f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2744.027878] syz-executor.4 cpuset=syz4 mems_allowed=0-1 23:08:45 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feffffff"], 0x1) [ 2744.124829] CPU: 1 PID: 24032 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 2744.132769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2744.142288] Call Trace: [ 2744.145029] dump_stack+0x142/0x197 [ 2744.148702] warn_alloc.cold+0x96/0x1af [ 2744.152788] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2744.157664] ? wait_for_completion+0x420/0x420 [ 2744.162272] __alloc_pages_slowpath+0x23c6/0x2930 [ 2744.167938] ? warn_alloc+0xf0/0xf0 [ 2744.171718] ? __might_sleep+0x93/0xb0 [ 2744.175633] __alloc_pages_nodemask+0x62c/0x7a0 [ 2744.180490] ? rcu_read_lock_sched_held+0x110/0x130 [ 2744.185532] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2744.190579] alloc_pages_current+0xec/0x1e0 [ 2744.195227] kvm_mmu_create+0xdf/0x1e0 [ 2744.199175] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2744.203603] kvm_vcpu_init+0x272/0x360 [ 2744.207513] vmx_create_vcpu+0xfc/0x2aa0 [ 2744.211775] ? mutex_trylock+0x1c0/0x1c0 [ 2744.215876] ? handle_rdmsr+0x6e0/0x6e0 [ 2744.219898] ? wait_for_completion+0x420/0x420 [ 2744.224497] kvm_arch_vcpu_create+0x8c/0xc0 [ 2744.228837] kvm_vm_ioctl+0x501/0x1600 [ 2744.232746] ? __lock_acquire+0x5f7/0x4620 [ 2744.236991] ? get_unused_fd_flags+0xd0/0xd0 [ 2744.241417] ? kvm_vcpu_release+0xa0/0xa0 [ 2744.245587] ? trace_hardirqs_on+0x10/0x10 [ 2744.250035] ? trace_hardirqs_on+0x10/0x10 [ 2744.254285] ? save_trace+0x290/0x290 [ 2744.258097] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2744.263162] ? __fget+0x210/0x370 [ 2744.266683] ? find_held_lock+0x35/0x130 [ 2744.270760] ? __fget+0x210/0x370 [ 2744.274228] ? kvm_vcpu_release+0xa0/0xa0 [ 2744.278433] do_vfs_ioctl+0x7ae/0x1060 [ 2744.282340] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2744.287109] ? lock_downgrade+0x740/0x740 [ 2744.291270] ? ioctl_preallocate+0x1c0/0x1c0 [ 2744.295699] ? __fget+0x237/0x370 [ 2744.299163] ? security_file_ioctl+0x89/0xb0 [ 2744.303584] SyS_ioctl+0x8f/0xc0 [ 2744.306958] ? do_vfs_ioctl+0x1060/0x1060 [ 2744.311271] do_syscall_64+0x1e8/0x640 [ 2744.315171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2744.320047] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2744.325252] RIP: 0033:0x45b349 [ 2744.328452] RSP: 002b:00007f7157d08c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2744.336178] RAX: ffffffffffffffda RBX: 00007f7157d096d4 RCX: 000000000045b349 [ 2744.343470] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2744.350882] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2744.358172] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2744.365578] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c 23:08:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:08:46 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) [ 2745.497913] Mem-Info: [ 2745.530566] active_anon:1259531 inactive_anon:202 isolated_anon:0 [ 2745.530566] active_file:1072 inactive_file:1074 isolated_file:55 [ 2745.530566] unevictable:0 dirty:17 writeback:0 unstable:0 [ 2745.530566] slab_reclaimable:18874 slab_unreclaimable:172421 [ 2745.530566] mapped:54243 shmem:316 pagetables:33151 bounce:0 [ 2745.530566] free:26647 free_pcp:185 free_cma:0 23:08:47 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) 23:08:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) [ 2745.745921] Node 0 active_anon:1775244kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 23:08:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2746.073411] Node 1 active_anon:3262940kB inactive_anon:28kB active_file:4336kB inactive_file:3440kB unevictable:0kB isolated(anon):0kB isolated(file):460kB mapped:6528kB dirty:160kB writeback:0kB shmem:300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2746.249146] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.305343] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2746.312772] Node 0 DMA32 free:27228kB min:36384kB low:45480kB high:54576kB active_anon:1770832kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22688kB pagetables:52576kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2746.409723] lowmem_reserve[]: 0 0 0 0 0 [ 2746.429872] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2746.506806] lowmem_reserve[]: 0 0 0 0 0 [ 2746.531780] Node 1 Normal free:69852kB min:53504kB low:66880kB high:80256kB active_anon:3262940kB inactive_anon:28kB active_file:3804kB inactive_file:2936kB unevictable:0kB writepending:160kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28256kB pagetables:80020kB bounce:0kB free_pcp:1016kB local_pcp:676kB free_cma:0kB [ 2746.802444] lowmem_reserve[]: 0 0 0 0 0 [ 2746.843367] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2746.899968] Node 0 DMA32: 2736*4kB (UMEH) 1317*8kB (UMEH) 271*16kB (UME) 46*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27288kB [ 2746.945862] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2746.978201] Node 1 Normal: 1144*4kB (UME) 806*8kB (UMEH) 628*16kB (UMEH) 487*32kB (UMEH) 206*64kB (UMEH) 161*128kB (UM) 40*256kB (UM) 8*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 86832kB [ 2747.021900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2747.049724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2747.071121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2747.107237] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2747.141773] 1968 total pagecache pages [ 2747.145730] 0 pages in swap cache [ 2747.154687] Swap cache stats: add 0, delete 0, find 0/0 [ 2747.182832] Free swap = 0kB [ 2747.187422] Total swap = 0kB [ 2747.214066] 1965979 pages RAM [ 2747.218487] 0 pages HighMem/MovableOnly [ 2747.239415] 335855 pages reserved [ 2747.243008] 0 pages cma reserved 23:08:53 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) 23:08:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1]}) 23:08:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:08:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:08:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:08:53 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x3, 0x7}, 0x0) getdents(r2, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_open_dev$amidi(&(0x7f0000001780)='/dev/amidi#\x00', 0x3, 0x193102) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001800)="c815890fd072613fd8104fabb7ce8c4701e04133eb040000009c36d5c3fd938a4d244e7aa2b969aa9631a47bd9d6f2168a32d393") openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f63746d6f64653d32ebbd8cb6dd94726b3030303030303030300000000008000000000000000000", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d21db5d1490f581c512a72c8f37d2fef8b17f41712ada253e6963038f6580d08a9a9c5bbb4a0cca92ceb3b8378e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f0000001b00)='ns\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') mount$fuse(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x40002, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00=', @ANYRESHEX=r9, @ANYBLOB="2c008a0000530000003d30303030303030303030303030303030303030303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ff9900"]) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 23:08:53 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[], 0x0) [ 2753.480192] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2753.541641] udevd cpuset=/ mems_allowed=0-1 [ 2753.556613] CPU: 0 PID: 8065 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2753.563796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.573506] Call Trace: [ 2753.576112] dump_stack+0x142/0x197 [ 2753.579754] dump_header+0x177/0x6cd [ 2753.583476] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2753.588594] ? ___ratelimit+0x55/0x537 [ 2753.592496] oom_kill_process.cold+0x10/0xadd [ 2753.597366] ? rcu_read_unlock_special+0x895/0xd40 [ 2753.602407] ? lock_downgrade+0x740/0x740 [ 2753.606579] out_of_memory+0x2ee/0x1180 [ 2753.610558] ? lock_acquire+0x16f/0x430 [ 2753.614540] ? oom_killer_disable+0x1d0/0x1d0 [ 2753.619037] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2753.623976] __alloc_pages_slowpath+0x2251/0x2930 [ 2753.628839] ? warn_alloc+0xf0/0xf0 [ 2753.633261] ? __might_sleep+0x93/0xb0 [ 2753.637163] __alloc_pages_nodemask+0x62c/0x7a0 [ 2753.641858] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2753.646880] ? ____cache_alloc_node+0x1be/0x1d0 [ 2753.651677] ? cache_grow_begin+0x335/0x400 [ 2753.656008] cache_grow_begin+0x80/0x400 [ 2753.660097] ? __cpuset_node_allowed+0xff/0x450 [ 2753.664778] fallback_alloc+0x1fd/0x2c0 [ 2753.668761] ____cache_alloc_node+0x1be/0x1d0 [ 2753.673354] kmem_cache_alloc+0x1f3/0x780 [ 2753.677503] ? __do_page_fault+0x4e9/0xb80 [ 2753.681754] ? find_held_lock+0x35/0x130 [ 2753.685834] getname_flags+0xcb/0x580 [ 2753.689774] user_path_at_empty+0x2f/0x50 [ 2753.694018] SyS_readlink+0xb7/0x290 [ 2753.697739] ? SyS_readlinkat+0x2a0/0x2a0 [ 2753.701893] ? do_syscall_64+0x53/0x640 [ 2753.705897] ? SyS_readlinkat+0x2a0/0x2a0 [ 2753.710177] do_syscall_64+0x1e8/0x640 [ 2753.714065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2753.718915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2753.724258] RIP: 0033:0x7f812dc51577 [ 2753.727970] RSP: 002b:00007ffc6a4c0ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 2753.735688] RAX: ffffffffffffffda RBX: 00000000022a0030 RCX: 00007f812dc51577 [ 2753.742954] RDX: 0000000000000400 RSI: 00007ffc6a4c0ae0 RDI: 00007ffc6a4c0fc0 [ 2753.750214] RBP: 00000000022ade10 R08: 00000000022ade10 R09: 7665642f7379732f [ 2753.757751] R10: 7269762f73656369 R11: 0000000000000246 R12: 00007ffc6a4c0fc0 [ 2753.765019] R13: 0000000000000400 R14: 00000000022a0030 R15: 000000000000000b [ 2753.925681] Mem-Info: [ 2753.928421] active_anon:1263469 inactive_anon:202 isolated_anon:0 [ 2753.928421] active_file:233 inactive_file:248 isolated_file:39 [ 2753.928421] unevictable:0 dirty:24 writeback:0 unstable:0 [ 2753.928421] slab_reclaimable:17881 slab_unreclaimable:177415 [ 2753.928421] mapped:52651 shmem:332 pagetables:33183 bounce:0 [ 2753.928421] free:20364 free_pcp:236 free_cma:0 [ 2753.968544] Node 0 active_anon:1781984kB inactive_anon:780kB active_file:16kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:8kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2754.002850] Node 1 active_anon:3271892kB inactive_anon:28kB active_file:916kB inactive_file:840kB unevictable:0kB isolated(anon):0kB isolated(file):156kB mapped:1596kB dirty:88kB writeback:0kB shmem:360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2754.048343] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2754.082094] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2754.087558] Node 0 DMA32 free:27344kB min:36384kB low:45480kB high:54576kB active_anon:1777572kB inactive_anon:780kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:8kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22720kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2754.161941] lowmem_reserve[]: 0 0 0 0 0 [ 2754.166186] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2754.191802] lowmem_reserve[]: 0 0 0 0 0 [ 2754.195814] Node 1 Normal free:45028kB min:53504kB low:66880kB high:80256kB active_anon:3271988kB inactive_anon:28kB active_file:752kB inactive_file:824kB unevictable:0kB writepending:120kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28064kB pagetables:80140kB bounce:0kB free_pcp:476kB local_pcp:476kB free_cma:0kB [ 2754.225761] lowmem_reserve[]: 0 0 0 0 0 [ 2754.229909] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2754.251123] Node 0 DMA32: 2630*4kB (UME) 1245*8kB (UME) 315*16kB (UME) 57*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27344kB [ 2754.268236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2754.285280] Node 1 Normal: 1525*4kB (UME) 527*8kB (UME) 242*16kB (UMEH) 120*32kB (UME) 170*64kB (UME) 116*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45036kB [ 2754.324723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2754.333685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2754.365692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2754.385302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2754.394120] 620 total pagecache pages [ 2754.397937] 0 pages in swap cache [ 2754.407930] Swap cache stats: add 0, delete 0, find 0/0 [ 2754.413458] Free swap = 0kB [ 2754.416495] Total swap = 0kB [ 2754.419518] 1965979 pages RAM [ 2754.427960] 0 pages HighMem/MovableOnly [ 2754.432191] 335855 pages reserved [ 2754.435778] 0 pages cma reserved [ 2754.439170] Out of memory: Kill process 24116 (syz-executor.1) score 1007 or sacrifice child [ 2754.453744] Killed process 24139 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34980kB, shmem-rss:0kB [ 2754.556763] oom_reaper: reaped process 24139 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB 23:08:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1}}) 23:08:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:08:56 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x3, 0x7}, 0x0) getdents(r2, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_open_dev$amidi(&(0x7f0000001780)='/dev/amidi#\x00', 0x3, 0x193102) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001800)="c815890fd072613fd8104fabb7ce8c4701e04133eb040000009c36d5c3fd938a4d244e7aa2b969aa9631a47bd9d6f2168a32d393") openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f63746d6f64653d32ebbd8cb6dd94726b3030303030303030300000000008000000000000000000", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d21db5d1490f581c512a72c8f37d2fef8b17f41712ada253e6963038f6580d08a9a9c5bbb4a0cca92ceb3b8378e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f0000001b00)='ns\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') mount$fuse(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x40002, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00=', @ANYRESHEX=r9, @ANYBLOB="2c008a0000530000003d30303030303030303030303030303030303030303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ff9900"]) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 23:08:57 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[], 0x0) 23:08:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:08:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1}}) [ 2756.078457] audit: type=1400 audit(1580339337.833:790): avc: denied { map } for pid=24147 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=1622 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 23:08:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:08:58 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[], 0x0) 23:08:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) [ 2756.457853] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 23:08:58 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) [ 2756.590704] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2756.633500] CPU: 0 PID: 24161 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 2756.641527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.651053] Call Trace: [ 2756.653663] dump_stack+0x142/0x197 [ 2756.657557] warn_alloc.cold+0x96/0x1af [ 2756.661558] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2756.666432] ? wait_for_completion+0x420/0x420 [ 2756.671165] __alloc_pages_slowpath+0x23c6/0x2930 [ 2756.676194] ? warn_alloc+0xf0/0xf0 [ 2756.679970] ? __might_sleep+0x93/0xb0 [ 2756.683872] __alloc_pages_nodemask+0x62c/0x7a0 [ 2756.688655] ? rcu_read_lock_sched_held+0x110/0x130 [ 2756.693696] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2756.698787] alloc_pages_current+0xec/0x1e0 [ 2756.703130] kvm_mmu_create+0xdf/0x1e0 [ 2756.707036] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2756.711386] kvm_vcpu_init+0x272/0x360 [ 2756.715296] vmx_create_vcpu+0xfc/0x2aa0 [ 2756.719371] ? mutex_trylock+0x1c0/0x1c0 [ 2756.723546] ? handle_rdmsr+0x6e0/0x6e0 [ 2756.727636] ? wait_for_completion+0x420/0x420 [ 2756.732433] kvm_arch_vcpu_create+0x8c/0xc0 [ 2756.736774] kvm_vm_ioctl+0x501/0x1600 [ 2756.740673] ? __lock_acquire+0x5f7/0x4620 [ 2756.745197] ? get_unused_fd_flags+0xd0/0xd0 [ 2756.749735] ? kvm_vcpu_release+0xa0/0xa0 [ 2756.753960] ? trace_hardirqs_on+0x10/0x10 [ 2756.758218] ? trace_hardirqs_on+0x10/0x10 [ 2756.762476] ? save_trace+0x290/0x290 [ 2756.766433] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2756.771393] ? __fget+0x210/0x370 [ 2756.774865] ? find_held_lock+0x35/0x130 [ 2756.779125] ? __fget+0x210/0x370 [ 2756.782595] ? kvm_vcpu_release+0xa0/0xa0 [ 2756.786897] do_vfs_ioctl+0x7ae/0x1060 [ 2756.790809] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2756.795688] ? lock_downgrade+0x740/0x740 [ 2756.799889] ? ioctl_preallocate+0x1c0/0x1c0 [ 2756.804323] ? __fget+0x237/0x370 [ 2756.807803] ? security_file_ioctl+0x89/0xb0 [ 2756.812280] SyS_ioctl+0x8f/0xc0 [ 2756.815683] ? do_vfs_ioctl+0x1060/0x1060 [ 2756.819856] do_syscall_64+0x1e8/0x640 [ 2756.823795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2756.828872] entry_SYSCALL_64_after_hwframe+0x42/0xb7 23:08:58 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) [ 2756.834088] RIP: 0033:0x45b349 [ 2756.837292] RSP: 