433557] Node 0 DMA32 free:33040kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:364kB local_pcp:224kB free_cma:0kB [ 2782.473900] lowmem_reserve[]: 0 0 0 0 0 17:11:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 2782.495227] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2782.557183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2782.564886] lowmem_reserve[]: 0 0 0 0 0 [ 2782.572573] Node 1 Normal free:1998368kB min:53592kB low:66988kB high:80384kB active_anon:595052kB inactive_anon:64476kB active_file:39860kB inactive_file:177944kB unevictable:0kB writepending:264kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34272kB pagetables:64108kB bounce:0kB free_pcp:1376kB local_pcp:728kB free_cma:0kB [ 2782.607861] lowmem_reserve[]: 0 0 0 0 0 [ 2782.615711] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB 17:11:45 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2782.654570] Node 0 DMA32: 1430*4kB (UMEH) 2291*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33040kB 17:11:45 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2782.714728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2782.731717] Node 1 Normal: 447*4kB (UME) 248*8kB (UME) 24*16kB (UME) 13*32kB (UME) 6*64kB (UME) 10*128kB (UM) 2*256kB (UE) 2*512kB (UE) 8*1024kB (UE) 6*2048kB (U) 481*4096kB (M) = 1998428kB [ 2782.756334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2782.765960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2782.784919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2782.810710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2782.819553] 56046 total pagecache pages [ 2782.824307] 0 pages in swap cache [ 2782.838748] Swap cache stats: add 0, delete 0, find 0/0 [ 2782.858410] Free swap = 0kB 17:11:45 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2782.865025] Total swap = 0kB [ 2782.876692] 1965979 pages RAM [ 2782.889247] 0 pages HighMem/MovableOnly [ 2782.899025] 338456 pages reserved [ 2782.906921] 0 pages cma reserved 17:11:45 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000640)=ANY=[@ANYBLOB="08af750000080000bbbbaba1aaaabb8d200000000000000000000000000000abe63393c3df70bfd07d3b285c0954bd75c3559ea3c7ff7318ff5e04dd9153ce08a19a9616ecdfd28de027ab196be6f741c37b373c6c988132b119c306ffd134d3d18799a8c91abef999ae7b3be55a98d2a849fd7bdea4968431d645f136df41c888628395ca02"]) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81001, 0x0, @perf_config_ext={0x7, 0x8}, 0x4180c, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r1, 0xd, 0xffffffffffffffff, 0x0) r2 = getpgid(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x804, 0x9, 0x0, 0x0, 0x0, 0x588}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d200040080000048000001000080000000000300f88000f01700d4bd", 0x2e}], 0x1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r6, @ANYRES32=r7], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x401, 0x2}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000500)={r7, r9}) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) 17:11:45 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2783.037320] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2783.084878] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2783.101747] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2783.122133] CPU: 0 PID: 3007 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2783.130096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.139454] Call Trace: [ 2783.142054] dump_stack+0x1b2/0x283 [ 2783.145698] warn_alloc.cold+0x96/0x1af [ 2783.149691] ? zone_watermark_ok_safe+0x250/0x250 [ 2783.154554] ? wait_for_completion_io+0x10/0x10 [ 2783.159244] __alloc_pages_nodemask+0x2129/0x2730 [ 2783.164108] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2783.168962] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2783.173826] ? HARDIRQ_verbose+0x10/0x10 [ 2783.177897] ? do_raw_spin_unlock+0x164/0x250 [ 2783.182401] alloc_pages_current+0xe7/0x1e0 [ 2783.186731] kvm_mmu_create+0xd1/0x1c0 [ 2783.190626] kvm_arch_vcpu_init+0x282/0x890 [ 2783.194950] ? alloc_pages_current+0xef/0x1e0 [ 2783.199461] kvm_vcpu_init+0x26d/0x360 [ 2783.203356] vmx_create_vcpu+0xf5/0x2950 [ 2783.207426] ? __mutex_unlock_slowpath+0x75/0x780 [ 2783.212273] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2783.217300] ? alloc_loaded_vmcs+0x240/0x240 [ 2783.221727] kvm_vm_ioctl+0x4ae/0x1430 [ 2783.225626] ? __lock_acquire+0x655/0x42a0 [ 2783.229873] ? kvm_vcpu_release+0xa0/0xa0 [ 2783.234030] ? trace_hardirqs_on+0x10/0x10 [ 2783.238275] ? check_preemption_disabled+0x35/0x240 [ 2783.243310] ? trace_hardirqs_on+0x10/0x10 [ 2783.247556] ? check_preemption_disabled+0x35/0x240 [ 2783.252584] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2783.257533] ? HARDIRQ_verbose+0x10/0x10 [ 2783.261602] ? kvm_vcpu_release+0xa0/0xa0 [ 2783.265761] do_vfs_ioctl+0x75a/0xfe0 [ 2783.269569] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2783.275199] ? ioctl_preallocate+0x1a0/0x1a0 [ 2783.279626] ? security_file_ioctl+0x76/0xb0 [ 2783.284038] ? security_file_ioctl+0x83/0xb0 [ 2783.288455] SyS_ioctl+0x7f/0xb0 [ 2783.291837] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2783.295826] do_syscall_64+0x1d5/0x640 [ 2783.299738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2783.304937] RIP: 0033:0x45cb29 [ 2783.308123] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.315834] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2783.323110] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 17:11:46 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2783.330389] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2783.337664] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2783.344939] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2783.360294] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2783.365786] CPU: 0 PID: 2958 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2783.373578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.382931] Call Trace: [ 2783.385529] dump_stack+0x1b2/0x283 [ 2783.389163] warn_alloc.cold+0x96/0x1af [ 2783.393147] ? zone_watermark_ok_safe+0x250/0x250 [ 2783.398002] ? wait_for_completion_io+0x10/0x10 [ 2783.402685] __alloc_pages_nodemask+0x2129/0x2730 [ 2783.407560] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2783.412406] ? mark_held_locks+0xa6/0xf0 [ 2783.416474] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2783.421351] alloc_pages_current+0xe7/0x1e0 [ 2783.425689] kvm_mmu_create+0xd1/0x1c0 [ 2783.429586] kvm_arch_vcpu_init+0x282/0x890 [ 2783.433911] ? alloc_pages_current+0xef/0x1e0 [ 