002b:00007f7157d08c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2756.845146] RAX: ffffffffffffffda RBX: 00007f7157d096d4 RCX: 000000000045b349 [ 2756.852433] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2756.859715] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2756.867161] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2756.874574] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c [ 2756.952708] Mem-Info: [ 2756.955274] active_anon:1255560 inactive_anon:202 isolated_anon:0 [ 2756.955274] active_file:1201 inactive_file:1914 isolated_file:82 [ 2756.955274] unevictable:0 dirty:27 writeback:0 unstable:0 [ 2756.955274] slab_reclaimable:17822 slab_unreclaimable:177973 [ 2756.955274] mapped:54560 shmem:332 pagetables:33180 bounce:0 [ 2756.955274] free:25143 free_pcp:319 free_cma:0 23:08:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2757.529177] Node 0 active_anon:1781416kB inactive_anon:780kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:208920kB dirty:0kB writeback:8kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2757.728197] Node 1 active_anon:3256024kB inactive_anon:28kB active_file:2292kB inactive_file:3744kB unevictable:0kB isolated(anon):0kB isolated(file):512kB mapped:5340kB dirty:0kB writeback:80kB shmem:364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2757.851377] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2757.916975] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2757.937570] Node 0 DMA32 free:26952kB min:36384kB low:45480kB high:54576kB active_anon:1776816kB inactive_anon:780kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22816kB pagetables:52592kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.027139] lowmem_reserve[]: 0 0 0 0 0 [ 2758.036190] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2758.087889] lowmem_reserve[]: 0 0 0 0 0 [ 2758.092663] Node 1 Normal free:57920kB min:53504kB low:66880kB high:80256kB active_anon:3256160kB inactive_anon:28kB active_file:1864kB inactive_file:1764kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28032kB pagetables:80112kB bounce:0kB free_pcp:1372kB local_pcp:644kB free_cma:0kB [ 2758.136914] lowmem_reserve[]: 0 0 0 0 0 [ 2758.147011] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2758.168222] Node 0 DMA32: 2609*4kB (UME) 1297*8kB (UME) 326*16kB (UME) 50*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27628kB [ 2758.186667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2758.198013] Node 1 Normal: 1642*4kB (UME) 1017*8kB (UMEH) 224*16kB (UME) 400*32kB (UME) 173*64kB (UME) 116*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58288kB [ 2758.219288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.228541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.243611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2758.254137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2758.267928] 1095 total pagecache pages [ 2758.272952] 0 pages in swap cache [ 2758.276618] Swap cache stats: add 0, delete 0, find 0/0 [ 2758.286170] Free swap = 0kB [ 2758.289264] Total swap = 0kB [ 2758.294453] 1965979 pages RAM [ 2758.297822] 0 pages HighMem/MovableOnly [ 2758.306147] 335855 pages reserved [ 2758.309738] 0 pages cma reserved 23:09:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1}}) [ 2760.987999] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2761.078323] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2761.100466] CPU: 1 PID: 24192 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 2761.108505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2761.117873] Call Trace: [ 2761.120487] dump_stack+0x142/0x197 [ 2761.124141] warn_alloc.cold+0x96/0x1af [ 2761.128343] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2761.133215] ? wait_for_completion+0x420/0x420 [ 2761.137831] __alloc_pages_slowpath+0x23c6/0x2930 [ 2761.142716] ? warn_alloc+0xf0/0xf0 [ 2761.146487] ? __might_sleep+0x93/0xb0 [ 2761.150392] __alloc_pages_nodemask+0x62c/0x7a0 [ 2761.155102] ? rcu_read_lock_sched_held+0x110/0x130 [ 2761.160138] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2761.165184] alloc_pages_current+0xec/0x1e0 [ 2761.169548] kvm_mmu_create+0xdf/0x1e0 [ 2761.173603] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2761.177948] kvm_vcpu_init+0x272/0x360 [ 2761.181858] vmx_create_vcpu+0xfc/0x2aa0 [ 2761.185935] ? mutex_trylock+0x1c0/0x1c0 [ 2761.190023] ? handle_rdmsr+0x6e0/0x6e0 [ 2761.194156] ? wait_for_completion+0x420/0x420 [ 2761.198992] kvm_arch_vcpu_create+0x8c/0xc0 [ 2761.203355] kvm_vm_ioctl+0x501/0x1600 [ 2761.207378] ? __lock_acquire+0x5f7/0x4620 [ 2761.211631] ? get_unused_fd_flags+0xd0/0xd0 [ 2761.216184] ? kvm_vcpu_release+0xa0/0xa0 [ 2761.220354] ? trace_hardirqs_on+0x10/0x10 [ 2761.224621] ? trace_hardirqs_on+0x10/0x10 [ 2761.229017] ? save_trace+0x290/0x290 [ 2761.232828] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2761.237771] ? __fget+0x210/0x370 [ 2761.241236] ? find_held_lock+0x35/0x130 [ 2761.245310] ? __fget+0x210/0x370 [ 2761.248781] ? kvm_vcpu_release+0xa0/0xa0 [ 2761.253059] do_vfs_ioctl+0x7ae/0x1060 [ 2761.256958] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2761.261719] ? lock_downgrade+0x740/0x740 [ 2761.265879] ? ioctl_preallocate+0x1c0/0x1c0 [ 2761.270302] ? __fget+0x237/0x370 [ 2761.273771] ? security_file_ioctl+0x89/0xb0 [ 2761.278197] SyS_ioctl+0x8f/0xc0 [ 2761.281579] ? do_vfs_ioctl+0x1060/0x1060 [ 2761.285749] do_syscall_64+0x1e8/0x640 [ 2761.289653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2761.294526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2761.299726] RIP: 0033:0x45b349 [ 2761.302928] RSP: 002b:00007f7157d08c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2761.310653] RAX: ffffffffffffffda RBX: 00007f7157d096d4 RCX: 000000000045b349 [ 2761.317932] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2761.325217] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2761.332504] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2761.339946] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c [ 2761.526470] Mem-Info: [ 2761.529309] active_anon:1255247 inactive_anon:202 isolated_anon:0 [ 2761.529309] active_file:631 inactive_file:1068 isolated_file:64 [ 2761.529309] unevictable:0 dirty:7 writeback:0 unstable:0 [ 2761.529309] slab_reclaimable:17852 slab_unreclaimable:176636 [ 2761.529309] mapped:53547 shmem:333 pagetables:33092 bounce:0 [ 2761.529309] free:28159 free_pcp:349 free_cma:0 23:09:03 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:09:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:03 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) 23:09:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) [ 2761.632085] Node 0 active_anon:1775020kB inactive_anon:780kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 23:09:03 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500"/350], 0x1) [ 2761.806326] Node 1 active_anon:3246068kB inactive_anon:28kB active_file:3480kB inactive_file:9092kB unevictable:0kB isolated(anon):0kB isolated(file):992kB mapped:10180kB dirty:128kB writeback:0kB shmem:364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2761.939203] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2761.986336] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2762.003109] CPU: 0 PID: 24201 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 2762.011052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.012895] Node 0 [ 2762.020425] Call Trace: [ 2762.020450] dump_stack+0x142/0x197 [ 2762.020465] warn_alloc.cold+0x96/0x1af [ 2762.020476] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2762.020497] ? wait_for_completion+0x420/0x420 [ 2762.020513] __alloc_pages_slowpath+0x23c6/0x2930 [ 2762.020538] ? warn_alloc+0xf0/0xf0 [ 2762.026183] DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2762.029112] ? __might_sleep+0x93/0xb0 [ 2762.029129] __alloc_pages_nodemask+0x62c/0x7a0 [ 2762.029143] ? rcu_read_lock_sched_held+0x110/0x130 [ 2762.033594] lowmem_reserve[]: [ 2762.038023] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2762.038047] alloc_pages_current+0xec/0x1e0 [ 2762.038066] kvm_mmu_create+0xdf/0x1e0 [ 2762.038079] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2762.038093] kvm_vcpu_init+0x272/0x360 [ 2762.043182] 0 [ 2762.047587] vmx_create_vcpu+0xfc/0x2aa0 [ 2762.047602] ? mutex_trylock+0x1c0/0x1c0 [ 2762.047622] ? handle_rdmsr+0x6e0/0x6e0 [ 2762.047633] ? wait_for_completion+0x420/0x420 [ 2762.047650] kvm_arch_vcpu_create+0x8c/0xc0 [ 2762.068230] 2569 [ 2762.077408] kvm_vm_ioctl+0x501/0x1600 [ 2762.077423] ? __lock_acquire+0x5f7/0x4620 [ 2762.077432] ? find_held_lock+0x35/0x130 [ 2762.077447] ? kvm_vcpu_release+0xa0/0xa0 [ 2762.077458] ? trace_hardirqs_on+0x10/0x10 [ 2762.077473] ? trace_hardirqs_on+0x10/0x10 [ 2762.077486] ? save_trace+0x290/0x290 [ 2762.077494] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2762.077508] ? __fget+0x210/0x370 [ 2762.081867] 2569 [ 2762.086223] ? find_held_lock+0x35/0x130 [ 2762.086237] ? __fget+0x210/0x370 [ 2762.086253] ? kvm_vcpu_release+0xa0/0xa0 [ 2762.086266] do_vfs_ioctl+0x7ae/0x1060 [ 2762.086279] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2762.086291] ? lock_downgrade+0x740/0x740 [ 2762.091892] 2569 [ 2762.094558] ? ioctl_preallocate+0x1c0/0x1c0 [ 2762.094575] ? __fget+0x237/0x370 [ 2762.094595] ? security_file_ioctl+0x89/0xb0 [ 2762.094608] SyS_ioctl+0x8f/0xc0 [ 2762.100095] 2569 [ 2762.103990] ? do_vfs_ioctl+0x1060/0x1060 [ 2762.104005] do_syscall_64+0x1e8/0x640 [ 2762.104016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2762.104036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2762.104044] RIP: 0033:0x45b349 [ 2762.104053] RSP: 002b:00007f6aaef8ac78 EFLAGS: 00000246 [ 2762.112368] ORIG_RAX: 0000000000000010 [ 2762.112376] RAX: ffffffffffffffda RBX: 00007f6aaef8b6d4 RCX: 000000000045b349 [ 2762.112381] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2762.112387] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2762.112392] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 23:09:04 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500"/350], 0x1) [ 2762.112397] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c 23:09:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2762.956205] Node 0 DMA32 free:27728kB min:36384kB low:45480kB high:54576kB active_anon:1776068kB inactive_anon:780kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52576kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.014960] lowmem_reserve[]: 0 0 0 0 0 [ 2763.019493] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.090514] lowmem_reserve[]: 0 0 0 0 0 23:09:04 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500"/350], 0x1) [ 2763.153167] Node 1 Normal free:60764kB min:53504kB low:66880kB high:80256kB active_anon:3254692kB inactive_anon:28kB active_file:3984kB inactive_file:3808kB unevictable:0kB writepending:92kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28192kB pagetables:80380kB bounce:0kB free_pcp:560kB local_pcp:348kB free_cma:0kB [ 2763.324877] Mem-Info: [ 2763.335596] active_anon:1258928 inactive_anon:202 isolated_anon:0 [ 2763.335596] active_file:945 inactive_file:958 isolated_file:32 [ 2763.335596] unevictable:0 dirty:4 writeback:0 unstable:0 [ 2763.335596] slab_reclaimable:17964 slab_unreclaimable:176105 [ 2763.335596] mapped:53662 shmem:334 pagetables:33240 bounce:0 [ 2763.335596] free:24660 free_pcp:292 free_cma:0 23:09:05 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000"/525], 0x1) [ 2763.403678] lowmem_reserve[]: 0 0 0 0 0 [ 2763.459121] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2763.470850] Node 0 active_anon:1780552kB inactive_anon:780kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:8kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2763.659510] Node 0 DMA32: 2555*4kB (UEH) 1275*8kB (UME) 323*16kB (UME) 51*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27220kB [ 2763.695056] Node 1 active_anon:3257360kB inactive_anon:28kB active_file:4252kB inactive_file:3860kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:6040kB dirty:108kB writeback:0kB shmem:68kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2763.719402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2763.800118] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2763.810781] Node 1 [ 2763.850121] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2763.870088] Node 0 DMA32 free:27196kB min:36384kB low:45480kB high:54576kB active_anon:1776140kB inactive_anon:780kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22720kB pagetables:52580kB bounce:0kB free_pcp:256kB local_pcp:128kB free_cma:0kB [ 2763.878176] Normal: [ 2763.930077] lowmem_reserve[]: 0 0 0 0 0 [ 2763.936497] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2764.031612] lowmem_reserve[]: 0 0 0 0 0 [ 2764.039830] 433*4kB (UM) 369*8kB (UMEH) 417*16kB (UME) 557*32kB (UMEH) 217*64kB (UME) 115*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58812kB [ 2764.067430] Node 1 Normal free:59288kB min:53504kB low:66880kB high:80256kB active_anon:3257212kB inactive_anon:28kB active_file:4428kB inactive_file:3252kB unevictable:0kB writepending:92kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28192kB pagetables:80380kB bounce:0kB free_pcp:504kB local_pcp:308kB free_cma:0kB [ 2764.209520] lowmem_reserve[]: 0 0 0 0 0 [ 2764.210156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.221915] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2764.249211] Node 0 DMA32: 2599*4kB (UMEH) 1288*8kB (UME) 323*16kB (UME) 51*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27500kB [ 2764.303648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2764.307444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2764.389433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.422729] Node 1 Normal: 592*4kB (UME) 478*8kB (UMEH) 284*16kB (UME) 585*32kB (UMEH) 225*64kB (UME) 118*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59984kB [ 2764.480870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2764.506597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.540606] 1657 total pagecache pages [ 2764.558350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2764.566441] 0 pages in swap cache [ 2764.583274] Swap cache stats: add 0, delete 0, find 0/0 [ 2764.610331] Free swap = 0kB [ 2764.627345] Total swap = 0kB [ 2764.640913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2764.644227] 1965979 pages RAM [ 2764.660605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2764.677994] 1582 total pagecache pages [ 2764.697687] 0 pages HighMem/MovableOnly [ 2764.700121] 0 pages in swap cache [ 2764.722009] 335855 pages reserved [ 2764.725930] 0 pages cma reserved [ 2764.738857] Swap cache stats: add 0, delete 0, find 0/0 [ 2764.759462] Free swap = 0kB [ 2764.768795] Total swap = 0kB [ 2764.787075] 1965979 pages RAM [ 2764.790746] 0 pages HighMem/MovableOnly [ 2764.811749] 335855 pages reserved [ 2764.820578] 0 pages cma reserved 23:09:06 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000"/525], 0x1) 23:09:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:07 executing program 2: 23:09:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:07 executing program 4: 23:09:07 executing program 2: [ 2766.005670] blkid invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=-1000 [ 2766.036046] blkid cpuset=/ mems_allowed=0-1 [ 2766.074109] CPU: 0 PID: 24266 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 2766.081382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.090745] Call Trace: [ 2766.093346] dump_stack+0x142/0x197 [ 2766.097446] dump_header+0x177/0x6cd [ 2766.101175] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2766.106296] ? ___ratelimit+0x55/0x537 [ 2766.110204] oom_kill_process.cold+0x10/0xadd [ 2766.114771] ? rcu_read_unlock_special+0x895/0xd40 [ 2766.119738] ? lock_downgrade+0x740/0x740 [ 2766.123957] out_of_memory+0x2ee/0x1180 [ 2766.128187] ? lock_acquire+0x16f/0x430 [ 2766.132179] ? oom_killer_disable+0x1d0/0x1d0 [ 2766.136684] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2766.141639] __alloc_pages_slowpath+0x2251/0x2930 [ 2766.146512] ? warn_alloc+0xf0/0xf0 [ 2766.150160] ? __might_sleep+0x93/0xb0 [ 2766.154115] __alloc_pages_nodemask+0x62c/0x7a0 [ 2766.158805] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2766.163839] ? save_trace+0x290/0x290 [ 2766.167659] ? lock_downgrade+0x740/0x740 [ 2766.171829] ? __lock_is_held+0xb6/0x140 [ 2766.175904] alloc_pages_current+0xec/0x1e0 [ 2766.180258] __pmd_alloc+0x41/0x410 [ 2766.183915] move_page_tables+0xffc/0x1740 [ 2766.188193] shift_arg_pages+0x1a6/0x460 [ 2766.192272] ? do_open_execat+0x4a0/0x4a0 [ 2766.196623] ? change_protection+0x1760/0x1760 [ 2766.201350] ? lock_acquire+0x16f/0x430 [ 2766.205346] ? setup_arg_pages+0x25d/0x740 [ 2766.209600] setup_arg_pages+0x5b2/0x740 [ 2766.213681] ? shift_arg_pages+0x460/0x460 [ 2766.218140] ? get_random_u64+0x114/0x1a0 [ 2766.222453] load_elf_binary+0xa68/0x4d60 [ 2766.227253] ? save_trace+0x290/0x290 [ 2766.231064] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2766.236008] ? search_binary_handler+0xff/0x6f0 [ 2766.240782] ? find_held_lock+0x35/0x130 [ 2766.244875] ? notesize.isra.0+0x80/0x80 [ 2766.248972] ? lock_downgrade+0x740/0x740 [ 2766.253153] search_binary_handler+0x149/0x6f0 [ 2766.257753] do_execveat_common.isra.0+0x1000/0x1dd0 [ 2766.262876] ? prepare_bprm_creds+0x120/0x120 [ 2766.267516] SyS_execve+0x39/0x50 [ 2766.270988] ? setup_new_exec+0x790/0x790 [ 2766.275140] do_syscall_64+0x1e8/0x640 [ 2766.279043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2766.283906] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2766.289125] RIP: 0033:0x7f812dc2c207 [ 2766.292841] RSP: 002b:00007ffc6a4ba558 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 2766.300563] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f812dc2c207 [ 2766.307863] RDX: 0000000002478d60 RSI: 00007ffc6a4ba650 RDI: 00007ffc6a4bb660 [ 2766.315187] RBP: 0000000000625500 R08: 0000000000001f8f R09: 0000000000001f8f [ 2766.322465] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000002478d60 [ 2766.330004] R13: 0000000000000007 R14: 00000000022a0030 R15: 0000000000000005 [ 2766.367311] Mem-Info: [ 2766.393641] active_anon:1263635 inactive_anon:201 isolated_anon:0 [ 2766.393641] active_file:371 inactive_file:380 isolated_file:57 [ 2766.393641] unevictable:0 dirty:66 writeback:0 unstable:0 [ 2766.393641] slab_reclaimable:18376 slab_unreclaimable:175336 [ 2766.393641] mapped:52974 shmem:256 pagetables:33254 bounce:0 [ 2766.393641] free:21643 free_pcp:32 free_cma:0 [ 2766.445278] Node 0 active_anon:1780596kB inactive_anon:780kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208924kB dirty:20kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2766.481008] Node 1 active_anon:3273944kB inactive_anon:24kB active_file:1480kB inactive_file:1308kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:2672kB dirty:244kB writeback:0kB shmem:56kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2766.535646] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.607973] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2766.657765] Node 0 DMA32 free:27568kB min:36384kB low:45480kB high:54576kB active_anon:1776184kB inactive_anon:780kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:16kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22720kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.730098] lowmem_reserve[]: 0 0 0 0 0 [ 2766.734167] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2766.800340] lowmem_reserve[]: 0 0 0 0 0 [ 2766.804525] Node 1 Normal free:50488kB min:53504kB low:66880kB high:80256kB active_anon:3273944kB inactive_anon:24kB active_file:992kB inactive_file:856kB unevictable:0kB writepending:208kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28160kB pagetables:80432kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 2766.842810] lowmem_reserve[]: 0 0 0 0 0 [ 2766.846860] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2766.863079] Node 0 DMA32: 2598*4kB (UME) 1293*8kB (UME) 323*16kB (UME) 50*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27568kB [ 2766.888706] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2766.905239] Node 1 Normal: 1540*4kB (UME) 495*8kB (UME) 223*16kB (UME) 317*32kB (UME) 155*64kB (UME) 128*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51416kB [ 2766.928115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2766.937306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2766.951557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2766.964828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2766.989816] 380 total pagecache pages [ 2766.995593] 0 pages in swap cache [ 2766.999061] Swap cache stats: add 0, delete 0, find 0/0 [ 2767.007820] Free swap = 0kB [ 2767.013730] Total swap = 0kB [ 2767.016765] 1965979 pages RAM [ 2767.019999] 0 pages HighMem/MovableOnly [ 2767.024237] 335855 pages reserved [ 2767.027715] 0 pages cma reserved [ 2767.050182] Out of memory: Kill process 24263 (syz-executor.5) score 1007 or sacrifice child [ 2767.059018] Killed process 24277 (syz-executor.5) total-vm:72984kB, anon-rss:16564kB, file-rss:34840kB, shmem-rss:0kB [ 2767.148015] oom_reaper: reaped process 24277 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:09:09 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000"/525], 0x1) 23:09:09 executing program 4: 23:09:09 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000"/613], 0x1) 23:09:09 executing program 2: 23:09:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:10 executing program 4: 23:09:10 executing program 2: 23:09:10 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000"/613], 0x1) 23:09:10 executing program 4: 23:09:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:10 executing program 2: 23:09:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:11 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000"/613], 0x1) 23:09:11 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800"/657], 0x1) 23:09:11 executing program 4: 23:09:11 executing program 2: 23:09:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:12 executing program 2: 23:09:12 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800"/657], 0x1) 23:09:12 executing program 4: 23:09:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:12 executing program 2: 23:09:13 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800"/657], 0x1) 23:09:13 executing program 4: 23:09:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) 23:09:13 executing program 2: 23:09:13 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/679], 0x1) 23:09:13 executing program 4: 23:09:13 executing program 2: 23:09:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) 23:09:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) 23:09:15 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/679], 0x1) 23:09:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x52) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80000002, 0x0, 0x0, 0x40020}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:09:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) select(0xb115f6eb08048433, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 23:09:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:15 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/679], 0x1) 23:09:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 23:09:15 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000"], 0x1) [ 2774.193841] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 23:09:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2774.286711] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2774.360296] CPU: 0 PID: 24437 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 2774.368238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2774.377693] Call Trace: [ 2774.380286] dump_stack+0x142/0x197 [ 2774.383942] warn_alloc.cold+0x96/0x1af [ 2774.387943] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2774.392957] ? wait_for_completion+0x420/0x420 [ 2774.397560] __alloc_pages_slowpath+0x23c6/0x2930 [ 2774.402423] ? warn_alloc+0xf0/0xf0 [ 2774.406206] ? __might_sleep+0x93/0xb0 [ 2774.410228] __alloc_pages_nodemask+0x62c/0x7a0 [ 2774.415786] ? rcu_read_lock_sched_held+0x110/0x130 [ 2774.420815] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2774.426026] alloc_pages_current+0xec/0x1e0 [ 2774.430351] kvm_mmu_create+0xdf/0x1e0 [ 2774.434252] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2774.438625] kvm_vcpu_init+0x272/0x360 [ 2774.442513] vmx_create_vcpu+0xfc/0x2aa0 [ 2774.446826] ? mutex_trylock+0x1c0/0x1c0 [ 2774.450909] ? handle_rdmsr+0x6e0/0x6e0 [ 2774.454893] ? wait_for_completion+0x420/0x420 [ 2774.459500] kvm_arch_vcpu_create+0x8c/0xc0 [ 2774.464081] kvm_vm_ioctl+0x501/0x1600 [ 2774.467992] ? __lock_acquire+0x5f7/0x4620 [ 2774.472229] ? get_unused_fd_flags+0xd0/0xd0 [ 2774.476645] ? kvm_vcpu_release+0xa0/0xa0 [ 2774.480960] ? trace_hardirqs_on+0x10/0x10 [ 2774.485198] ? trace_hardirqs_on+0x10/0x10 [ 2774.489466] ? save_trace+0x290/0x290 [ 2774.493263] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2774.498203] ? __fget+0x210/0x370 [ 2774.501739] ? find_held_lock+0x35/0x130 [ 2774.505891] ? __fget+0x210/0x370 [ 2774.509355] ? kvm_vcpu_release+0xa0/0xa0 [ 2774.513511] do_vfs_ioctl+0x7ae/0x1060 [ 2774.517389] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2774.522144] ? lock_downgrade+0x740/0x740 [ 2774.527562] ? ioctl_preallocate+0x1c0/0x1c0 [ 2774.531977] ? __fget+0x237/0x370 [ 2774.535570] ? security_file_ioctl+0x89/0xb0 [ 2774.540132] SyS_ioctl+0x8f/0xc0 [ 2774.543514] ? do_vfs_ioctl+0x1060/0x1060 [ 2774.547680] do_syscall_64+0x1e8/0x640 [ 2774.551572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2774.556430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2774.561651] RIP: 0033:0x45b349 [ 2774.564834] RSP: 002b:00007f6aaef8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2774.572745] RAX: ffffffffffffffda RBX: 00007f6aaef8b6d4 RCX: 000000000045b349 [ 2774.580024] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2774.587306] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2774.594585] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2774.601971] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c [ 2775.654813] Mem-Info: [ 2775.657493] active_anon:1264823 inactive_anon:202 isolated_anon:0 [ 2775.657493] active_file:463 inactive_file:738 isolated_file:70 [ 2775.657493] unevictable:0 dirty:29 writeback:1 unstable:0 [ 2775.657493] slab_reclaimable:18551 slab_unreclaimable:173629 [ 2775.657493] mapped:53133 shmem:260 pagetables:33321 bounce:0 [ 2775.657493] free:21433 free_pcp:105 free_cma:0 [ 2775.793621] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2775.809062] Node 0 active_anon:1780584kB inactive_anon:780kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2775.841189] udevd cpuset=/ mems_allowed=0-1 [ 2775.846284] CPU: 0 PID: 7804 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2775.853692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.863193] Call Trace: [ 2775.865793] dump_stack+0x142/0x197 [ 2775.869443] dump_header+0x177/0x6cd [ 2775.873216] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2775.878339] ? ___ratelimit+0x55/0x537 [ 2775.882241] oom_kill_process.cold+0x10/0xadd [ 2775.886912] ? rcu_read_unlock_special+0x895/0xd40 [ 2775.891865] ? lock_downgrade+0x740/0x740 [ 2775.896032] out_of_memory+0x2ee/0x1180 [ 2775.900034] ? lock_acquire+0x16f/0x430 [ 2775.904044] ? oom_killer_disable+0x1d0/0x1d0 [ 2775.908553] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2775.913652] __alloc_pages_slowpath+0x2251/0x2930 [ 2775.918532] ? warn_alloc+0xf0/0xf0 [ 2775.922185] ? __might_sleep+0x93/0xb0 [ 2775.926402] __alloc_pages_nodemask+0x62c/0x7a0 [ 2775.931183] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2775.936217] ? ____cache_alloc_node+0x1be/0x1d0 [ 2775.940990] ? cache_grow_begin+0x335/0x400 [ 2775.945454] cache_grow_begin+0x80/0x400 [ 2775.949528] ? __cpuset_node_allowed+0xff/0x450 [ 2775.954350] fallback_alloc+0x1fd/0x2c0 [ 2775.958346] ____cache_alloc_node+0x1be/0x1d0 [ 2775.962858] kmem_cache_alloc+0x1f3/0x780 [ 2775.967024] ? __handle_mm_fault+0x692/0x33d0 [ 2775.971523] getname_flags+0xcb/0x580 [ 2775.975339] ? __do_page_fault+0x4e9/0xb80 [ 2775.979617] ? SyS_renameat+0x6f0/0x6f0 [ 2775.983628] SyS_rename+0xc8/0x6d0 [ 2775.987180] ? SyS_renameat+0x6f0/0x6f0 [ 2775.991171] ? up_read+0x1a/0x40 [ 2775.994545] ? __do_page_fault+0x358/0xb80 [ 2775.998878] ? do_syscall_64+0x53/0x640 [ 2776.002866] ? SyS_renameat+0x6f0/0x6f0 [ 2776.006849] do_syscall_64+0x1e8/0x640 [ 2776.010755] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2776.015618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2776.020900] RIP: 0033:0x7f812dbd5527 [ 2776.024639] RSP: 002b:00007ffc6a4c0f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2776.032353] RAX: ffffffffffffffda RBX: 00000000022ad3e0 RCX: 00007f812dbd5527 [ 2776.039642] RDX: 00007f812df06e98 RSI: 00007ffc6a4c0fb0 RDI: 00007ffc6a4c13b0 [ 2776.046931] RBP: 00000000022aaa10 R08: 00007f812e5487a0 R09: 0000000000000001 [ 2776.054233] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000022f0490 [ 2776.061504] R13: 00000000022a0030 R14: 00007ffc6a4c0fb0 R15: 0000000000000000 [ 2776.085977] Node 1 active_anon:3278816kB inactive_anon:28kB active_file:1260kB inactive_file:1244kB unevictable:0kB isolated(anon):0kB isolated(file):168kB mapped:2248kB dirty:212kB writeback:12kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2776.123476] Mem-Info: [ 2776.124903] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.153116] active_anon:1264850 inactive_anon:202 isolated_anon:0 [ 2776.153116] active_file:272 inactive_file:243 isolated_file:37 [ 2776.153116] unevictable:0 dirty:54 writeback:3 unstable:0 [ 2776.153116] slab_reclaimable:18548 slab_unreclaimable:173651 [ 2776.153116] mapped:52698 shmem:260 pagetables:33348 bounce:0 [ 2776.153116] free:22056 free_pcp:91 free_cma:0 [ 2776.153131] Node 0 active_anon:1780584kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2776.153158] Node 1 active_anon:3278816kB inactive_anon:28kB active_file:1084kB inactive_file:972kB unevictable:0kB isolated(anon):0kB isolated(file):148kB mapped:1888kB dirty:212kB writeback:12kB shmem:72kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2776.187877] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2776.264521] Node 0 DMA32 free:27292kB min:36384kB low:45480kB high:54576kB active_anon:1776172kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22720kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.294184] lowmem_reserve[]: 0 0 0 0 0 [ 2776.298763] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.324854] lowmem_reserve[]: 0 0 0 0 0 [ 2776.329291] Node 1 Normal free:50544kB min:53504kB low:66880kB high:80256kB active_anon:3278816kB inactive_anon:28kB active_file:1196kB inactive_file:1188kB unevictable:0kB writepending:224kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28320kB pagetables:80808kB bounce:0kB free_pcp:524kB local_pcp:152kB free_cma:0kB [ 2776.372612] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.381586] lowmem_reserve[]: [ 2776.428379] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2776.435429] 0 [ 2776.446140] Node 0 DMA32 free:27292kB min:36384kB low:45480kB high:54576kB active_anon:1776172kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22720kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.451074] 0 [ 2776.531658] lowmem_reserve[]: 0 0 0 0 0 [ 2776.544395] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2776.565430] 0 0 0 [ 2776.588298] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2776.615108] lowmem_reserve[]: 0 0 0 0 0 [ 2776.623870] Node 1 Normal free:51048kB min:53504kB low:66880kB high:80256kB active_anon:3278816kB inactive_anon:28kB active_file:692kB inactive_file:1188kB unevictable:0kB writepending:224kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28320kB pagetables:80808kB bounce:0kB free_pcp:556kB local_pcp:256kB free_cma:0kB [ 2776.653692] Node 0 DMA32: 2607*4kB (UME) 1252*8kB (UME) 318*16kB (UME) 51*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27292kB [ 2776.673779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2776.682930] lowmem_reserve[]: 0 0 0 0 0 [ 2776.700606] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2776.702946] Node 1 Normal: 885*4kB (UME) 330*8kB (UME) 261*16kB (UME) 172*32kB (UME) 231*64kB (UME) 143*128kB (UM) 14*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52532kB [ 2776.737934] Node 0 DMA32: 2607*4kB (UME) 1252*8kB (UME) 318*16kB (UME) 51*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27292kB [ 2776.756667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.772810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2776.783806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.793061] Node 1 Normal: 897*4kB (UME) 336*8kB (UME) 261*16kB (UME) 171*32kB (UME) 231*64kB (UME) 143*128kB (UM) 14*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52596kB [ 2776.803288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.825994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.835604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.841981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.845047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2776.864226] 341 total pagecache pages [ 2776.865376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2776.877535] 341 total pagecache pages [ 2776.879502] 0 pages in swap cache [ 2776.881650] 0 pages in swap cache [ 2776.888876] Swap cache stats: add 0, delete 0, find 0/0 [ 2776.890133] Swap cache stats: add 0, delete 0, find 0/0 [ 2776.894901] Free swap = 0kB [ 2776.903905] Total swap = 0kB [ 2776.906979] Free swap = 0kB [ 2776.906988] Total swap = 0kB [ 2776.910377] 1965979 pages RAM [ 2776.913152] 1965979 pages RAM [ 2776.916488] 0 pages HighMem/MovableOnly [ 2776.919351] 0 pages HighMem/MovableOnly [ 2776.919356] 335855 pages reserved [ 2776.919359] 0 pages cma reserved [ 2776.934966] 335855 pages reserved [ 2776.938703] 0 pages cma reserved [ 2776.942360] Out of memory: Kill process 10313 (syz-executor.4) score 1007 or sacrifice child [ 2776.955142] Killed process 10313 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2777.068599] oom_reaper: reaped process 10313 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:09:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 23:09:19 executing program 2: 23:09:19 executing program 4: 23:09:19 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000"], 0x1) 23:09:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:19 executing program 4: 23:09:21 executing program 2: 23:09:21 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000"], 0x1) 23:09:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 23:09:22 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff000000000000000000"], 0x1) 23:09:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2784.404680] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2784.437881] udevd cpuset=/ mems_allowed=0-1 [ 2784.442847] CPU: 1 PID: 7718 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2784.450199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.460110] Call Trace: [ 2784.462723] dump_stack+0x142/0x197 [ 2784.466629] dump_header+0x177/0x6cd [ 2784.470660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2784.476281] ? ___ratelimit+0x55/0x537 [ 2784.480200] oom_kill_process.cold+0x10/0xadd [ 2784.484829] ? rcu_read_unlock_special+0x895/0xd40 [ 2784.489972] ? lock_downgrade+0x740/0x740 [ 2784.494505] out_of_memory+0x2ee/0x1180 [ 2784.498506] ? lock_acquire+0x16f/0x430 [ 2784.503016] ? oom_killer_disable+0x1d0/0x1d0 [ 2784.507781] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2784.512973] __alloc_pages_slowpath+0x2251/0x2930 [ 2784.518165] ? warn_alloc+0xf0/0xf0 [ 2784.522493] ? __might_sleep+0x93/0xb0 [ 2784.526787] __alloc_pages_nodemask+0x62c/0x7a0 [ 2784.531798] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2784.537003] ? ____cache_alloc_node+0x1be/0x1d0 [ 2784.541927] ? cache_grow_begin+0x335/0x400 [ 2784.546815] cache_grow_begin+0x80/0x400 [ 2784.551112] ? __cpuset_node_allowed+0xff/0x450 [ 2784.556110] fallback_alloc+0x1fd/0x2c0 [ 2784.560117] ____cache_alloc_node+0x1be/0x1d0 [ 2784.564643] kmem_cache_alloc+0x1f3/0x780 [ 2784.568999] ? kasan_kmalloc+0xce/0xf0 [ 2784.573267] getname_kernel+0x53/0x350 [ 2784.577196] kern_path+0x20/0x40 [ 2784.581124] unix_find_other+0xc0/0x530 [ 2784.585216] ? unix_release+0x90/0x90 [ 2784.589281] unix_stream_connect+0x267/0x1204 [ 2784.594418] ? unix_seqpacket_sendmsg+0x160/0x160 [ 2784.599843] ? security_socket_connect+0x89/0xb0 [ 2784.605109] SYSC_connect+0x1f6/0x2d0 [ 2784.609118] ? SYSC_bind+0x220/0x220 [ 2784.613046] SyS_connect+0x24/0x30 [ 2784.619885] ? SyS_accept+0x30/0x30 [ 2784.624635] do_syscall_64+0x1e8/0x640 [ 2784.628926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2784.633969] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2784.639598] RIP: 0033:0x7f812dc5cfd0 [ 2784.643700] RSP: 002b:00007ffc6a4c0888 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2784.651605] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f812dc5cfd0 [ 2784.659128] RDX: 000000000000006e RSI: 00007ffc6a4c0890 RDI: 0000000000000007 [ 2784.667318] RBP: 00007ffc6a4c0968 R08: 0000000000000000 R09: 0000000000000083 [ 2784.675358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f812e5486f8 [ 2784.683740] R13: 00007f812e5486f8 R14: 00007ffc6a4c0b10 R15: 00007ffc6a4c0f10 [ 2784.715546] Mem-Info: [ 2784.718301] active_anon:1264840 inactive_anon:196 isolated_anon:0 [ 2784.718301] active_file:136 inactive_file:122 isolated_file:34 [ 2784.718301] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2784.718301] slab_reclaimable:18598 slab_unreclaimable:172681 [ 2784.718301] mapped:52497 shmem:262 pagetables:33360 bounce:0 [ 2784.718301] free:23165 free_pcp:66 free_cma:0 [ 2784.767700] Node 0 active_anon:1780584kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2784.816545] Node 1 active_anon:3278776kB inactive_anon:4kB active_file:92kB inactive_file:524kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:284kB dirty:16kB writeback:0kB shmem:80kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2784.864682] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2784.894857] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2784.900753] Node 0 DMA32 free:27268kB min:36384kB low:45480kB high:54576kB active_anon:1776172kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22720kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2784.979425] lowmem_reserve[]: 0 0 0 0 0 [ 2784.983981] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2785.011004] lowmem_reserve[]: 0 0 0 0 0 [ 2785.015037] Node 1 Normal free:52992kB min:53504kB low:66880kB high:80256kB active_anon:3278776kB inactive_anon:4kB active_file:1300kB inactive_file:1464kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28224kB pagetables:80856kB bounce:0kB free_pcp:360kB local_pcp:0kB free_cma:0kB [ 2785.046752] lowmem_reserve[]: 0 0 0 0 0 [ 2785.051888] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2785.095680] Node 0 DMA32: 2609*4kB (UME) 1240*8kB (UME) 319*16kB (UME) 51*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27284kB [ 2785.130142] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2785.150200] Node 1 Normal: 464*4kB (UME) 395*8kB (UME) 220*16kB (UME) 256*32kB (UME) 120*64kB (UME) 160*128kB (UM) 25*256kB (UM) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53848kB [ 2785.190166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2785.199849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2785.209435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2785.221173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2785.231381] 765 total pagecache pages [ 2785.235720] 0 pages in swap cache [ 2785.241551] Swap cache stats: add 0, delete 0, find 0/0 [ 2785.248235] Free swap = 0kB [ 2785.252228] Total swap = 0kB [ 2785.256883] 1965979 pages RAM [ 2785.260579] 0 pages HighMem/MovableOnly [ 2785.264568] 335855 pages reserved [ 2785.268496] 0 pages cma reserved [ 2785.272386] Out of memory: Kill process 10510 (syz-executor.4) score 1007 or sacrifice child [ 2785.283682] Killed process 10510 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2785.372900] oom_reaper: reaped process 10510 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:09:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x52) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:09:27 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff000000000000000000"], 0x1) 23:09:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:28 executing program 2: getpid() r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) r1 = socket$inet6(0xa, 0x800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) restart_syscall() dup(r1) bind$inet6(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCSETAF(r2, 0x89f2, &(0x7f0000000040)={0x0, 0x2000, 0x0, 0x3}) ioctl$TIOCSTI(r2, 0x5412, 0x5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000001c0)=@gcm_256={{}, "bb09000700ff00", "c855f69cd82d402157ccb791f2015441c66bb64609b550882ef15660a4c2c300", "895daef1", "80728d1401c266cd"}, 0x38) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 23:09:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) 23:09:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) 23:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d09004beafd0d4f020a8447000b4e230f00000000a2bc5603ca00000f7f890000002000000001d29d0d3869e3921853dbdcffdb0000000309ff5bffff00c7e5ed", 0x48}], 0x1) 23:09:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:28 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff000000000000000000"], 0x1) 23:09:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) 23:09:28 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feff"], 0x1) 23:09:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d09004beafd0d4f020a8447000b4e230f00000000a2bc5603ca00000f7f890000002000000001d29d0d3869e3921853dbdcffdb0000000309ff5bffff00c7e5ed", 0x48}], 0x1) 23:09:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:29 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feff"], 0x1) 23:09:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$media(0x0, 0x0, 0x400000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x20000000000000, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x8000) 23:09:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x0, 0x0, 0x0}) 23:09:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d09004beafd0d4f020a8447000b4e230f00000000a2bc5603ca00000f7f890000002000000001d29d0d3869e3921853dbdcffdb0000000309ff5bffff00c7e5ed", 0x48}], 0x1) 23:09:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:29 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feff"], 0x1) [ 2788.048598] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2788.132500] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2788.171170] CPU: 1 PID: 24616 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 2788.179514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.189414] Call Trace: [ 2788.192398] dump_stack+0x142/0x197 [ 2788.196332] warn_alloc.cold+0x96/0x1af [ 2788.200346] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2788.205498] ? wait_for_completion+0x420/0x420 [ 2788.210288] __alloc_pages_slowpath+0x23c6/0x2930 [ 2788.215187] ? warn_alloc+0xf0/0xf0 [ 2788.219038] ? __might_sleep+0x93/0xb0 [ 2788.223323] __alloc_pages_nodemask+0x62c/0x7a0 [ 2788.228655] ? rcu_read_lock_sched_held+0x110/0x130 [ 2788.234431] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2788.240232] alloc_pages_current+0xec/0x1e0 [ 2788.245043] kvm_mmu_create+0xdf/0x1e0 [ 2788.249629] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2788.254348] kvm_vcpu_init+0x272/0x360 [ 2788.259028] vmx_create_vcpu+0xfc/0x2aa0 [ 2788.263651] ? mutex_trylock+0x1c0/0x1c0 [ 2788.267752] ? handle_rdmsr+0x6e0/0x6e0 [ 2788.271847] ? wait_for_completion+0x420/0x420 [ 2788.276723] kvm_arch_vcpu_create+0x8c/0xc0 [ 2788.281169] kvm_vm_ioctl+0x501/0x1600 [ 2788.285260] ? __lock_acquire+0x5f7/0x4620 [ 2788.289620] ? get_unused_fd_flags+0xd0/0xd0 [ 2788.294294] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.299002] ? trace_hardirqs_on+0x10/0x10 [ 2788.304089] ? trace_hardirqs_on+0x10/0x10 [ 2788.308362] ? save_trace+0x290/0x290 [ 2788.312366] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2788.317736] ? __fget+0x210/0x370 [ 2788.321284] ? find_held_lock+0x35/0x130 [ 2788.325876] ? __fget+0x210/0x370 [ 2788.330223] ? kvm_vcpu_release+0xa0/0xa0 [ 2788.334483] do_vfs_ioctl+0x7ae/0x1060 [ 2788.338743] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2788.343876] ? lock_downgrade+0x740/0x740 [ 2788.348053] ? ioctl_preallocate+0x1c0/0x1c0 [ 2788.352635] ? __fget+0x237/0x370 [ 2788.356853] ? security_file_ioctl+0x89/0xb0 [ 2788.361800] SyS_ioctl+0x8f/0xc0 [ 2788.365922] ? do_vfs_ioctl+0x1060/0x1060 [ 2788.371090] do_syscall_64+0x1e8/0x640 [ 2788.375522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2788.380585] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2788.386270] RIP: 0033:0x45b349 [ 2788.390413] RSP: 002b:00007f6aaef8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.398804] RAX: ffffffffffffffda RBX: 00007f6aaef8b6d4 RCX: 000000000045b349 [ 2788.406918] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 2788.414638] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2788.422363] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2788.429894] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c 23:09:30 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feffff"], 0x1) 23:09:30 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000000)="d7e6a34c23345d493d") ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000000)) 23:09:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2788.782886] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 2788.838552] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2788.886335] CPU: 1 PID: 24618 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 2788.894913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.904787] Call Trace: [ 2788.907500] dump_stack+0x142/0x197 [ 2788.911249] warn_alloc.cold+0x96/0x1af [ 2788.915263] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2788.920937] ? wait_for_completion+0x420/0x420 [ 2788.925554] __alloc_pages_slowpath+0x23c6/0x2930 [ 2788.931863] ? warn_alloc+0xf0/0xf0 [ 2788.935671] ? __might_sleep+0x93/0xb0 [ 2788.939586] __alloc_pages_nodemask+0x62c/0x7a0 [ 2788.944820] ? rcu_read_lock_sched_held+0x110/0x130 [ 2788.950181] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2788.955916] alloc_pages_current+0xec/0x1e0 [ 2788.960556] kvm_mmu_create+0xdf/0x1e0 [ 2788.965335] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2788.970091] kvm_vcpu_init+0x272/0x360 [ 2788.974485] vmx_create_vcpu+0xfc/0x2aa0 [ 2788.978782] ? mutex_trylock+0x1c0/0x1c0 [ 2788.983059] ? handle_rdmsr+0x6e0/0x6e0 [ 2788.987233] ? wait_for_completion+0x420/0x420 [ 2788.991858] kvm_arch_vcpu_create+0x8c/0xc0 [ 2788.996765] kvm_vm_ioctl+0x501/0x1600 [ 2789.000959] ? __lock_acquire+0x5f7/0x4620 [ 2789.005306] ? get_unused_fd_flags+0xd0/0xd0 [ 2789.010275] ? kvm_vcpu_release+0xa0/0xa0 [ 2789.014626] ? trace_hardirqs_on+0x10/0x10 [ 2789.019096] ? trace_hardirqs_on+0x10/0x10 [ 2789.023364] ? save_trace+0x290/0x290 [ 2789.027282] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2789.032329] ? __fget+0x210/0x370 [ 2789.036188] ? find_held_lock+0x35/0x130 [ 2789.040398] ? __fget+0x210/0x370 [ 2789.043881] ? kvm_vcpu_release+0xa0/0xa0 [ 2789.048163] do_vfs_ioctl+0x7ae/0x1060 [ 2789.052252] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2789.057217] ? lock_downgrade+0x740/0x740 [ 2789.061525] ? ioctl_preallocate+0x1c0/0x1c0 [ 2789.066209] ? __fget+0x237/0x370 [ 2789.070027] ? security_file_ioctl+0x89/0xb0 [ 2789.074566] SyS_ioctl+0x8f/0xc0 [ 2789.078127] ? do_vfs_ioctl+0x1060/0x1060 [ 2789.083558] do_syscall_64+0x1e8/0x640 [ 2789.087824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2789.092710] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2789.098105] RIP: 0033:0x45b349 [ 2789.101430] RSP: 002b:00007f6aaef69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2789.109651] RAX: ffffffffffffffda RBX: 00007f6aaef6a6d4 RCX: 000000000045b349 [ 2789.117028] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2789.124584] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 23:09:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) [ 2789.135147] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2789.142701] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bfd4 23:09:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:30 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feffff"], 0x1) [ 2789.171479] audit: type=1400 audit(1580339370.933:791): avc: denied { set_context_mgr } for pid=24640 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 2789.365165] Mem-Info: [ 2789.367928] active_anon:1256662 inactive_anon:202 isolated_anon:0 [ 2789.367928] active_file:1738 inactive_file:1250 isolated_file:45 [ 2789.367928] unevictable:0 dirty:32 writeback:0 unstable:0 [ 2789.367928] slab_reclaimable:18671 slab_unreclaimable:173970 [ 2789.367928] mapped:54450 shmem:267 pagetables:33402 bounce:0 [ 2789.367928] free:26864 free_pcp:446 free_cma:0 [ 2789.487687] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2789.526703] Node 1 active_anon:3246244kB inactive_anon:28kB active_file:6692kB inactive_file:5028kB unevictable:0kB isolated(anon):0kB isolated(file):180kB mapped:8896kB dirty:124kB writeback:0kB shmem:100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2789.561684] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.789502] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2789.809938] Node 0 DMA32 free:27444kB min:36384kB low:45480kB high:54576kB active_anon:1776392kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2789.949412] lowmem_reserve[]: 0 0 0 0 0 [ 2789.967029] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2790.042491] lowmem_reserve[]: 0 0 0 0 0 [ 2790.053535] Node 1 Normal free:58760kB min:53504kB low:66880kB high:80256kB active_anon:3261668kB inactive_anon:28kB active_file:5840kB inactive_file:4768kB unevictable:0kB writepending:124kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28320kB pagetables:81024kB bounce:0kB free_pcp:324kB local_pcp:140kB free_cma:0kB [ 2790.240640] lowmem_reserve[]: 0 0 0 0 0 [ 2790.297055] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2790.392928] Node 0 DMA32: 2593*4kB (UMEH) 1223*8kB (UME) 331*16kB (UME) 49*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27276kB [ 2790.465097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2790.621287] Node 1 Normal: 779*4kB (UMEH) 440*8kB (UMEH) 290*16kB (UME) 120*32kB (UME) 148*64kB (UME) 156*128kB (UM) 33*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 63756kB [ 2790.689282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2790.710590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2790.719696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2790.772946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2790.837997] 1610 total pagecache pages [ 2790.868014] 0 pages in swap cache [ 2790.950157] Swap cache stats: add 0, delete 0, find 0/0 [ 2790.955845] Free swap = 0kB [ 2790.983765] Total swap = 0kB [ 2790.987139] 1965979 