2783.438419] kvm_vcpu_init+0x26d/0x360 [ 2783.442314] vmx_create_vcpu+0xf5/0x2950 [ 2783.446387] ? __mutex_unlock_slowpath+0x75/0x780 [ 2783.451233] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2783.456282] ? alloc_loaded_vmcs+0x240/0x240 [ 2783.460703] kvm_vm_ioctl+0x4ae/0x1430 [ 2783.464613] ? __lock_acquire+0x655/0x42a0 [ 2783.468871] ? kvm_vcpu_release+0xa0/0xa0 [ 2783.473028] ? retint_kernel+0x2d/0x2d [ 2783.476924] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2783.481952] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2783.486720] ? check_preemption_disabled+0x35/0x240 [ 2783.491746] ? retint_kernel+0x2d/0x2d [ 2783.495648] ? selinux_file_ioctl+0x19a/0x560 [ 2783.500151] ? selinux_file_ioctl+0x213/0x560 [ 2783.504652] ? kvm_vcpu_release+0xa0/0xa0 [ 2783.508810] do_vfs_ioctl+0x75a/0xfe0 [ 2783.512621] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2783.518253] ? ioctl_preallocate+0x1a0/0x1a0 [ 2783.522681] ? security_file_ioctl+0x76/0xb0 [ 2783.527101] ? security_file_ioctl+0x83/0xb0 [ 2783.531512] SyS_ioctl+0x7f/0xb0 [ 2783.534863] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2783.538821] do_syscall_64+0x1d5/0x640 [ 2783.542696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2783.547885] RIP: 0033:0x45cb29 [ 2783.551074] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.558766] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2783.566020] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2783.573275] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2783.580529] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2783.587781] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2783.596163] warn_alloc_show_mem: 1 callbacks suppressed [ 2783.596167] Mem-Info: [ 2783.604293] active_anon:583919 inactive_anon:25895 isolated_anon:0 [ 2783.604293] active_file:9965 inactive_file:44473 isolated_file:0 [ 2783.604293] unevictable:0 dirty:36 writeback:0 unstable:0 [ 2783.604293] slab_reclaimable:63335 slab_unreclaimable:242889 [ 2783.604293] mapped:67547 shmem:31010 pagetables:27275 bounce:0 [ 2783.604293] free:509991 free_pcp:350 free_cma:0 [ 2783.653474] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2783.681848] Node 1 active_anon:594944kB inactive_anon:64476kB active_file:39860kB inactive_file:177888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61284kB dirty:140kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2783.710241] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2783.749817] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2783.753195] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2783.762063] Node 0 DMA32 free:32916kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:468kB local_pcp:204kB free_cma:0kB [ 2783.780110] syz-executor.5 cpuset= [ 2783.809515] lowmem_reserve[]: 0 0 0 0 0 [ 2783.817404] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2783.843338] lowmem_reserve[]: 0 0 0 0 0 [ 2783.848187] Node 1 Normal free:1998984kB min:53592kB low:66988kB high:80384kB active_anon:594932kB inactive_anon:64472kB active_file:39864kB inactive_file:177888kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34048kB pagetables:64024kB bounce:0kB free_pcp:1336kB local_pcp:704kB free_cma:0kB [ 2783.866164] / [ 2783.879268] lowmem_reserve[]: 0 0 0 0 0 [ 2783.884310] mems_allowed=0-1 [ 2783.885134] Node 0 [ 2783.888729] CPU: 1 PID: 3063 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2783.890404] DMA: [ 2783.890969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.899232] 16*4kB [ 2783.900788] Call Trace: [ 2783.900806] dump_stack+0x1b2/0x283 [ 2783.900823] warn_alloc.cold+0x96/0x1af [ 2783.910249] (UMH) [ 2783.912373] ? zone_watermark_ok_safe+0x250/0x250 [ 2783.912393] ? wait_for_completion_io+0x10/0x10 [ 2783.914979] 65*8kB [ 2783.918569] __alloc_pages_nodemask+0x2129/0x2730 [ 2783.918594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2783.918606] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2783.918628] ? HARDIRQ_verbose+0x10/0x10 [ 2783.918645] ? do_raw_spin_unlock+0x164/0x250 [ 2783.926165] (UMEH) [ 2783.929569] alloc_pages_current+0xe7/0x1e0 [ 2783.929586] kvm_mmu_create+0xd1/0x1c0 [ 2783.936479] 34*16kB [ 2783.941295] kvm_arch_vcpu_init+0x282/0x890 [ 2783.941308] ? alloc_pages_current+0xef/0x1e0 [ 2783.950885] (UEH) [ 2783.950972] kvm_vcpu_init+0x26d/0x360 [ 2783.955060] 7*32kB [ 2783.959492] vmx_create_vcpu+0xf5/0x2950 [ 2783.959507] ? __mutex_unlock_slowpath+0x75/0x780 [ 2783.959519] ? alloc_loaded_vmcs+0x240/0x240 [ 2783.959536] kvm_vm_ioctl+0x4ae/0x1430 [ 2783.959548] ? __lock_acquire+0x655/0x42a0 [ 2783.959559] ? kvm_vcpu_release+0xa0/0xa0 [ 2783.965320] (UMEH) [ 2783.966085] ? trace_hardirqs_on+0x10/0x10 [ 2783.966095] ? check_preemption_disabled+0x35/0x240 [ 2783.966110] ? trace_hardirqs_on+0x10/0x10 [ 2783.966118] ? check_preemption_disabled+0x35/0x240 [ 2783.966133] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2783.966147] ? HARDIRQ_verbose+0x10/0x10 [ 2783.972867] 4*64kB [ 2783.976632] ? kvm_vcpu_release+0xa0/0xa0 [ 2783.976644] do_vfs_ioctl+0x75a/0xfe0 [ 2783.976656] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2783.976667] ? ioctl_preallocate+0x1a0/0x1a0 [ 2783.976687] ? security_file_ioctl+0x76/0xb0 [ 2783.976695] ? security_file_ioctl+0x83/0xb0 [ 2783.976704] SyS_ioctl+0x7f/0xb0 [ 2783.976713] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2783.984830] (UEH) [ 2783.987208] do_syscall_64+0x1d5/0x640 [ 2783.987225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2783.987233] RIP: 0033:0x45cb29 [ 2783.987238] RSP: 002b:00007f2d8ae3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.987248] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2783.987253] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2783.987258] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 2783.987267] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2783.993048] 1*128kB [ 2783.993534] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae3d6d4 [ 2784.001143] (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2784.151158] Node 0 DMA32: 1429*4kB (UMH) 2276*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32916kB [ 2784.166581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2784.177402] Node 1 Normal: 396*4kB (UME) 262*8kB (UME) 103*16kB (UME) 41*32kB (UME) 14*64kB (UME) 10*128kB (UM) 2*256kB (UE) 2*512kB (UE) 8*1024kB (UE) 6*2048kB (U) 481*4096kB (M) = 2001008kB [ 2784.194811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2784.203727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2784.212372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2784.221302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2784.230005] 56045 total pagecache pages [ 2784.233982] 0 pages in swap cache [ 2784.237500] Swap cache stats: add 0, delete 0, find 0/0 [ 2784.242852] Free swap = 0kB [ 2784.245847] Total swap = 0kB [ 2784.248932] 1965979 pages RAM [ 2784.252094] 0 pages HighMem/MovableOnly [ 2784.256138] 338456 pages reserved [ 2784.259586] 0 pages cma reserved 17:11:47 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:47 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:47 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:47 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) 17:11:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 17:11:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af7500000800002cfc4525545f2fbd2a68bbbb3d0180c200000100000000"]) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x6000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 2784.804635] nla_parse: 8 callbacks suppressed [ 2784.804642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2784.889369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2784.916855] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2784.945259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2784.986721] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2785.015435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2785.022722] CPU: 0 PID: 3095 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2785.031852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.041222] Call Trace: [ 2785.043817] dump_stack+0x1b2/0x283 [ 2785.047454] warn_alloc.cold+0x96/0x1af [ 2785.051437] ? zone_watermark_ok_safe+0x250/0x250 [ 2785.056296] ? wait_for_completion_io+0x10/0x10 [ 2785.060979] __alloc_pages_nodemask+0x2129/0x2730 [ 2785.065848] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2785.070706] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2785.075568] ? HARDIRQ_verbose+0x10/0x10 [ 2785.079633] ? do_raw_spin_unlock+0x164/0x250 [ 2785.084143] alloc_pages_current+0xe7/0x1e0 [ 2785.088489] kvm_mmu_create+0xd1/0x1c0 [ 2785.092386] kvm_arch_vcpu_init+0x282/0x890 [ 2785.096714] ? alloc_pages_current+0xef/0x1e0 [ 2785.101213] kvm_vcpu_init+0x26d/0x360 [ 2785.105106] vmx_create_vcpu+0xf5/0x2950 [ 2785.109172] ? __mutex_unlock_slowpath+0x75/0x780 [ 2785.114024] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2785.119050] ? alloc_loaded_vmcs+0x240/0x240 [ 2785.123469] kvm_vm_ioctl+0x4ae/0x1430 [ 2785.127364] ? __lock_acquire+0x655/0x42a0 [ 2785.131604] ? kvm_vcpu_release+0xa0/0xa0 [ 2785.135764] ? trace_hardirqs_on+0x10/0x10 [ 2785.139996] ? check_preemption_disabled+0x35/0x240 [ 2785.145021] ? trace_hardirqs_on+0x10/0x10 [ 2785.149255] ? check_preemption_disabled+0x35/0x240 [ 2785.154274] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2785.159208] ? HARDIRQ_verbose+0x10/0x10 [ 2785.163274] ? kvm_vcpu_release+0xa0/0xa0 [ 2785.167425] do_vfs_ioctl+0x75a/0xfe0 [ 2785.171233] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2785.176875] ? ioctl_preallocate+0x1a0/0x1a0 [ 2785.181298] ? security_file_ioctl+0x76/0xb0 [ 2785.185709] ? security_file_ioctl+0x83/0xb0 [ 2785.190117] SyS_ioctl+0x7f/0xb0 [ 2785.193595] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2785.197580] do_syscall_64+0x1d5/0x640 [ 2785.201479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2785.206669] RIP: 0033:0x45cb29 17:11:47 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:47 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:47 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2785.209857] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2785.215313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2785.217565] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2785.217572] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2785.217577] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2785.217583] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2785.217590] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 17:11:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) prctl$PR_SET_FP_MODE(0x2d, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) process_vm_readv(r4, &(0x7f0000000400)=[{&(0x7f0000000240)=""/66, 0x42}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/202, 0xca}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/138, 0x8a}], 0x4, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 2785.229969] warn_alloc_show_mem: 2 callbacks suppressed [ 2785.229973] Mem-Info: [ 2785.278039] active_anon:583965 inactive_anon:25895 isolated_anon:0 [ 2785.278039] active_file:9966 inactive_file:44488 isolated_file:0 [ 2785.278039] unevictable:0 dirty:46 writeback:0 unstable:0 [ 2785.278039] slab_reclaimable:63352 slab_unreclaimable:242531 [ 2785.278039] mapped:67551 shmem:31010 pagetables:27352 bounce:0 [ 2785.278039] free:510338 free_pcp:394 free_cma:0 [ 2785.314246] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2785.330821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2785.342699] Node 1 active_anon:595128kB inactive_anon:64476kB active_file:39864kB inactive_file:177948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61300kB dirty:180kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2785.368919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:11:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:48 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2785.490219] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:11:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = getpid() r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x400800, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2785.559762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:11:48 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, 0x0) ptrace$getsig(0x4205, r0, 0x2, &(0x7f0000000300)) [ 2785.600632] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2785.611946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2785.629130] Node 0 DMA32 free:32916kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:424kB local_pcp:200kB free_cma:0kB [ 2785.691089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2785.691640] lowmem_reserve[]: 0 0 0 0 0 [ 2785.704100] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2785.733301] lowmem_reserve[]: 0 0 0 0 0 [ 2785.738614] Node 1 Normal free:1997804kB min:53592kB low:66988kB high:80384kB active_anon:595728kB inactive_anon:64476kB active_file:39864kB inactive_file:177948kB unevictable:0kB writepending:428kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34528kB