pages RAM [ 2790.992392] 0 pages HighMem/MovableOnly [ 2790.996665] 335855 pages reserved [ 2791.014770] 0 pages cma reserved 23:09:32 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fd"], 0x1, 0x0) 23:09:32 executing program 0: clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060020000f0000000f00000000000000000000000f0000000c8010000c8010000c8010000c8010000c801000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f000000000000000000000000000000000000000000028007374617465000000000000000000000000000000000000000000000000000000000000000000380074696d650000000000000000000000000000000000000000000000000000000000000000000000eaffffff00000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000008006800435400000000b99521cf192cf03700000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000e7ff00000000000000000004feffff"], 0x1) 23:09:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:33 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:09:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) [ 2791.878159] mcstransd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2791.927826] mcstransd cpuset=/ mems_allowed=0-1 [ 2791.964402] CPU: 1 PID: 7348 Comm: mcstransd Not tainted 4.14.169-syzkaller #0 [ 2791.972400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.981773] Call Trace: [ 2791.984388] dump_stack+0x142/0x197 [ 2791.988189] dump_header+0x177/0x6cd [ 2791.991936] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2791.997202] ? ___ratelimit+0x55/0x537 [ 2792.001114] oom_kill_process.cold+0x10/0xadd [ 2792.005917] ? rcu_read_unlock_special+0x895/0xd40 [ 2792.010880] ? lock_downgrade+0x740/0x740 [ 2792.015284] out_of_memory+0x2ee/0x1180 [ 2792.019487] ? lock_acquire+0x16f/0x430 [ 2792.023786] ? oom_killer_disable+0x1d0/0x1d0 [ 2792.028446] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2792.033789] __alloc_pages_slowpath+0x2251/0x2930 [ 2792.038769] ? warn_alloc+0xf0/0xf0 [ 2792.042941] ? __might_sleep+0x93/0xb0 [ 2792.046843] __alloc_pages_nodemask+0x62c/0x7a0 [ 2792.052385] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2792.057713] ? ____cache_alloc_node+0x1be/0x1d0 [ 2792.062596] ? cache_grow_begin+0x335/0x400 [ 2792.067438] cache_grow_begin+0x80/0x400 [ 2792.072000] ? __cpuset_node_allowed+0xff/0x450 [ 2792.077185] fallback_alloc+0x1fd/0x2c0 [ 2792.081854] ____cache_alloc_node+0x1be/0x1d0 [ 2792.086678] kmem_cache_alloc+0x1f3/0x780 [ 2792.091323] ? task_work_run+0xf0/0x190 [ 2792.095602] getname_flags+0xcb/0x580 [ 2792.099612] getname+0x1a/0x20 [ 2792.103045] do_sys_open+0x1e7/0x430 [ 2792.106867] ? filp_open+0x70/0x70 [ 2792.110897] ? SyS_setsockopt+0x210/0x210 [ 2792.115836] SyS_open+0x2d/0x40 [ 2792.119311] ? do_sys_open+0x430/0x430 [ 2792.123209] do_syscall_64+0x1e8/0x640 [ 2792.127371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2792.132986] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2792.138539] RIP: 0033:0x7ffb17f00120 [ 2792.142567] RSP: 002b:00007ffca6b49758 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2792.151238] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ffb17f00120 [ 2792.158871] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000561299a52da0 [ 2792.166636] RBP: 0000561299a508a8 R08: 746e65727275632f R09: 00007ffb18613b15 [ 2792.174209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2792.182463] R13: 0000561299a4f890 R14: 00007ffca6b497f8 R15: 0000000000000007 [ 2792.200441] Mem-Info: [ 2792.203647] active_anon:1264917 inactive_anon:201 isolated_anon:0 [ 2792.203647] active_file:350 inactive_file:337 isolated_file:61 [ 2792.203647] unevictable:0 dirty:6 writeback:24 unstable:0 [ 2792.203647] slab_reclaimable:18675 slab_unreclaimable:173000 [ 2792.203647] mapped:52925 shmem:271 pagetables:33396 bounce:0 [ 2792.203647] free:22228 free_pcp:0 free_cma:0 [ 2792.265777] Node 0 active_anon:1780876kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2792.309729] Node 1 active_anon:3278768kB inactive_anon:16kB active_file:1324kB inactive_file:1164kB unevictable:0kB isolated(anon):0kB isolated(file):228kB mapped:2456kB dirty:0kB writeback:0kB shmem:116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2792.341696] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.369008] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2792.374622] Node 0 DMA32 free:27304kB min:36384kB low:45480kB high:54576kB active_anon:1776464kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.406454] lowmem_reserve[]: 0 0 0 0 0 [ 2792.411255] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2792.440634] lowmem_reserve[]: 0 0 0 0 0 [ 2792.445303] Node 1 Normal free:51512kB min:53504kB low:66880kB high:80256kB active_anon:3278768kB inactive_anon:16kB active_file:1324kB inactive_file:1304kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28416kB pagetables:81152kB bounce:0kB free_pcp:688kB local_pcp:128kB free_cma:0kB [ 2792.479604] lowmem_reserve[]: 0 0 0 0 0 [ 2792.484524] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2792.501634] Node 0 DMA32: 2594*4kB (UME) 1226*8kB (UME) 331*16kB (UME) 49*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27304kB [ 2792.516972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2792.528990] Node 1 Normal: 1146*4kB (UME) 340*8kB (UME) 287*16kB (UME) 142*32kB (UMEH) 89*64kB (UME) 82*128kB (UM) 33*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 51832kB [ 2792.547254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2792.557681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2792.566901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2792.576211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2792.585253] 744 total pagecache pages [ 2792.589567] 0 pages in swap cache [ 2792.601803] Swap cache stats: add 0, delete 0, find 0/0 [ 2792.607784] Free swap = 0kB [ 2792.616475] Total swap = 0kB [ 2792.619614] 1965979 pages RAM [ 2792.623167] 0 pages HighMem/MovableOnly [ 2792.627516] 335855 pages reserved [ 2792.637157] 0 pages cma reserved [ 2792.641186] Out of memory: Kill process 24669 (syz-executor.1) score 1007 or sacrifice child [ 2792.657415] Killed process 24685 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:35240kB, shmem-rss:0kB [ 2792.749779] oom_reaper: reaped process 24685 (syz-executor.1), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB 23:09:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:09:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 23:09:37 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 2796.017448] dlm: no locking on control device [ 2796.036522] dlm: no locking on control device 23:09:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:09:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2797.544050] dlm: no locking on control device 23:09:39 executing program 0: alarm(0x0) 23:09:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:09:39 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:09:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:09:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2798.431305] mcstransd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2798.473479] mcstransd cpuset=/ mems_allowed=0-1 [ 2798.492910] CPU: 0 PID: 7348 Comm: mcstransd Not tainted 4.14.169-syzkaller #0 [ 2798.500412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2798.509885] Call Trace: [ 2798.512485] dump_stack+0x142/0x197 [ 2798.516127] dump_header+0x177/0x6cd [ 2798.519865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2798.525133] ? ___ratelimit+0x55/0x537 [ 2798.529190] oom_kill_process.cold+0x10/0xadd [ 2798.533700] ? rcu_read_unlock_special+0x895/0xd40 [ 2798.538726] ? lock_downgrade+0x740/0x740 [ 2798.542895] out_of_memory+0x2ee/0x1180 [ 2798.546966] ? lock_acquire+0x16f/0x430 [ 2798.551097] ? oom_killer_disable+0x1d0/0x1d0 [ 2798.555604] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2798.560547] __alloc_pages_slowpath+0x2251/0x2930 [ 2798.565668] ? warn_alloc+0xf0/0xf0 [ 2798.569315] ? __might_sleep+0x93/0xb0 [ 2798.573697] __alloc_pages_nodemask+0x62c/0x7a0 [ 2798.578386] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2798.583759] ? ____cache_alloc_node+0x1be/0x1d0 [ 2798.588437] ? cache_grow_begin+0x335/0x400 [ 2798.592773] cache_grow_begin+0x80/0x400 [ 2798.596865] ? __cpuset_node_allowed+0xff/0x450 [ 2798.601570] fallback_alloc+0x1fd/0x2c0 [ 2798.605764] ____cache_alloc_node+0x1be/0x1d0 [ 2798.610298] kmem_cache_alloc+0x1f3/0x780 [ 2798.614852] ? task_work_run+0xf0/0x190 [ 2798.618957] getname_flags+0xcb/0x580 [ 2798.622773] getname+0x1a/0x20 [ 2798.625972] do_sys_open+0x1e7/0x430 [ 2798.629697] ? filp_open+0x70/0x70 [ 2798.633398] ? SyS_setsockopt+0x210/0x210 [ 2798.637560] SyS_open+0x2d/0x40 [ 2798.640844] ? do_sys_open+0x430/0x430 [ 2798.644740] do_syscall_64+0x1e8/0x640 [ 2798.648901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2798.653752] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2798.658940] RIP: 0033:0x7ffb17f00120 [ 2798.662649] RSP: 002b:00007ffca6b49758 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2798.670370] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ffb17f00120 [ 2798.677647] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000561299a5afa0 [ 2798.684918] RBP: 0000561299a508a8 R08: 746e65727275632f R09: 00007ffb18613b15 [ 2798.692266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2798.699646] R13: 0000561299a597a0 R14: 00007ffca6b497f8 R15: 0000000000000008 [ 2798.745116] Mem-Info: [ 2798.747706] active_anon:1264915 inactive_anon:201 isolated_anon:0 [ 2798.747706] active_file:578 inactive_file:582 isolated_file:54 [ 2798.747706] unevictable:0 dirty:29 writeback:0 unstable:0 [ 2798.747706] slab_reclaimable:18656 slab_unreclaimable:173200 [ 2798.747706] mapped:53380 shmem:276 pagetables:33511 bounce:0 [ 2798.747706] free:21312 free_pcp:57 free_cma:0 [ 2798.898318] Node 0 active_anon:1780876kB inactive_anon:780kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2798.968894] Node 1 active_anon:3278784kB inactive_anon:24kB active_file:1512kB inactive_file:1508kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:2712kB dirty:112kB writeback:0kB shmem:136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2798.998636] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2799.033571] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2799.045837] Node 0 DMA32 free:27200kB min:36384kB low:45480kB high:54576kB active_anon:1776464kB inactive_anon:780kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2799.091923] lowmem_reserve[]: 0 0 0 0 0 [ 2799.096468] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2799.136823] lowmem_reserve[]: 0 0 0 0 0 [ 2799.146936] Node 1 Normal free:50952kB min:53504kB low:66880kB high:80256kB active_anon:3278928kB inactive_anon:24kB active_file:1280kB inactive_file:1132kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28288kB pagetables:81308kB bounce:0kB free_pcp:228kB local_pcp:56kB free_cma:0kB [ 2799.248448] lowmem_reserve[]: 0 0 0 0 0 [ 2799.258797] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2799.360173] Node 0 DMA32: 2602*4kB (UME) 1197*8kB (UME) 333*16kB (UME) 51*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27200kB [ 2799.391858] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2799.424373] Node 1 Normal: 1292*4kB (UME) 619*8kB (UME) 282*16kB (UME) 155*32kB (UME) 100*64kB (UME) 63*128kB (UM) 33*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 53256kB [ 2799.469036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2799.478241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2799.497613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2799.508926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2799.527265] 350 total pagecache pages [ 2799.533571] 0 pages in swap cache [ 2799.537327] Swap cache stats: add 0, delete 0, find 0/0 [ 2799.546631] Free swap = 0kB [ 2799.549811] Total swap = 0kB [ 2799.554871] 1965979 pages RAM [ 2799.558121] 0 pages HighMem/MovableOnly [ 2799.565662] 335855 pages reserved [ 2799.569410] 0 pages cma reserved [ 2799.574727] Out of memory: Kill process 24734 (syz-executor.1) score 1007 or sacrifice child [ 2799.588225] Killed process 24745 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34844kB, shmem-rss:0kB [ 2799.673470] oom_reaper: reaped process 24745 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2799.713753] dlm: no locking on control device 23:09:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:09:41 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:09:42 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) 23:09:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2801.559960] dlm: no locking on control device 23:09:43 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 23:09:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) 23:09:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2802.545573] dlm: no locking on control device 23:09:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0", 0x36}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x72) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:09:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$9p(0xffffffffffffffff, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:48 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 23:09:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$9p(0xffffffffffffffff, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:48 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 23:09:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x6) 23:09:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) 23:09:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$9p(0xffffffffffffffff, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) clock_gettime(0x0, &(0x7f0000000340)) [ 2808.816764] dlm: no locking on control device 23:09:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 2809.783808] dlm: no locking on control device 23:09:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:52 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 23:09:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 2812.405466] audit: type=1400 audit(1580339394.163:792): avc: denied { map } for pid=24852 comm="syz-executor.0" path="/dev/zero" dev="devtmpfs" ino=1053 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:zero_device_t:s0 tclass=chr_file permissive=1 23:09:54 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 23:09:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) close(0xffffffffffffffff) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:09:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2812.984908] dlm: no locking on control device 23:09:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:54 executing program 2: 23:09:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) [ 2814.837805] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2814.877568] blkid cpuset=/ mems_allowed=0-1 [ 2814.894187] CPU: 1 PID: 24865 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 2814.901561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2814.911038] Call Trace: [ 2814.913649] dump_stack+0x142/0x197 [ 2814.917498] dump_header+0x177/0x6cd [ 2814.921227] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2814.926489] ? ___ratelimit+0x55/0x537 [ 2814.933732] oom_kill_process.cold+0x10/0xadd [ 2814.938248] ? rcu_read_unlock_special+0x895/0xd40 [ 2814.943391] ? lock_downgrade+0x740/0x740 [ 2814.947660] out_of_memory+0x2ee/0x1180 [ 2814.951655] ? lock_acquire+0x16f/0x430 [ 2814.955651] ? oom_killer_disable+0x1d0/0x1d0 [ 2814.960267] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2814.965209] __alloc_pages_slowpath+0x2251/0x2930 [ 2814.970118] ? warn_alloc+0xf0/0xf0 [ 2814.973788] ? __might_sleep+0x93/0xb0 [ 2814.977694] __alloc_pages_nodemask+0x62c/0x7a0 [ 2814.982382] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2814.987413] ? cache_grow_begin+0x335/0x400 [ 2814.991860] cache_grow_begin+0x80/0x400 [ 2814.996224] ? __cpuset_node_allowed+0xff/0x450 [ 2815.000909] fallback_alloc+0x1fd/0x2c0 [ 2815.004905] ____cache_alloc_node+0x1be/0x1d0 [ 2815.009422] kmem_cache_alloc+0x1f3/0x780 [ 2815.013766] ima_d_path+0x52/0x1de [ 2815.017335] process_measurement+0x96a/0xb80 [ 2815.021857] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 2815.026991] ? dput.part.0+0x170/0x750 [ 2815.030896] ? dquot_file_open+0x60/0xa0 [ 2815.035142] ? ext4_file_open+0x2da/0x850 [ 2815.039400] ? ext4_release_file+0x2e0/0x2e0 [ 2815.043852] ? inode_has_perm.isra.0+0x1e0/0x1e0 [ 2815.048721] ? lock_downgrade+0x6dc/0x740 [ 2815.052882] ? do_raw_spin_unlock+0x174/0x260 [ 2815.057391] ? security_file_open+0x89/0x190 [ 2815.061899] ? file_ra_state_init+0xc9/0x1e0 [ 2815.066346] ? do_dentry_open+0x452/0xeb0 [ 2815.070654] ? ext4_release_file+0x2e0/0x2e0 [ 2815.075189] ima_file_check+0x30/0x40 [ 2815.080657] path_openat+0x1634/0x3db0 [ 2815.084570] ? find_held_lock+0x35/0x130 [ 2815.088928] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2815.093634] ? __alloc_fd+0x1d4/0x4a0 [ 2815.097557] do_filp_open+0x18e/0x250 [ 2815.101468] ? may_open_dev+0xe0/0xe0 [ 2815.105434] ? _raw_spin_unlock+0x2d/0x50 [ 2815.109808] ? __alloc_fd+0x1d4/0x4a0 [ 