pagetables:64572kB bounce:0kB free_pcp:520kB local_pcp:224kB free_cma:0kB [ 2785.770460] lowmem_reserve[]: 0 0 0 0 0 [ 2785.774617] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2785.791966] Node 0 DMA32: 1429*4kB (UMH) 2274*8kB (UMEH) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32900kB [ 2785.807337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2785.824835] Node 1 Normal: 275*4kB (UE) 258*8kB (UME) 81*16kB (UME) 9*32kB (UME) 13*64kB (UME) 7*128kB (UM) 3*256kB (UE) 1*512kB (E) 8*1024kB (UE) 6*2048kB (U) 481*4096kB (M) = 1998412kB 17:11:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2785.892466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2785.902410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2785.913652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2785.924555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2785.938279] 56053 total pagecache pages [ 2785.943036] 0 pages in swap cache [ 2785.953702] Swap cache stats: add 0, delete 0, find 0/0 [ 2785.970225] Free swap = 0kB [ 2786.007907] Total swap = 0kB [ 2786.013495] 1965979 pages RAM [ 2786.018880] 0 pages HighMem/MovableOnly [ 2786.023560] 338456 pages reserved [ 2786.047067] 0 pages cma reserved 17:11:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) perf_event_open(0x0, 0x0, 0x800000004, r3, 0x3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080020bbbb63ad1370000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:48 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="08af770000bb452d74bb1180c2000001000000004c27aaaaaba1aaaaff0000fff400000000000000"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x588}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0xc2e5, 0xd9b) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r4, 0xd, 0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, r4, 0x5, &(0x7f00000001c0)) 17:11:48 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x6, 0x0, 0x588}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r2, 0x1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000001c0)={0x0, {0x8000, 0x4}}) r3 = getpid() ptrace$pokeuser(0x6, r3, 0xc2e5, 0xd9b) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 17:11:49 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:49 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2786.370924] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2786.415046] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2786.424268] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2786.451759] CPU: 1 PID: 3262 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2786.459592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.468952] Call Trace: [ 2786.471550] dump_stack+0x1b2/0x283 [ 2786.475188] warn_alloc.cold+0x96/0x1af [ 2786.475264] syz-executor.2 cpuset= [ 2786.479162] ? zone_watermark_ok_safe+0x250/0x250 [ 2786.479182] ? wait_for_completion_io+0x10/0x10 [ 2786.479198] __alloc_pages_nodemask+0x2129/0x2730 [ 2786.479225] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.501871] ? retint_kernel+0x2d/0x2d [ 2786.505744] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.510573] ? retint_kernel+0x2d/0x2d [ 2786.514443] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2786.519190] ? retint_kernel+0x2d/0x2d [ 2786.523065] alloc_pages_current+0xe7/0x1e0 [ 2786.527375] kvm_mmu_create+0xd1/0x1c0 [ 2786.531261] kvm_arch_vcpu_init+0x282/0x890 [ 2786.535570] ? alloc_pages_current+0xef/0x1e0 [ 2786.540052] kvm_vcpu_init+0x26d/0x360 [ 2786.543929] vmx_create_vcpu+0xf5/0x2950 [ 2786.547984] ? __mutex_unlock_slowpath+0x75/0x780 [ 2786.552808] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2786.557811] ? alloc_loaded_vmcs+0x240/0x240 [ 2786.562209] kvm_vm_ioctl+0x4ae/0x1430 [ 2786.566079] ? __lock_acquire+0x655/0x42a0 [ 2786.570293] ? kvm_vcpu_release+0xa0/0xa0 [ 2786.574424] ? retint_kernel+0x2d/0x2d [ 2786.578299] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2786.583303] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2786.588045] ? check_preemption_disabled+0x35/0x240 [ 2786.593041] ? retint_kernel+0x2d/0x2d [ 2786.596919] ? selinux_file_ioctl+0x2d0/0x560 [ 2786.601400] ? kvm_vcpu_release+0xa0/0xa0 [ 2786.605532] do_vfs_ioctl+0x75a/0xfe0 [ 2786.609319] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2786.614927] ? ioctl_preallocate+0x1a0/0x1a0 [ 2786.619360] ? security_file_ioctl+0x76/0xb0 [ 2786.623771] ? security_file_ioctl+0x83/0xb0 [ 2786.628184] SyS_ioctl+0x7f/0xb0 [ 2786.631540] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2786.635498] do_syscall_64+0x1d5/0x640 [ 2786.639373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2786.644548] RIP: 0033:0x45cb29 [ 2786.647721] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.655417] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 17:11:49 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, 0x0, 0x2, &(0x7f0000000300)) [ 2786.662672] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2786.669931] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2786.677189] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2786.684442] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2786.705245] / mems_allowed=0-1 [ 2786.713095] Mem-Info: [ 2786.722598] active_anon:584113 inactive_anon:25895 isolated_anon:0 [ 2786.722598] active_file:9968 inactive_file:44494 isolated_file:0 [ 2786.722598] unevictable:0 dirty:58 writeback:25 unstable:0 [ 2786.722598] slab_reclaimable:63366 slab_unreclaimable:242297 [ 2786.722598] mapped:67824 shmem:31010 pagetables:27414 bounce:0 [ 2786.722598] free:510432 free_pcp:207 free_cma:0 [ 2786.730681] CPU: 0 PID: 3294 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2786.762267] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2786.764643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.764648] Call Trace: [ 2786.764667] dump_stack+0x1b2/0x283 [ 2786.764684] warn_alloc.cold+0x96/0x1af [ 2786.764696] ? zone_watermark_ok_safe+0x250/0x250 [ 2786.764716] ? wait_for_completion_io+0x10/0x10 [ 2786.764741] __alloc_pages_nodemask+0x2129/0x2730 [ 2786.793097] Node 1 active_anon:595720kB inactive_anon:64476kB active_file:39868kB inactive_file:177976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62392kB dirty:228kB writeback:100kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2786.801933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.801946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2786.801970] ? HARDIRQ_verbose+0x10/0x10 [ 2786.801980] ? do_raw_spin_unlock+0x164/0x250 [ 2786.801996] alloc_pages_current+0xe7/0x1e0 [ 2786.802013] kvm_mmu_create+0xd1/0x1c0 [ 2786.802025] kvm_arch_vcpu_init+0x282/0x890 [ 2786.804928] Node 0 [ 2786.808203] ? alloc_pages_current+0xef/0x1e0 [ 2786.808218] kvm_vcpu_init+0x26d/0x360 [ 2786.808232] vmx_create_vcpu+0xf5/0x2950 [ 2786.808246] ? __mutex_unlock_slowpath+0x75/0x780 [ 2786.808256] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2786.808269] ? alloc_loaded_vmcs+0x240/0x240 [ 2786.808286] kvm_vm_ioctl+0x4ae/0x1430 [ 2786.808298] ? __lock_acquire+0x655/0x42a0 [ 2786.808312] ? kvm_vcpu_release+0xa0/0xa0 [ 2786.812579] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2786.817091] ? trace_hardirqs_on+0x10/0x10 [ 2786.817101] ? check_preemption_disabled+0x35/0x240 [ 2786.817118] ? trace_hardirqs_on+0x10/0x10 [ 2786.817127] ? check_preemption_disabled+0x35/0x240 [ 2786.817140] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2786.817153] ? HARDIRQ_verbose+0x10/0x10 [ 2786.817164] ? kvm_vcpu_release+0xa0/0xa0 [ 2786.817175] do_vfs_ioctl+0x75a/0xfe0 [ 2786.817194] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2786.822151] lowmem_reserve[]: [ 2786.826667] ? ioctl_preallocate+0x1a0/0x1a0 [ 2786.826691] ? security_file_ioctl+0x76/0xb0 [ 2786.826701] ? security_file_ioctl+0x83/0xb0 [ 2786.826713] SyS_ioctl+0x7f/0xb0 [ 2786.826720] ? do_vfs_ioctl+0xfe0/0xfe0 17:11:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2786.826738] do_syscall_64+0x1d5/0x640 [ 2786.826764] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2786.855381] 0 [ 2786.859754] RIP: 0033:0x45cb29 [ 2786.859759] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2786.859769] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2786.859774] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2786.859779] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 17:11:49 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2786.859785] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2786.859791] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 [ 2787.129004] 2559 2559 2559 2559 [ 2787.133381] Node 0 DMA32 free:32860kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:384kB local_pcp:196kB free_cma:0kB [ 2787.169348] lowmem_reserve[]: 0 0 0 0 0 [ 2787.179242] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2787.207653] lowmem_reserve[]: 0 0 0 0 0 [ 2787.221736] Node 1 Normal free:1998772kB min:53592kB low:66988kB high:80384kB active_anon:595500kB inactive_anon:64476kB active_file:39868kB inactive_file:178012kB unevictable:0kB writepending:212kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34240kB pagetables:64468kB bounce:0kB free_pcp:1180kB local_pcp:524kB free_cma:0kB [ 2787.274495] lowmem_reserve[]: 0 0 0 0 0 [ 2787.279293] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2787.299488] Node 0 DMA32: 1429*4kB (UMH) 2268*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32852kB [ 2787.317398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2787.329067] Node 1 Normal: 321*4kB (UME) 338*8kB (UME) 124*16kB (UME) 32*32kB (UME) 16*64kB (UME) 8*128kB (U) 2*256kB (ME) 3*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 480*4096kB (M) = 1999700kB [ 2787.350230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2787.360550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2787.372429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2787.382653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2787.392915] 56062 total pagecache pages [ 2787.398406] 0 pages in swap cache [ 2787.402823] Swap cache stats: add 0, delete 0, find 0/0 [ 2787.409435] Free swap = 0kB [ 2787.412687] Total swap = 0kB [ 2787.417386] 1965979 pages RAM [ 2787.420960] 0 pages HighMem/MovableOnly [ 2787.425114] 338456 pages reserved [ 2787.430653] 0 pages cma reserved [ 2787.446750] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2787.461462] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2787.471486] CPU: 1 PID: 3262 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2787.479298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.488637] Call Trace: [ 2787.491214] dump_stack+0x1b2/0x283 [ 2787.494830] warn_alloc.cold+0x96/0x1af [ 2787.498790] ? zone_watermark_ok_safe+0x250/0x250 [ 2787.503624] ? wait_for_completion_io+0x10/0x10 [ 2787.508284] __alloc_pages_nodemask+0x2129/0x2730 [ 2787.513119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2787.517945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2787.522789] ? HARDIRQ_verbose+0x10/0x10 [ 2787.526841] ? do_raw_spin_unlock+0x164/0x250 [ 2787.531318] alloc_pages_current+0xe7/0x1e0 [ 2787.535623] kvm_mmu_create+0xd1/0x1c0 [ 2787.539492] kvm_arch_vcpu_init+0x282/0x890 [ 2787.543796] ? alloc_pages_current+0xef/0x1e0 [ 2787.548277] kvm_vcpu_init+0x26d/0x360 [ 2787.552149] vmx_create_vcpu+0xf5/0x2950 [ 2787.556195] ? __mutex_unlock_slowpath+0x75/0x780 [ 2787.561017] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2787.566021] ? alloc_loaded_vmcs+0x240/0x240 [ 2787.570414] kvm_vm_ioctl+0x4ae/0x1430 [ 2787.574291] ? __lock_acquire+0x655/0x42a0 [ 2787.578513] ? kvm_vcpu_release+0xa0/0xa0 [ 2787.582647] ? trace_hardirqs_on+0x10/0x10 [ 2787.586862] ? check_preemption_disabled+0x35/0x240 [ 2787.591866] ? trace_hardirqs_on+0x10/0x10 [ 2787.596082] ? check_preemption_disabled+0x35/0x240 [ 2787.601084] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2787.605999] ? HARDIRQ_verbose+0x10/0x10 [ 2787.610051] ? kvm_vcpu_release+0xa0/0xa0 [ 2787.614186] do_vfs_ioctl+0x75a/0xfe0 [ 2787.617995] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2787.623613] ? ioctl_preallocate+0x1a0/0x1a0 [ 2787.628021] ? security_file_ioctl+0x76/0xb0 [ 2787.632416] ? security_file_ioctl+0x83/0xb0 [ 2787.636824] SyS_ioctl+0x7f/0xb0 [ 2787.640175] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2787.644139] do_syscall_64+0x1d5/0x640 [ 2787.648037] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2787.653210] RIP: 0033:0x45cb29 [ 2787.656383] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2787.664078] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2787.671342] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2787.678594] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2787.685846] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2787.693097] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2787.715762] warn_alloc_show_mem: 1 callbacks suppressed [ 2787.715766] Mem-Info: [ 2787.723571] active_anon:583950 inactive_anon:25896 isolated_anon:0 [ 2787.723571] active_file:9967 inactive_file:44504 isolated_file:0 [ 2787.723571] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2787.723571] slab_reclaimable:63368 slab_unreclaimable:241660 [ 2787.723571] mapped:67546 shmem:31010 pagetables:27310 bounce:0 [ 2787.723571] free:511391 free_pcp:385 free_cma:0 [ 2787.758553] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2787.787500] Node 1 active_anon:595064kB inactive_anon:64480kB active_file:39868kB inactive_file:178012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61284kB dirty:0kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2787.815469] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2787.842869] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2787.847973] Node 0 DMA32 free:32852kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:380kB local_pcp:196kB free_cma:0kB [ 2787.877152] lowmem_reserve[]: 0 0 0 0 0 [ 2787.881159] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2787.906678] lowmem_reserve[]: 0 0 0 0 0 [ 2787.910680] Node 1 Normal free:2001440kB min:53592kB low:66988kB high:80384kB active_anon:595064kB inactive_anon:64480kB active_file:39868kB inactive_file:178012kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34048kB pagetables:64108kB bounce:0kB free_pcp:1156kB local_pcp:540kB free_cma:0kB [ 2787.940893] lowmem_reserve[]: 0 0 0 0 0 [ 2787.944887] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2787.961028] Node 0 DMA32: 1429*4kB (UMH) 2268*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32852kB [ 2787.975955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2787.986768] Node 1 Normal: 493*4kB (UME) 241*8kB (UME) 146*16kB (UME) 43*32kB (UME) 19*64kB (UME) 15*128kB (U) 3*256kB (UME) 2*512kB (UE) 8*1024kB (UME) 7*2048kB (UM) 480*4096kB (M) = 2001148kB [ 2788.004322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2788.013245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:11:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r3, 0x1) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80003, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r4, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r4, 0x0, r3, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17:11:50 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:50 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08af750000080000bbbbbb0180c2000001000000004c27aaaaaba1aaaabb8d"]) perf_event_open(&(0x7f0000000880)={0x0, 0xe, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0xa0004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f0000000480)}, 0x40004, 0x0, 0x0, 0x4, 0x8, 0x1004, 0x7c}, 0x0, 0x0, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/191, &(0x7f0000000000)=0xbf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r2, 0x409, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x588}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xc2e5, 0xd9b) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 17:11:50 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:50 executing program 0: clone(0x200012041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pause() ptrace(0x10, r0) ptrace$getsig(0x4205, 0x0, 0x2, &(0x7f0000000300)) [ 2788.021881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2788.030795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2788.039432] 56065 total pagecache pages [ 2788.043403] 0 pages in swap cache [ 2788.046928] Swap cache stats: add 0, delete 0, find 0/0 [ 2788.052282] Free swap = 0kB [ 2788.055276] Total swap = 0kB [ 2788.058360] 1965979 pages RAM [ 2788.061451] 0 pages HighMem/MovableOnly [ 2788.065399] 338456 pages reserved [ 2788.068981] 0 pages cma reserved [ 2788.150786] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2788.179524] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2788.185506] CPU: 1 PID: 3366 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2788.193332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.202696] Call Trace: [ 2788.205297] dump_stack+0x1b2/0x283 [ 2788.208941] warn_alloc.cold+0x96/0x1af [ 2788.212923] ? zone_watermark_ok_safe+0x250/0x250 [ 2788.217785] ? wait_for_completion_io+0x10/0x10 [ 2788.222468] __alloc_pages_nodemask+0x2129/0x2730 [ 2788.227339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.232193] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.237054] ? HARDIRQ_verbose+0x10/0x10 [ 2788.241121] ? do_raw_spin_unlock+0x164/0x250 [ 2788.245626] alloc_pages_current+0xe7/0x1e0 [ 2788.249959] kvm_mmu_create+0xd1/0x1c0 [ 2788.253853] kvm_arch_vcpu_init+0x282/0x890 [ 2788.258185] ? alloc_pages_current+0xef/0x1e0 [ 2788.262685] kvm_vcpu_init+0x26d/0x360 [ 2788.266573] vmx_create_vcpu+0xf5/0x2950 [ 2788.270640] ? __mutex_unlock_slowpath+0x75/0x780 [ 2788.275487] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2788.280508] ? alloc_loaded_vmcs+0x240/0x240 [ 2788.284920] kvm_vm_ioctl+0x4ae/0x1430 [ 2788.288808] ? __lock_acquire+0x655/0x42a0 [ 2788.293047] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.297202] ? trace_hardirqs_on+0x10/0x10 [ 2788.301438] ? check_preemption_disabled+0x35/0x240 [ 2788.306461] ? trace_hardirqs_on+0x10/0x10 [ 2788.310699] ? check_preemption_disabled+0x35/0x240 [ 2788.315718] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2788.320659] ? HARDIRQ_verbose+0x10/0x10 [ 2788.324730] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.328879] do_vfs_ioctl+0x75a/0xfe0 [ 2788.332703] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2788.338333] ? ioctl_preallocate+0x1a0/0x1a0 [ 2788.342755] ? security_file_ioctl+0x76/0xb0 [ 2788.347165] ? security_file_ioctl+0x83/0xb0 [ 2788.351579] SyS_ioctl+0x7f/0xb0 [ 2788.354939] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2788.358914] do_syscall_64+0x1d5/0x640 [ 2788.362802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2788.367988] RIP: 0033:0x45cb29 [ 2788.371174] RSP: 002b:00007fab4360fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.378884] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2788.386151] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2788.393425] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 17:11:51 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:51 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2788.400698] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2788.407971] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab436106d4 17:11:51 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2788.463376] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2788.473543] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2788.536281] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 2788.541288] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 2788.543893] CPU: 1 PID: 3393 Comm: syz-executor.2 Not tainted 4.14.184-syzkaller #0 [ 2788.554513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.563875] Call Trace: [ 2788.566472] dump_stack+0x1b2/0x283 [ 2788.570105] warn_alloc.cold+0x96/0x1af [ 2788.574085] ? zone_watermark_ok_safe+0x250/0x250 [ 2788.578941] ? wait_for_completion_io+0x10/0x10 [ 2788.583619] __alloc_pages_nodemask+0x2129/0x2730 [ 2788.588485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.593339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.598204] ? HARDIRQ_verbose+0x10/0x10 [ 2788.602278] ? do_raw_spin_unlock+0x164/0x250 [ 2788.606791] alloc_pages_current+0xe7/0x1e0 [ 2788.611126] kvm_mmu_create+0xd1/0x1c0 [ 2788.615029] kvm_arch_vcpu_init+0x282/0x890 [ 2788.619360] ? alloc_pages_current+0xef/0x1e0 [ 2788.623865] kvm_vcpu_init+0x26d/0x360 [ 2788.627766] vmx_create_vcpu+0xf5/0x2950 [ 2788.631842] ? __mutex_unlock_slowpath+0x75/0x780 [ 2788.636693] ? alloc_loaded_vmcs+0x240/0x240 [ 2788.641120] kvm_vm_ioctl+0x4ae/0x1430 [ 2788.645023] ? __lock_acquire+0x655/0x42a0 [ 2788.649267] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.653423] ? trace_hardirqs_on+0x10/0x10 [ 2788.657663] ? check_preemption_disabled+0x35/0x240 [ 2788.662698] ? trace_hardirqs_on+0x10/0x10 [ 2788.666939] ? check_preemption_disabled+0x35/0x240 [ 2788.671972] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 2788.676917] ? HARDIRQ_verbose+0x10/0x10 [ 2788.680985] ? kvm_vcpu_release+0xa0/0xa0 17:11:51 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 17:11:51 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32, @ANYBLOB="0000000000000000040000000a0001006261736963000000600002005c000300580001000b00010073616d706c6500002c00028008000500010000000800030000008000180002"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2788.685147] do_vfs_ioctl+0x75a/0xfe0 [ 2788.688966] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2788.694661] ? ioctl_preallocate+0x1a0/0x1a0 [ 2788.699113] ? security_file_ioctl+0x76/0xb0 [ 2788.703537] ? security_file_ioctl+0x83/0xb0 [ 2788.707980] SyS_ioctl+0x7f/0xb0 [ 2788.711363] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2788.715350] do_syscall_64+0x1d5/0x640 [ 2788.719256] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2788.724453] RIP: 0033:0x45cb29 [ 2788.727641] RSP: 002b:00007fab435eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.735353] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2788.742624] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 2788.749896] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2788.757169] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2788.764441] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007fab435ef6d4 [ 2788.782355] CPU: 0 PID: 3368 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2788.790181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.799542] Call Trace: [ 2788.802142] dump_stack+0x1b2/0x283 [ 2788.805778] warn_alloc.cold+0x96/0x1af [ 2788.809754] ? zone_watermark_ok_safe+0x250/0x250 [ 2788.814608] ? wait_for_completion_io+0x10/0x10 [ 2788.819299] __alloc_pages_nodemask+0x2129/0x2730 [ 2788.824164] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.829007] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2788.833848] ? retint_kernel+0x2d/0x2d [ 2788.837753] ? retint_kernel+0x2d/0x2d [ 2788.841657] alloc_pages_current+0xe7/0x1e0 [ 2788.845987] kvm_mmu_create+0xd1/0x1c0 [ 2788.849879] kvm_arch_vcpu_init+0x282/0x890 [ 2788.854205] ? alloc_pages_current+0xef/0x1e0 [ 2788.858708] kvm_vcpu_init+0x26d/0x360 [ 2788.862599] vmx_create_vcpu+0xf5/0x2950 [ 2788.866677] ? alloc_loaded_vmcs+0x240/0x240 [ 2788.871082] ? arch_uninstall_hw_breakpoint.cold+0x20/0x20 [ 2788.876712] kvm_vm_ioctl+0x4ae/0x1430 [ 2788.880601] ? __lock_acquire+0x655/0x42a0 [ 2788.884843] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.888993] ? retint_kernel+0x2d/0x2d [ 2788.892886] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2788.897904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2788.902666] ? check_preemption_disabled+0x35/0x240 [ 2788.907689] ? retint_kernel+0x2d/0x2d [ 2788.911589] ? selinux_file_ioctl+0x19a/0x560 [ 2788.913431] warn_alloc_show_mem: 1 callbacks suppressed [ 2788.913435] Mem-Info: [ 2788.916087] ? selinux_file_ioctl+0x1b7/0x560 [ 2788.916099] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.916110] do_vfs_ioctl+0x75a/0xfe0 [ 2788.916124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2788.921489] active_anon:584430 inactive_anon:25895 isolated_anon:0 [ 2788.921489] active_file:9969 inactive_file:44506 isolated_file:0 [ 2788.921489] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2788.921489] slab_reclaimable:63348 slab_unreclaimable:242199 [ 2788.921489] mapped:67854 shmem:31010 pagetables:27466 bounce:0 [ 2788.921489] free:510036 free_pcp:284 free_cma:0 [ 2788.923868] ? ioctl_preallocate+0x1a0/0x1a0 [ 2788.928396] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2788.932464] ? check_preemption_disabled+0x35/0x240 [ 2788.936290] Node 1 active_anon:596988kB inactive_anon:64476kB active_file:39872kB inactive_file:178024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62512kB dirty:48kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2788.941026] ? retint_kernel+0x2d/0x2d [ 2788.975122] Node 0 [ 2788.979507] ? security_file_ioctl+0x83/0xb0 [ 2788.979520] SyS_ioctl+0x7f/0xb0 [ 2789.007372] DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.012343] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2789.040327] lowmem_reserve[]: 17:11:51 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000d4b69363e9bfc143", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800000}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2789.044170] do_syscall_64+0x1d5/0x640 [ 2789.046389] 0 [ 2789.050771] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2789.054097] 2559 2559 [ 2789.080020] RIP: 0033:0x45cb29 [ 2789.080026] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.080036] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2789.080042] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2789.080049] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2789.084001] 2559 [ 2789.087083] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2789.087089] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2789.268345] 2559 [ 2789.270451] Node 0 DMA32 free:32520kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:368kB local_pcp:184kB free_cma:0kB [ 2789.307332] lowmem_reserve[]: 0 0 0 0 0 [ 2789.311369] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.337396] lowmem_reserve[]: 0 0 0 0 0 [ 2789.341403] Node 1 Normal free:1999312kB min:53592kB low:66988kB high:80384kB active_anon:595492kB inactive_anon:64476kB active_file:39876kB inactive_file:178060kB unevictable:0kB writepending:236kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:34048kB pagetables:64388kB bounce:0kB free_pcp:1284kB local_pcp:640kB free_cma:0kB [ 2789.373361] lowmem_reserve[]: 0 0 0 0 0 [ 2789.378022] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2789.399570] Node 0 DMA32: 1420*4kB (MH) 2231*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32520kB [ 2789.414713] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2789.430194] Node 1 Normal: 446*4kB (UME) 272*8kB (UME) 50*16kB (UME) 17*32kB (UME) 22*64kB (UME) 16*128kB (U) 4*256kB (UME) 2*512kB (UE) 8*1024kB (UME) 7*2048kB (UM) 480*4096kB (M) = 1999416kB [ 2789.449348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2789.458873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2789.468145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2789.477653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2789.486937] 56079 total pagecache pages [ 2789.490925] 0 pages in swap cache [ 2789.494373] Swap cache stats: add 0, delete 0, find 0/0 [ 2789.494964] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2789.513864] Free swap = 0kB [ 2789.517752] Total swap = 0kB [ 2789.519370] syz-executor.5 cpuset= [ 2789.520764] 1965979 pages RAM [ 2789.520769] 0 pages HighMem/MovableOnly [ 2789.520773] 338456 pages reserved [ 2789.520777] 0 pages cma reserved [ 2789.549006] / mems_allowed=0-1 [ 2789.552269] CPU: 0 PID: 3368 Comm: syz-executor.5 Not tainted 4.14.184-syzkaller #0 [ 2789.560061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2789.569398] Call Trace: [ 2789.571972] dump_stack+0x1b2/0x283 [ 2789.575594] warn_alloc.cold+0x96/0x1af [ 2789.579551] ? zone_watermark_ok_safe+0x250/0x250 [ 2789.584379] ? wait_for_completion_io+0x10/0x10 [ 2789.589042] __alloc_pages_nodemask+0x2129/0x2730 [ 2789.593879] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2789.598712] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2789.603454] ? check_preemption_disabled+0x35/0x240 [ 2789.608464] alloc_pages_current+0xe7/0x1e0 [ 2789.612775] kvm_mmu_create+0xd1/0x1c0 [ 2789.616647] kvm_arch_vcpu_init+0x282/0x890 [ 2789.620946] ? alloc_pages_current+0xef/0x1e0 [ 2789.625423] kvm_vcpu_init+0x26d/0x360 [ 2789.629311] vmx_create_vcpu+0xf5/0x2950 [ 2789.633402] ? __mutex_unlock_slowpath+0x75/0x780 [ 2789.638230] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 2789.643231] ? alloc_loaded_vmcs+0x240/0x240 [ 2789.647623] kvm_vm_ioctl+0x4ae/0x1430 [ 2789.651493] ? __lock_acquire+0x655/0x42a0 [ 2789.655706] ? kvm_vcpu_release+0xa0/0xa0 [ 2789.659837] ? retint_kernel+0x2d/0x2d [ 2789.663705] ? retint_kernel+0x2d/0x2d [ 2789.667580] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 2789.672585] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2789.677319] ? check_preemption_disabled+0x35/0x240 [ 2789.682312] ? retint_kernel+0x2d/0x2d [ 2789.686187] ? do_vfs_ioctl+0x6fb/0xfe0 [ 2789.690141] ? kvm_vcpu_release+0xa0/0xa0 [ 2789.694269] do_vfs_ioctl+0x75a/0xfe0 [ 2789.698052] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 2789.703654] ? check_preemption_disabled+0x35/0x240 [ 2789.708662] ? ioctl_preallocate+0x1a0/0x1a0 [ 2789.713063] ? security_file_ioctl+0x76/0xb0 [ 2789.717451] ? security_file_ioctl+0x83/0xb0 [ 2789.721839] SyS_ioctl+0x7f/0xb0 [ 2789.725182] ? do_vfs_ioctl+0xfe0/0xfe0 [ 2789.729146] do_syscall_64+0x1d5/0x640 [ 2789.733091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2789.738260] RIP: 0033:0x45cb29 [ 2789.741429] RSP: 002b:00007f2d8ae7ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.749119] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045cb29 [ 2789.756369] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2789.763638] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2789.770901] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2789.778155] R13: 00000000000003a2 R14: 00000000004c64a3 R15: 00007f2d8ae7f6d4 [ 2789.786272] warn_alloc_show_mem: 1 callbacks suppressed [ 2789.786276] Mem-Info: [ 2789.794086] active_anon:584008 inactive_anon:25895 isolated_anon:0 [ 2789.794086] active_file:9969 inactive_file:44517 isolated_file:0 [ 2789.794086] unevictable:0 dirty:11 writeback:6 unstable:0 [ 2789.794086] slab_reclaimable:63352 slab_unreclaimable:241531 [ 2789.794086] mapped:67589 shmem:31010 pagetables:27331 bounce:0 [ 2789.794086] free:511339 free_pcp:417 free_cma:0 [ 2789.828612] Node 0 active_anon:1740732kB inactive_anon:39104kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:4kB shmem:44464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2789.857600] Node 1 active_anon:595228kB inactive_anon:64476kB active_file:39880kB inactive_file:178104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61408kB dirty:76kB writeback:0kB shmem:79576kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2789.886116] Node 0 DMA free:10440kB min:220kB low:272kB high:324kB active_anon:2076kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.912790] lowmem_reserve[]: 0 2559 2559 2559 2559 [ 2789.918904] Node 0 DMA32 free:32520kB min:36296kB low:45368kB high:54440kB active_anon:1738656kB inactive_anon:39092kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2623992kB mlocked:0kB kernel_stack:11776kB pagetables:45132kB bounce:0kB free_pcp:372kB local_pcp:184kB free_cma:0kB [ 2789.948087] lowmem_reserve[]: 0 0 0 0 0 [ 2789.952081] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.977426] lowmem_reserve[]: 0 0 0 0 0 [ 2789.981422] Node 1 Normal free:2002072kB min:53592kB low:66988kB high:80384kB active_anon:595228kB inactive_anon:64476kB active_file:39880kB inactive_file:178104kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:33984kB pagetables:64196kB bounce:0kB free_pcp:1312kB local_pcp:668kB free_cma:0kB [ 2790.011888] lowmem_reserve[]: 0 0 0 0 0 [ 2790.015959] Node 0 DMA: 16*4kB (UMH) 65*8kB (UMEH) 34*16kB (UEH) 7*32kB (UMEH) 4*64kB (UEH) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 0*4096kB = 10440kB [ 2790.032105] Node 0 DMA32: 1420*4kB (MH) 2231*8kB (UME) 398*16kB (UME) 72*32kB (UM) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32520kB [ 2790.046934] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2790.057756] Node 1 Normal: 460*4kB (UME) 425*8kB (UME) 114*16kB (UME) 22*32kB (UME) 22*64kB (UME) 16*128kB (U) 4*256kB (UME) 2*512kB (UE) 8*1024kB (UME) 7*2048kB (UM) 480*4096kB (M) = 2001880kB [ 2790.075307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2790.084212] Node 0 hugepages_to