2815.113721] do_sys_open+0x2c5/0x430 [ 2815.117591] ? filp_open+0x70/0x70 [ 2815.121403] ? SyS_access+0x377/0x6b0 [ 2815.125203] SyS_open+0x2d/0x40 [ 2815.128476] ? do_sys_open+0x430/0x430 [ 2815.132361] do_syscall_64+0x1e8/0x640 [ 2815.136346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2815.141194] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2815.146647] RIP: 0033:0x7f438b5bb1a7 [ 2815.150461] RSP: 002b:00007ffecc870fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2815.158297] RAX: ffffffffffffffda RBX: 00007f438b7c61c8 RCX: 00007f438b5bb1a7 [ 2815.165649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f438b7c10ee [ 2815.172917] RBP: 00007ffecc871060 R08: 00007ffecc87145f R09: 0000000000000000 [ 2815.180325] R10: 00007f438b7c10ee R11: 0000000000000246 R12: 0000000000000008 [ 2815.187925] R13: 00007f438b7c5040 R14: 0000000000000000 R15: 00007ffecc87145f [ 2815.204453] Mem-Info: [ 2815.206957] active_anon:1264622 inactive_anon:201 isolated_anon:0 [ 2815.206957] active_file:49 inactive_file:49 isolated_file:0 [ 2815.206957] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2815.206957] slab_reclaimable:18705 slab_unreclaimable:172404 [ 2815.206957] mapped:52266 shmem:280 pagetables:33672 bounce:0 [ 2815.206957] free:22411 free_pcp:162 free_cma:0 [ 2815.241446] Node 0 active_anon:1780876kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2815.270177] Node 1 active_anon:3277616kB inactive_anon:24kB active_file:284kB inactive_file:648kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:652kB dirty:0kB writeback:0kB shmem:152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2815.298227] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2815.325381] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2815.330562] Node 0 DMA32 free:25496kB min:36384kB low:45480kB high:54576kB active_anon:1776464kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2815.367323] lowmem_reserve[]: 0 0 0 0 0 [ 2815.371472] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2815.398342] lowmem_reserve[]: 0 0 0 0 0 [ 2815.402629] Node 1 Normal free:53840kB min:53504kB low:66880kB high:80256kB active_anon:3277616kB inactive_anon:24kB active_file:84kB inactive_file:404kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28704kB pagetables:82104kB bounce:0kB free_pcp:360kB local_pcp:16kB free_cma:0kB [ 2815.432783] lowmem_reserve[]: 0 0 0 0 0 [ 2815.436803] Node 0 DMA: 23*4kB (UME) 35*8kB (UE) 22*16kB (UE) 8*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2815.452527] Node 0 DMA32: 2602*4kB (UME) 1210*8kB (UME) 332*16kB (UME) 3*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25496kB [ 2815.466649] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2815.477482] Node 1 Normal: 231*4kB (UME) 228*8kB (UMEH) 141*16kB (UME) 132*32kB (UMEH) 124*64kB (UME) 148*128kB (UM) 32*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 55052kB [ 2815.494796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2815.503689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2815.534191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2815.570105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2815.578725] 1097 total pagecache pages [ 2815.590303] 0 pages in swap cache [ 2815.593933] Swap cache stats: add 0, delete 0, find 0/0 [ 2815.599322] Free swap = 0kB [ 2815.610260] Total swap = 0kB [ 2815.613304] 1965979 pages RAM [ 2815.616415] 0 pages HighMem/MovableOnly [ 2815.630123] 335855 pages reserved [ 2815.633615] 0 pages cma reserved [ 2815.636990] Out of memory: Kill process 24664 (syz-executor.1) score 1007 or sacrifice child [ 2815.699351] Killed process 24664 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34820kB, shmem-rss:0kB [ 2815.972380] dlm: no locking on control device 23:09:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 23:09:57 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:57 executing program 2: 23:09:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) [ 2816.361333] dlm: no locking on control device 23:09:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:58 executing program 2: 23:09:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:58 executing program 0: 23:09:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:58 executing program 2: [ 2816.879506] dlm: no locking on control device 23:09:58 executing program 0: 23:09:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:58 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:09:58 executing program 2: 23:09:58 executing program 0: 23:09:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:09:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:09:59 executing program 0: 23:09:59 executing program 2: 23:09:59 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:09:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:09:59 executing program 2: 23:09:59 executing program 0: 23:09:59 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2817.881926] dlm: no locking on control device 23:10:00 executing program 2: 23:10:00 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:00 executing program 0: 23:10:00 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:01 executing program 2: 23:10:01 executing program 0: [ 2820.412886] dlm: no locking on control device 23:10:02 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2821.301073] dlm: no locking on control device [ 2823.428717] mcstransd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2823.460078] mcstransd cpuset=/ mems_allowed=0-1 [ 2823.465045] CPU: 0 PID: 7348 Comm: mcstransd Not tainted 4.14.169-syzkaller #0 [ 2823.472554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2823.481914] Call Trace: [ 2823.484540] dump_stack+0x142/0x197 [ 2823.488215] dump_header+0x177/0x6cd [ 2823.492016] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2823.497147] ? ___ratelimit+0x55/0x537 [ 2823.501054] oom_kill_process.cold+0x10/0xadd [ 2823.505556] ? oom_unkillable_task+0x294/0x390 [ 2823.510158] ? lock_downgrade+0x740/0x740 [ 2823.514323] out_of_memory+0x2ee/0x1180 [ 2823.518305] ? lock_acquire+0x16f/0x430 [ 2823.522299] ? oom_killer_disable+0x1d0/0x1d0 [ 2823.526807] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2823.531746] __alloc_pages_slowpath+0x2251/0x2930 [ 2823.536622] ? warn_alloc+0xf0/0xf0 [ 2823.540274] ? __might_sleep+0x93/0xb0 [ 2823.544263] __alloc_pages_nodemask+0x62c/0x7a0 [ 2823.548963] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2823.554093] ? ____cache_alloc_node+0x1be/0x1d0 [ 2823.558885] ? cache_grow_begin+0x335/0x400 [ 2823.563370] cache_grow_begin+0x80/0x400 [ 2823.567429] ? __cpuset_node_allowed+0xff/0x450 [ 2823.572103] fallback_alloc+0x1fd/0x2c0 [ 2823.576075] ____cache_alloc_node+0x1be/0x1d0 [ 2823.580571] kmem_cache_alloc+0x1f3/0x780 [ 2823.586276] ? task_work_run+0xf0/0x190 [ 2823.590359] getname_flags+0xcb/0x580 [ 2823.594248] getname+0x1a/0x20 [ 2823.597425] do_sys_open+0x1e7/0x430 [ 2823.601134] ? filp_open+0x70/0x70 [ 2823.604663] ? SyS_setsockopt+0x210/0x210 [ 2823.608928] SyS_open+0x2d/0x40 [ 2823.612207] ? do_sys_open+0x430/0x430 [ 2823.616085] do_syscall_64+0x1e8/0x640 [ 2823.619967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2823.624804] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2823.630011] RIP: 0033:0x7ffb17f00120 [ 2823.633789] RSP: 002b:00007ffca6b49758 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2823.641605] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ffb17f00120 [ 2823.649166] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000561299a8c2b0 [ 2823.656719] RBP: 0000561299a63dc8 R08: 746e65727275632f R09: 00007ffb18613b15 [ 2823.664111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2823.671374] R13: 0000561299a6f7a0 R14: 00007ffca6b497f8 R15: 0000000000000006 [ 2823.704867] Mem-Info: [ 2823.707486] active_anon:1264202 inactive_anon:202 isolated_anon:0 [ 2823.707486] active_file:58 inactive_file:47 isolated_file:0 [ 2823.707486] unevictable:0 dirty:2 writeback:2 unstable:0 [ 2823.707486] slab_reclaimable:18783 slab_unreclaimable:172353 [ 2823.707486] mapped:52293 shmem:282 pagetables:33749 bounce:0 [ 2823.707486] free:22918 free_pcp:17 free_cma:0 [ 2823.744893] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2823.772664] Node 1 active_anon:3277404kB inactive_anon:28kB active_file:328kB inactive_file:240kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:368kB dirty:4kB writeback:8kB shmem:160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2823.800356] Node 0 DMA free:10412kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.827575] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2823.832691] Node 0 DMA32 free:26320kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.864553] lowmem_reserve[]: 0 0 0 0 0 [ 2823.868586] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2823.899579] lowmem_reserve[]: 0 0 0 0 0 [ 2823.903883] Node 1 Normal free:53216kB min:53504kB low:66880kB high:80256kB active_anon:3277112kB inactive_anon:28kB active_file:584kB inactive_file:456kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28672kB pagetables:82412kB bounce:0kB free_pcp:436kB local_pcp:0kB free_cma:0kB [ 2823.936393] lowmem_reserve[]: 0 0 0 0 0 [ 2823.941426] Node 0 DMA: 23*4kB (UME) 34*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10412kB [ 2823.964034] Node 0 DMA32: 2594*4kB (UME) 1311*8kB (UME) 335*16kB (UME) 3*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26320kB [ 2823.979483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2824.023520] Node 1 Normal: 177*4kB (UME) 504*8kB (UME) 144*16kB (UME) 176*32kB (UME) 61*64kB (UME) 146*128kB (UM) 32*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 54212kB [ 2824.044071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.053269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.063988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2824.073269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2824.083372] 390 total pagecache pages [ 2824.087326] 0 pages in swap cache [ 2824.096379] Swap cache stats: add 0, delete 0, find 0/0 [ 2824.101991] Free swap = 0kB [ 2824.105122] Total swap = 0kB [ 2824.108383] 1965979 pages RAM [ 2824.111914] 0 pages HighMem/MovableOnly [ 2824.115906] 335855 pages reserved [ 2824.119480] 0 pages cma reserved [ 2824.122861] Out of memory: Kill process 10616 (syz-executor.4) score 1007 or sacrifice child [ 2824.135397] Killed process 10616 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB 23:10:06 executing program 2: 23:10:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:06 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:06 executing program 0: 23:10:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) [ 2825.045552] dlm: no locking on control device 23:10:06 executing program 0: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) open(0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141242, 0x80) write$P9_RWALK(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000300)) close(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0184b8000000000000000000040000000000000000000000d4ff624289003c3e6504e6528bf42db06d00000000000000000000e8ffffffff0000000000f0104a61fabad43c0ded00000000000000e51b033ec28b4e01991c194d293f8e35b24108588befdb8852bea78e7dff87f6d3c8c512270cbd480dfc3a068b7859c3f06cbb182219a0e0dc19a35d6a20a086c8115b9807fb16ac4939b9b25f749f73e198efd7e8e22e2bba4c53fe10c62447e2d4ad6fb8923840e077d85e22d9a8c89b400ff3c4bba032ffe95b03f32825defdc0dec79bcc232602a620f1976031a5c871472f48fb5451868fc4d31fff7569799de555436ba77f76f277bb1039e3381c446a34e6c883b43be9b2a1db353bddf9e7840a3dfcb56dba5ecd73149a7fa3d273650fbca0ebcdc281723178b3d70a990000000000d79fb32cb63d80648d"]) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000000)={0x0, 0x10}) syz_open_dev$usbfs(0x0, 0x77, 0x1) syz_open_dev$rtc(0x0, 0x0, 0x80) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000005c0)=0x80, 0x2c0f134d13d1f0d1) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0xc0}, {0xffffffffffffffff, 0x211}, {0xffffffffffffffff, 0x800}, {0xffffffffffffffff, 0x21}, {0xffffffffffffffff, 0x4007}, {r0, 0x220}], 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) ppoll(&(0x7f0000000780)=[{r6}, {r7, 0x13}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) 23:10:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)=ANY=[]) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:10:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2827.098667] dlm: no locking on control device 23:10:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2829.404036] dlm: no locking on control device 23:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) 23:10:11 executing program 2: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x3f, 0x3}, 0x0) open(0x0, 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x10}) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 23:10:11 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 23:10:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:11 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) [ 2829.885817] dlm: no locking on control device [ 2829.955385] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 23:10:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="1e00b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000020c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) [ 2830.093320] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2830.163056] CPU: 0 PID: 25053 Comm: syz-executor.0 Not tainted 4.14.169-syzkaller #0 [ 2830.170999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2830.180369] Call Trace: [ 2830.182981] dump_stack+0x142/0x197 [ 2830.186649] warn_alloc.cold+0x96/0x1af [ 2830.190786] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2830.195662] ? wait_for_completion+0x420/0x420 [ 2830.200270] __alloc_pages_slowpath+0x23c6/0x2930 [ 2830.205260] ? warn_alloc+0xf0/0xf0 [ 2830.208932] ? __might_sleep+0x93/0xb0 [ 2830.212848] __alloc_pages_nodemask+0x62c/0x7a0 [ 2830.217644] ? rcu_read_lock_sched_held+0x110/0x130 [ 2830.222954] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2830.228007] alloc_pages_current+0xec/0x1e0 [ 2830.232365] kvm_mmu_create+0xdf/0x1e0 [ 2830.236277] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2830.240624] kvm_vcpu_init+0x272/0x360 [ 2830.244710] vmx_create_vcpu+0xfc/0x2aa0 [ 2830.248787] ? mutex_trylock+0x1c0/0x1c0 [ 2830.252884] ? handle_rdmsr+0x6e0/0x6e0 [ 2830.256880] ? wait_for_completion+0x420/0x420 [ 2830.261577] kvm_arch_vcpu_create+0x8c/0xc0 [ 2830.266070] kvm_vm_ioctl+0x501/0x1600 [ 2830.269992] ? __lock_acquire+0x5f7/0x4620 [ 2830.274444] ? get_unused_fd_flags+0xd0/0xd0 [ 2830.278878] ? kvm_vcpu_release+0xa0/0xa0 [ 2830.283050] ? trace_hardirqs_on+0x10/0x10 [ 2830.287320] ? trace_hardirqs_on+0x10/0x10 [ 2830.291571] ? save_trace+0x290/0x290 [ 2830.295687] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2830.300639] ? __fget+0x210/0x370 [ 2830.304199] ? find_held_lock+0x35/0x130 [ 2830.308286] ? __fget+0x210/0x370 [ 2830.311796] ? kvm_vcpu_release+0xa0/0xa0 [ 2830.316740] do_vfs_ioctl+0x7ae/0x1060 [ 2830.320655] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2830.325436] ? lock_downgrade+0x740/0x740 [ 2830.329614] ? ioctl_preallocate+0x1c0/0x1c0 [ 2830.334048] ? __fget+0x237/0x370 [ 2830.337531] ? security_file_ioctl+0x89/0xb0 [ 2830.342021] SyS_ioctl+0x8f/0xc0 [ 2830.345438] ? do_vfs_ioctl+0x1060/0x1060 [ 2830.349695] do_syscall_64+0x1e8/0x640 [ 2830.353741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2830.358617] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2830.363970] RIP: 0033:0x45b349 [ 2830.367166] RSP: 002b:00007f33318b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2830.375199] RAX: ffffffffffffffda RBX: 00007f33318b46d4 RCX: 000000000045b349 [ 2830.383094] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2830.391017] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2830.398305] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2830.405586] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c 23:10:12 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2830.556454] dlm: no locking on control device 23:10:12 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 23:10:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xcde6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x0, 0x400}) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@int=0x40, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:10:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2831.134298] dlm: no locking on control device [ 2831.221731] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 23:10:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2831.345726] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2831.407048] CPU: 1 PID: 25096 Comm: syz-executor.2 Not tainted 4.14.169-syzkaller #0 [ 2831.415127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2831.424723] Call Trace: [ 2831.427485] dump_stack+0x142/0x197 [ 2831.431150] warn_alloc.cold+0x96/0x1af [ 2831.435138] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2831.439994] ? wait_for_completion+0x420/0x420 [ 2831.444600] __alloc_pages_slowpath+0x23c6/0x2930 [ 2831.449529] ? warn_alloc+0xf0/0xf0 [ 2831.453189] ? __might_sleep+0x93/0xb0 [ 2831.457093] __alloc_pages_nodemask+0x62c/0x7a0 [ 2831.461776] ? rcu_read_lock_sched_held+0x110/0x130 [ 2831.467530] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2831.472684] alloc_pages_current+0xec/0x1e0 [ 2831.477185] kvm_mmu_create+0xdf/0x1e0 [ 2831.481223] kvm_arch_vcpu_init+0x29c/0x8e0 [ 2831.485563] kvm_vcpu_init+0x272/0x360 [ 2831.489601] vmx_create_vcpu+0xfc/0x2aa0 [ 2831.493820] ? mutex_trylock+0x1c0/0x1c0 [ 2831.498097] ? handle_rdmsr+0x6e0/0x6e0 [ 2831.502093] ? wait_for_completion+0x420/0x420 [ 2831.506703] kvm_arch_vcpu_create+0x8c/0xc0 [ 2831.511048] kvm_vm_ioctl+0x501/0x1600 [ 2831.516035] ? __lock_acquire+0x5f7/0x4620 [ 2831.520283] ? get_unused_fd_flags+0xd0/0xd0 [ 2831.524716] ? kvm_vcpu_release+0xa0/0xa0 [ 2831.528877] ? trace_hardirqs_on+0x10/0x10 [ 2831.533136] ? trace_hardirqs_on+0x10/0x10 [ 2831.537387] ? save_trace+0x290/0x290 [ 2831.541419] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2831.546476] ? __fget+0x210/0x370 [ 2831.549947] ? find_held_lock+0x35/0x130 [ 2831.554027] ? __fget+0x210/0x370 [ 2831.557492] ? kvm_vcpu_release+0xa0/0xa0 [ 2831.561661] do_vfs_ioctl+0x7ae/0x1060 [ 2831.565575] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2831.570347] ? lock_downgrade+0x740/0x740 [ 2831.574530] ? ioctl_preallocate+0x1c0/0x1c0 [ 2831.578958] ? __fget+0x237/0x370 [ 2831.582442] ? security_file_ioctl+0x89/0xb0 [ 2831.587012] SyS_ioctl+0x8f/0xc0 [ 2831.590399] ? do_vfs_ioctl+0x1060/0x1060 [ 2831.594560] do_syscall_64+0x1e8/0x640 [ 2831.598454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2831.603439] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2831.608674] RIP: 0033:0x45b349 [ 2831.611880] RSP: 002b:00007f6aaef8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2831.619719] RAX: ffffffffffffffda RBX: 00007f6aaef8b6d4 RCX: 000000000045b349 [ 2831.626997] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 2831.634294] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2831.641577] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2831.649040] R13: 000000000000038a R14: 00000000004c4aff R15: 000000000075bf2c [ 2832.022267] dlm: no locking on control device [ 2832.143626] warn_alloc_show_mem: 1 callbacks suppressed [ 2832.143631] Mem-Info: [ 2832.153884] active_anon:1259083 inactive_anon:202 isolated_anon:0 [ 2832.153884] active_file:844 inactive_file:666 isolated_file:59 [ 2832.153884] unevictable:0 dirty:31 writeback:0 unstable:0 [ 2832.153884] slab_reclaimable:19024 slab_unreclaimable:172662 [ 2832.153884] mapped:53465 shmem:287 pagetables:33843 bounce:0 [ 2832.153884] free:25589 free_pcp:376 free_cma:0 [ 2832.231778] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2832.370129] Node 1 active_anon:3255528kB inactive_anon:28kB active_file:2960kB inactive_file:2548kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:4844kB dirty:120kB writeback:0kB shmem:180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2832.430130] Node 0 DMA free:10404kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2832.510118] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2832.515239] Node 0 DMA32 free:26412kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2832.661396] lowmem_reserve[]: 0 0 0 0 0 [ 2832.667008] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2832.760307] lowmem_reserve[]: 0 0 0 0 0 [ 2832.764354] Node 1 Normal free:69680kB min:53504kB low:66880kB high:80256kB active_anon:3255728kB inactive_anon:28kB active_file:2624kB inactive_file:1636kB unevictable:0kB writepending:120kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28928kB pagetables:82788kB bounce:0kB free_pcp:1292kB local_pcp:732kB free_cma:0kB [ 2832.862884] lowmem_reserve[]: 0 0 0 0 0 [ 2832.867254] Node 0 DMA: 23*4kB (UME) 33*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10404kB [ 2832.883636] Node 0 DMA32: 2511*4kB (UME) 1373*8kB (UME) 336*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 2832.897842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2832.908933] Node 1 Normal: 693*4kB (UME) 246*8kB (MH) 277*16kB (UMEH) 394*32kB (UME) 122*64kB (UME) 153*128kB (UM) 38*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 69652kB [ 2832.932834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.945789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.954783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2832.964184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2832.988926] 1139 total pagecache pages [ 2832.999784] 0 pages in swap cache [ 2833.015021] Swap cache stats: add 0, delete 0, find 0/0 [ 2833.033642] Free swap = 0kB [ 2833.042906] Total swap = 0kB [ 2833.055128] 1965979 pages RAM [ 2833.074307] 0 pages HighMem/MovableOnly [ 2833.088099] 335855 pages reserved [ 2833.101352] 0 pages cma reserved 23:10:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:15 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 23:10:14 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:15 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000000500000000000000000000000000008e076928e87c559d0706f26cb2eb5fca507cd484fa95c8538f393891dc7f6a788029452a15e1e1e793b811ab4d05eaa4d982ffaa9a9e9f26d5ca6b9584edaf0321d67003681acb673b2403fef1bcdf397b3e05b92a35ad781c22ef70920f142ef8917fc30eb20211e2671b12db3cb88c7eff84d4630d4df9b441588a90fa5fc7c81bf4e09bcfb54ad4b43d3380e9f41a45cc"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20) keyctl$link(0x8, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0xea) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000400)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)={0x2, 'team_slave_1\x00', {0x20}}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="230000002d0007031dfffd946fa2830020200ae800000000a61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b138a32052b44e099d881e02546dcda4cc7e6397", 0x4c}], 0x1}, 0x0) [ 2833.577032] dlm: no locking on control device 23:10:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r1, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2833.705907] devpts: called with bogus options 23:10:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:15 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 2834.430139] devpts: called with bogus options 23:10:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:16 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') tkill(0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000000500000000000000000000000000008e076928e87c559d0706f26cb2eb5fca507cd484fa95c8538f393891dc7f6a788029452a15e1e1e793b811ab4d05eaa4d982ffaa9a9e9f26d5ca6b9584edaf0321d67003681acb673b2403fef1bcdf397b3e05b92a35ad781c22ef70920f142ef8917fc30eb20211e2671b12db3cb88c7eff84d4630d4df9b441588a90fa5fc7c81bf4e09bcfb54ad4b43d3380e9f41a45cc"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20) keyctl$link(0x8, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0xea) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000400)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)={0x2, 'team_slave_1\x00', {0x20}}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="230000002d0007031dfffd946fa2830020200ae800000000a61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b138a32052b44e099d881e02546dcda4cc7e6397", 0x4c}], 0x1}, 0x0) [ 2835.133961] devpts: called with bogus options 23:10:17 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) [ 2838.074066] dlm: no locking on control device [ 2838.541939] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2838.573301] udevd cpuset=/ mems_allowed=0-1 [ 2838.578507] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2838.585541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.595046] Call Trace: [ 2838.597647] dump_stack+0x142/0x197 [ 2838.601294] dump_header+0x177/0x6cd [ 2838.605169] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2838.610283] ? ___ratelimit+0x55/0x537 [ 2838.614192] oom_kill_process.cold+0x10/0xadd [ 2838.618789] ? rcu_read_unlock_special+0x639/0xd40 [ 2838.623738] ? lock_downgrade+0x740/0x740 [ 2838.627905] out_of_memory+0x2ee/0x1180 [ 2838.631893] ? lock_acquire+0x16f/0x430 [ 2838.635890] ? oom_killer_disable+0x1d0/0x1d0 [ 2838.640725] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2838.645690] __alloc_pages_slowpath+0x2251/0x2930 [ 2838.650751] ? warn_alloc+0xf0/0xf0 [ 2838.654393] ? __might_sleep+0x93/0xb0 [ 2838.658283] __alloc_pages_nodemask+0x62c/0x7a0 [ 2838.663000] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2838.668466] ? ____cache_alloc_node+0x1be/0x1d0 [ 2838.673132] ? cache_grow_begin+0x335/0x400 [ 2838.677490] cache_grow_begin+0x80/0x400 [ 2838.681557] ? __cpuset_node_allowed+0xff/0x450 [ 2838.686439] fallback_alloc+0x1fd/0x2c0 [ 2838.690413] ____cache_alloc_node+0x1be/0x1d0 [ 2838.694906] kmem_cache_alloc+0x1f3/0x780 [ 2838.699063] ? _raw_spin_unlock_irq+0x28/0x90 [ 2838.703764] getname_flags+0xcb/0x580 [ 2838.707772] ? finish_task_switch+0x178/0x650 [ 2838.712270] ? finish_task_switch+0x14d/0x650 [ 2838.716764] getname+0x1a/0x20 [ 2838.719949] do_sys_open+0x1e7/0x430 [ 2838.723789] ? filp_open+0x70/0x70 [ 2838.727335] SyS_open+0x2d/0x40 [ 2838.730613] ? do_sys_open+0x430/0x430 [ 2838.734491] do_syscall_64+0x1e8/0x640 [ 2838.738588] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2838.743542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2838.748730] RIP: 0033:0x7f812dc50120 [ 2838.752434] RSP: 002b:00007ffc6a4bd068 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2838.760225] RAX: ffffffffffffffda RBX: 0000000002492f20 RCX: 00007f812dc50120 [ 2838.767490] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 00007ffc6a4bd140 [ 2838.774754] RBP: 00007ffc6a4bd0e0 R08: 0000000000000008 R09: 0000000000000001 [ 2838.782054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2838.789339] R13: 000000000041f57a R14: 00000000022f3d40 R15: 000000000000f239 [ 2838.830111] Mem-Info: [ 2838.832584] active_anon:1262860 inactive_anon:202 isolated_anon:0 [ 2838.832584] active_file:127 inactive_file:185 isolated_file:32 [ 2838.832584] unevictable:0 dirty:50 writeback:6 unstable:0 [ 2838.832584] slab_reclaimable:19042 slab_unreclaimable:172225 [ 2838.832584] mapped:52464 shmem:288 pagetables:33900 bounce:0 [ 2838.832584] free:23485 free_pcp:73 free_cma:0 [ 2838.869323] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2838.897238] Node 1 active_anon:3270836kB inactive_anon:28kB active_file:708kB inactive_file:424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:752kB dirty:196kB writeback:24kB shmem:184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2838.933931] Node 0 DMA free:10404kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2838.983552] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2838.988710] Node 0 DMA32 free:26912kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2839.023349] lowmem_reserve[]: 0 0 0 0 0 [ 2839.027533] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2839.059729] lowmem_reserve[]: 0 0 0 0 0 [ 2839.066228] Node 1 Normal free:57052kB min:53504kB low:66880kB high:80256kB active_anon:3270836kB inactive_anon:28kB active_file:276kB inactive_file:396kB unevictable:0kB writepending:220kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28864kB pagetables:83016kB bounce:0kB free_pcp:784kB local_pcp:500kB free_cma:0kB [ 2839.096328] lowmem_reserve[]: 0 0 0 0 0 [ 2839.105740] Node 0 DMA: 23*4kB (UME) 33*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10404kB [ 2839.123017] Node 0 DMA32: 2506*4kB (UME) 1425*8kB (UME) 336*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26928kB [ 2839.137521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2839.152759] Node 1 Normal: 586*4kB (UME) 501*8kB (UME) 66*16kB (UME) 132*32kB (UE) 90*64kB (UME) 153*128kB (UM) 38*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 57456kB [ 2839.169675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.187373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.196443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2839.207305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2839.216090] 431 total pagecache pages [ 2839.219998] 0 pages in swap cache [ 2839.229958] Swap cache stats: add 0, delete 0, find 0/0 [ 2839.235800] Free swap = 0kB [ 2839.238905] Total swap = 0kB [ 2839.249065] 1965979 pages RAM [ 2839.253072] 0 pages HighMem/MovableOnly [ 2839.258069] 335855 pages reserved [ 2839.262489] 0 pages cma reserved [ 2839.266865] Out of memory: Kill process 25149 (syz-executor.2) score 1007 or sacrifice child [ 2839.277139] Killed process 25149 (syz-executor.2) total-vm:72984kB, anon-rss:16556kB, file-rss:34840kB, shmem-rss:0kB 23:10:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:21 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) [ 2840.061478] dlm: no locking on control device 23:10:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) [ 2840.938123] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2841.012523] udevd cpuset=/ mems_allowed=0-1 [ 2841.045524] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2841.052587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2841.062043] Call Trace: [ 2841.064643] dump_stack+0x142/0x197 [ 2841.068266] dump_header+0x177/0x6cd [ 2841.071969] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2841.077592] ? ___ratelimit+0x55/0x537 [ 2841.081492] oom_kill_process.cold+0x10/0xadd [ 2841.086005] ? rcu_read_unlock_special+0x895/0xd40 [ 2841.091068] ? lock_downgrade+0x740/0x740 [ 2841.095223] out_of_memory+0x2ee/0x1180 [ 2841.099198] ? lock_acquire+0x16f/0x430 [ 2841.103173] ? oom_killer_disable+0x1d0/0x1d0 [ 2841.107667] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2841.112687] __alloc_pages_slowpath+0x2251/0x2930 [ 2841.117543] ? warn_alloc+0xf0/0xf0 [ 2841.121174] ? __might_sleep+0x93/0xb0 [ 2841.125287] __alloc_pages_nodemask+0x62c/0x7a0 [ 2841.130018] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2841.135044] ? ____cache_alloc_node+0x1be/0x1d0 [ 2841.139710] ? cache_grow_begin+0x335/0x400 [ 2841.144034] cache_grow_begin+0x80/0x400 [ 2841.148101] ? __cpuset_node_allowed+0xff/0x450 [ 2841.152804] fallback_alloc+0x1fd/0x2c0 [ 2841.156783] ____cache_alloc_node+0x1be/0x1d0 [ 2841.161281] kmem_cache_alloc+0x1f3/0x780 [ 2841.165431] ? vfs_statx_fd+0xa0/0xa0 [ 2841.169303] getname_flags+0xcb/0x580 [ 2841.173115] ? cp_new_stat+0x5a0/0x5a0 [ 2841.177008] getname+0x1a/0x20 [ 2841.180192] do_sys_open+0x1e7/0x430 [ 2841.184000] ? filp_open+0x70/0x70 [ 2841.187543] ? SyS_readlinkat+0x2a0/0x2a0 [ 2841.191726] SyS_open+0x2d/0x40 [ 2841.195006] ? do_sys_open+0x430/0x430 [ 2841.198895] do_syscall_64+0x1e8/0x640 [ 2841.202785] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2841.207668] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2841.212867] RIP: 0033:0x7f812dc50120 [ 2841.216600] RSP: 002b:00007ffc6a4c1e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2841.224608] RAX: ffffffffffffffda RBX: 0000000002573c90 RCX: 00007f812dc50120 [ 2841.231897] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffc6a4c2b10 [ 2841.239188] RBP: 00000000022f68f0 R08: 000000000041f4f1 R09: 00007f812dca67d0 [ 2841.246560] R10: 7269762f73656369 R11: 0000000000000246 R12: 0000000000055fb5 [ 2841.253821] R13: 0000000000000000 R14: 0000000002573c90 R15: 00000000022a0030 [ 2841.352964] Mem-Info: [ 2841.355524] active_anon:1262874 inactive_anon:202 isolated_anon:0 [ 2841.355524] active_file:314 inactive_file:254 isolated_file:32 [ 2841.355524] unevictable:0 dirty:12 writeback:3 unstable:0 [ 2841.355524] slab_reclaimable:19097 slab_unreclaimable:171720 [ 2841.355524] mapped:52798 shmem:289 pagetables:33925 bounce:0 [ 2841.355524] free:23590 free_pcp:241 free_cma:0 [ 2841.392472] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2841.426958] Node 1 active_anon:3270892kB inactive_anon:28kB active_file:1256kB inactive_file:748kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:1788kB dirty:48kB writeback:12kB shmem:188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2841.462868] Node 0 DMA free:10396kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2841.498756] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2841.504508] Node 0 DMA32 free:26912kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2841.552811] lowmem_reserve[]: 0 0 0 0 0 [ 2841.558476] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2841.592217] lowmem_reserve[]: 0 0 0 0 0 [ 2841.596714] Node 1 Normal free:59068kB min:53504kB low:66880kB high:80256kB active_anon:3270892kB inactive_anon:28kB active_file:516kB inactive_file:544kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28992kB pagetables:83116kB bounce:0kB free_pcp:312kB local_pcp:0kB free_cma:0kB [ 2841.627316] lowmem_reserve[]: 0 0 0 0 0 [ 2841.631896] Node 0 DMA: 23*4kB (UME) 32*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10396kB [ 2841.648193] Node 0 DMA32: 2502*4kB (UME) 1425*8kB (UME) 336*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26912kB [ 2841.663005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2841.691486] Node 1 Normal: 136*4kB (ME) 691*8kB (UME) 91*16kB (UME) 178*32kB (UME) 90*64kB (UME) 153*128kB (UM) 38*256kB (UM) 9*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 59048kB [ 2841.709744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2841.719844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2841.729577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2841.739606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2841.749173] 576 total pagecache pages [ 2841.755149] 0 pages in swap cache [ 2841.759765] Swap cache stats: add 0, delete 0, find 0/0 [ 2841.765902] Free swap = 0kB [ 2841.769716] Total swap = 0kB [ 2841.773620] 1965979 pages RAM [ 2841.777123] 0 pages HighMem/MovableOnly [ 2841.781698] 335855 pages reserved [ 2841.785375] 0 pages cma reserved [ 2841.788970] Out of memory: Kill process 10659 (syz-executor.4) score 1007 or sacrifice child [ 2841.798239] Killed process 10659 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2841.886204] oom_reaper: reaped process 10659 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2842.323496] dlm: no locking on control device 23:10:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 2844.358247] mcstransd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2844.405492] mcstransd cpuset=/ mems_allowed=0-1 [ 2844.424334] CPU: 1 PID: 7348 Comm: mcstransd Not tainted 4.14.169-syzkaller #0 [ 2844.431894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2844.441261] Call Trace: [ 2844.443954] dump_stack+0x142/0x197 [ 2844.447612] dump_header+0x177/0x6cd [ 2844.451431] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2844.456545] ? ___ratelimit+0x55/0x537 [ 2844.460456] oom_kill_process.cold+0x10/0xadd [ 2844.464961] ? oom_unkillable_task+0x294/0x390 [ 2844.469552] ? lock_downgrade+0x740/0x740 [ 2844.473809] out_of_memory+0x2ee/0x1180 [ 2844.477787] ? lock_acquire+0x16f/0x430 [ 2844.481781] ? oom_killer_disable+0x1d0/0x1d0 [ 2844.486270] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2844.491315] __alloc_pages_slowpath+0x2251/0x2930 [ 2844.496169] ? warn_alloc+0xf0/0xf0 [ 2844.499802] ? __might_sleep+0x93/0xb0 [ 2844.503697] __alloc_pages_nodemask+0x62c/0x7a0 [ 2844.508381] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2844.513404] ? ____cache_alloc_node+0x1be/0x1d0 [ 2844.518166] ? cache_grow_begin+0x335/0x400 [ 2844.522494] cache_grow_begin+0x80/0x400 [ 2844.526651] ? __cpuset_node_allowed+0xff/0x450 [ 2844.531320] fallback_alloc+0x1fd/0x2c0 [ 2844.535295] ____cache_alloc_node+0x1be/0x1d0 [ 2844.539795] kmem_cache_alloc+0x1f3/0x780 [ 2844.543944] ? task_work_run+0xf0/0x190 [ 2844.548364] getname_flags+0xcb/0x580 [ 2844.552174] getname+0x1a/0x20 [ 2844.555364] do_sys_open+0x1e7/0x430 [ 2844.559085] ? filp_open+0x70/0x70 [ 2844.562627] ? SyS_setsockopt+0x210/0x210 [ 2844.566776] SyS_open+0x2d/0x40 [ 2844.570053] ? do_sys_open+0x430/0x430 [ 2844.574020] do_syscall_64+0x1e8/0x640 [ 2844.577935] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2844.582786] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2844.587992] RIP: 0033:0x7ffb17f00120 [ 2844.591694] RSP: 002b:00007ffca6b49758 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2844.599530] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ffb17f00120 [ 2844.606926] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000561299ab2180 [ 2844.614430] RBP: 0000561299ab26b8 R08: 746e65727275632f R09: 00007ffb18613b15 [ 2844.621852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2844.629253] R13: 0000561299a63db0 R14: 00007ffca6b497f8 R15: 0000000000000009 [ 2844.943171] Mem-Info: [ 2844.948579] active_anon:1263332 inactive_anon:201 isolated_anon:0 [ 2844.948579] active_file:105 inactive_file:91 isolated_file:18 [ 2844.948579] unevictable:0 dirty:14 writeback:3 unstable:0 [ 2844.948579] slab_reclaimable:19045 slab_unreclaimable:172297 [ 2844.948579] mapped:52389 shmem:290 pagetables:33937 bounce:0 [ 2844.948579] free:23150 free_pcp:49 free_cma:0 [ 2844.990178] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2845.045055] Node 1 active_anon:3272748kB inactive_anon:24kB active_file:644kB inactive_file:648kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:996kB dirty:56kB writeback:40kB shmem:192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2845.119623] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2845.148309] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2845.168325] Node 0 DMA32 free:26876kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2845.210198] lowmem_reserve[]: 0 0 0 0 0 [ 2845.214445] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2845.240031] lowmem_reserve[]: 0 0 0 0 0 [ 2845.244116] Node 1 Normal free:55536kB min:53504kB low:66880kB high:80256kB active_anon:3272752kB inactive_anon:24kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29056kB pagetables:83188kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 2845.273675] lowmem_reserve[]: 0 0 0 0 0 [ 2845.277701] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2845.294529] Node 0 DMA32: 2493*4kB (UME) 1425*8kB (UME) 336*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26876kB [ 2845.308707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2845.323444] Node 1 Normal: 95*4kB (UE) 71*8kB (UE) 167*16kB (UE) 128*32kB (UME) 36*64kB (UME) 150*128kB (UM) 44*256kB (UM) 10*512kB (M) 4*1024kB (M) 2*2048kB (M) 0*4096kB = 53796kB [ 2845.341170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2845.350319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2845.359192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2845.368453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2845.377498] 320 total pagecache pages [ 2845.381802] 0 pages in swap cache [ 2845.385435] Swap cache stats: add 0, delete 0, find 0/0 [ 2845.395622] Free swap = 0kB [ 2845.398860] Total swap = 0kB [ 2845.402113] 1965979 pages RAM [ 2845.405350] 0 pages HighMem/MovableOnly [ 2845.409638] 335855 pages reserved [ 2845.413800] 0 pages cma reserved [ 2845.417454] Out of memory: Kill process 25190 (syz-executor.3) score 1007 or sacrifice child [ 2845.427040] Killed process 25190 (syz-executor.3) total-vm:72984kB, anon-rss:16552kB, file-rss:34840kB, shmem-rss:0kB [ 2845.501523] oom_reaper: reaped process 25190 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:10:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r3, r2, 0x0, 0x7ffff000) [ 2848.099944] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 2848.118204] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 2848.124626] CPU: 1 PID: 25232 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 2848.132733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.142103] Call Trace: [ 2848.144713] dump_stack+0x142/0x197 [ 2848.148395] dump_header+0x177/0x6cd [ 2848.152299] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2848.157422] ? ___ratelimit+0x55/0x537 [ 2848.161469] oom_kill_process.cold+0x10/0xadd [ 2848.165981] ? rcu_read_unlock_special+0x639/0xd40 [ 2848.171278] ? lock_downgrade+0x740/0x740 [ 2848.175466] out_of_memory+0x2ee/0x1180 [ 2848.179469] ? lock_acquire+0x16f/0x430 [ 2848.183463] ? oom_killer_disable+0x1d0/0x1d0 [ 2848.188020] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2848.192975] __alloc_pages_slowpath+0x2251/0x2930 [ 2848.197952] ? warn_alloc+0xf0/0xf0 [ 2848.201604] ? __might_sleep+0x93/0xb0 [ 2848.205513] __alloc_pages_nodemask+0x62c/0x7a0 [ 2848.210199] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2848.215334] ? ____cache_alloc_node+0x1be/0x1d0 [ 2848.220135] ? cache_grow_begin+0x335/0x400 [ 2848.224640] cache_grow_begin+0x80/0x400 [ 2848.228711] ? __cpuset_node_allowed+0xff/0x450 [ 2848.233393] fallback_alloc+0x1fd/0x2c0 [ 2848.237400] ____cache_alloc_node+0x1be/0x1d0 [ 2848.241909] kmem_cache_alloc_node+0xe3/0x780 [ 2848.246412] ? __lock_acquire+0x5f7/0x4620 [ 2848.250667] copy_process.part.0+0x17d5/0x6a70 [ 2848.255257] ? trace_hardirqs_on+0x10/0x10 [ 2848.259542] ? save_trace+0x290/0x290 [ 2848.263370] ? __might_fault+0x110/0x1d0 [ 2848.267457] ? find_held_lock+0x35/0x130 [ 2848.271552] ? __cleanup_sighand+0x50/0x50 [ 2848.275791] ? lock_downgrade+0x740/0x740 [ 2848.279956] _do_fork+0x19e/0xce0 [ 2848.283430] ? fork_idle+0x280/0x280 [ 2848.287167] ? put_timespec64+0xb4/0x100 [ 2848.291228] ? nsecs_to_jiffies+0x30/0x30 [ 2848.295437] ? SyS_clock_gettime+0xf8/0x180 [ 2848.299763] SyS_clone+0x37/0x50 [ 2848.303221] ? sys_vfork+0x30/0x30 [ 2848.306846] do_syscall_64+0x1e8/0x640 [ 2848.310850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2848.315718] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2848.320928] RIP: 0033:0x45b349 [ 2848.324124] RSP: 002b:00007f73ca6c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2848.331850] RAX: ffffffffffffffda RBX: 00007f73ca6c16d4 RCX: 000000000045b349 [ 2848.339270] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000103 [ 2848.346551] RBP: 000000000075c118 R08: ffffffffffffffff R09: 0000000000000000 [ 2848.353853] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2848.361133] R13: 0000000000000070 R14: 00000000004c1bc4 R15: 000000000075c124 [ 2848.428166] Mem-Info: [ 2848.433842] active_anon:1263364 inactive_anon:201 isolated_anon:0 [ 2848.433842] active_file:142 inactive_file:300 isolated_file:49 [ 2848.433842] unevictable:0 dirty:21 writeback:0 unstable:0 [ 2848.433842] slab_reclaimable:19050 slab_unreclaimable:172274 [ 2848.433842] mapped:52600 shmem:290 pagetables:33922 bounce:0 [ 2848.433842] free:23063 free_pcp:102 free_cma:0 [ 2848.479594] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2848.525874] Node 1 active_anon:3272852kB inactive_anon:24kB active_file:744kB inactive_file:612kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:1396kB dirty:80kB writeback:0kB shmem:192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2848.605906] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2848.646247] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2848.656946] Node 0 DMA32 free:26876kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2848.706335] lowmem_reserve[]: 0 0 0 0 0 [ 2848.712584] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2848.749725] lowmem_reserve[]: 0 0 0 0 0 [ 2848.755146] Node 1 Normal free:56504kB min:53504kB low:66880kB high:80256kB active_anon:3272852kB inactive_anon:24kB active_file:312kB inactive_file:348kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:28992kB pagetables:83104kB bounce:0kB free_pcp:952kB local_pcp:224kB free_cma:0kB [ 2848.803373] lowmem_reserve[]: 0 0 0 0 0 [ 2848.812161] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2848.851396] Node 0 DMA32: 2493*4kB (UME) 1425*8kB (UME) 336*16kB (UME) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26876kB [ 2848.875636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2848.919501] Node 1 Normal: 64*4kB (UE) 157*8kB (UE) 155*16kB (UME) 137*32kB (UME) 31*64kB (UE) 145*128kB (UM) 44*256kB (UM) 10*512kB (M) 4*1024kB (M) 2*2048kB (M) 0*4096kB = 53496kB [ 2848.984718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2848.999067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.013053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2849.023783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2849.036905] 1080 total pagecache pages [ 2849.042493] 0 pages in swap cache [ 2849.046021] Swap cache stats: add 0, delete 0, find 0/0 [ 2849.054768] Free swap = 0kB [ 2849.057837] Total swap = 0kB [ 2849.062971] 1965979 pages RAM [ 2849.066248] 0 pages HighMem/MovableOnly [ 2849.077926] 335855 pages reserved [ 2849.083288] 0 pages cma reserved [ 2849.086813] Out of memory: Kill process 25220 (syz-executor.3) score 1007 or sacrifice child [ 2849.109564] Killed process 25220 (syz-executor.3) total-vm:73116kB, anon-rss:16560kB, file-rss:34840kB, shmem-rss:0kB 23:10:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:34 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:34 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:35 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:35 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:10:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:35 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, 0x0, 0x0) 23:10:35 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:36 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, 0x0, 0x0) 23:10:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:36 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, 0x0, 0x0) 23:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040), 0x0) 23:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:37 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040), 0x0) 23:10:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) [ 2857.450445] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2857.471870] udevd cpuset=/ mems_allowed=0-1 [ 2857.476368] CPU: 0 PID: 8160 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2857.483396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2857.492886] Call Trace: [ 2857.495490] dump_stack+0x142/0x197 [ 2857.499237] dump_header+0x177/0x6cd [ 2857.502956] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2857.508065] ? ___ratelimit+0x55/0x537 [ 2857.511961] oom_kill_process.cold+0x10/0xadd [ 2857.516450] ? rcu_read_unlock_special+0x895/0xd40 [ 2857.521384] ? lock_downgrade+0x740/0x740 [ 2857.525539] out_of_memory+0x2ee/0x1180 [ 2857.529620] ? lock_acquire+0x16f/0x430 [ 2857.533599] ? oom_killer_disable+0x1d0/0x1d0 [ 2857.538082] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2857.543186] __alloc_pages_slowpath+0x2251/0x2930 [ 2857.548034] ? warn_alloc+0xf0/0xf0 [ 2857.551672] ? __might_sleep+0x93/0xb0 [ 2857.555575] __alloc_pages_nodemask+0x62c/0x7a0 [ 2857.560277] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2857.565300] ? ____cache_alloc_node+0x1be/0x1d0 [ 2857.569968] ? cache_grow_begin+0x335/0x400 [ 2857.574290] cache_grow_begin+0x80/0x400 [ 2857.578363] ? __cpuset_node_allowed+0xff/0x450 [ 2857.583030] fallback_alloc+0x1fd/0x2c0 [ 2857.587005] ____cache_alloc_node+0x1be/0x1d0 [ 2857.591493] kmem_cache_alloc+0x1f3/0x780 [ 2857.595726] ? task_work_run+0xf0/0x190 [ 2857.599691] getname_flags+0xcb/0x580 [ 2857.603596] user_path_at_empty+0x2f/0x50 [ 2857.607854] path_setxattr+0x89/0x140 [ 2857.611647] ? setxattr+0x350/0x350 [ 2857.615493] SyS_lsetxattr+0x38/0x50 [ 2857.619203] ? SyS_setxattr+0x50/0x50 [ 2857.623007] do_syscall_64+0x1e8/0x640 [ 2857.626901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2857.631756] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2857.636948] RIP: 0033:0x7f812dc5affa [ 2857.640651] RSP: 002b:00007ffc6a4c0958 EFLAGS: 00000202 ORIG_RAX: 00000000000000bd [ 2857.648361] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f812dc5affa [ 2857.655633] RDX: 00000000022b9e10 RSI: 00007f812e129f69 RDI: 00007ffc6a4c13b0 [ 2857.662905] RBP: 00007ffc6a4c13b0 R08: 0000000000000000 R09: 0000000000000083 [ 2857.670690] R10: 000000000000001e R11: 0000000000000202 R12: 00000000022ba340 [ 2857.677962] R13: 00000000ffffffea R14: 00007ffc6a4c0b10 R15: 00007ffc6a4c0f10 [ 2857.698054] Mem-Info: [ 2857.723222] active_anon:1261403 inactive_anon:198 isolated_anon:0 [ 2857.723222] active_file:68 inactive_file:634 isolated_file:32 [ 2857.723222] unevictable:0 dirty:2 writeback:0 unstable:0 [ 2857.723222] slab_reclaimable:18581 slab_unreclaimable:174051 [ 2857.723222] mapped:52706 shmem:301 pagetables:34072 bounce:0 [ 2857.723222] free:23072 free_pcp:52 free_cma:0 [ 2857.764325] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2857.796946] Node 1 active_anon:3265008kB inactive_anon:12kB active_file:564kB inactive_file:2204kB unevictable:0kB isolated(anon):0kB isolated(file):468kB mapped:2320kB dirty:4kB writeback:0kB shmem:236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2857.833251] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2857.865173] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2857.870545] Node 0 DMA32 free:28120kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22752kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2857.905789] lowmem_reserve[]: 0 0 0 0 0 [ 2857.910315] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2857.945254] lowmem_reserve[]: 0 0 0 0 0 [ 2857.949377] Node 1 Normal free:54168kB min:53504kB low:66880kB high:80256kB active_anon:3265108kB inactive_anon:12kB active_file:1724kB inactive_file:1824kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29344kB pagetables:83704kB bounce:0kB free_pcp:640kB local_pcp:120kB free_cma:0kB [ 2858.031101] lowmem_reserve[]: 0 0 0 0 0 [ 2858.037296] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2858.078899] Node 0 DMA32: 2516*4kB (UME) 1523*8kB (UME) 343*16kB (UME) 12*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28120kB [ 2858.099591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2858.115709] Node 1 Normal: 822*4kB (UME) 454*8kB (UMEH) 236*16kB (UMEH) 72*32kB (UMEH) 91*64kB (MEH) 160*128kB (UMH) 40*256kB (UM) 9*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 55176kB [ 2858.145774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2858.171792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2858.197517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2858.223862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2858.232917] 480 total pagecache pages [ 2858.236759] 0 pages in swap cache [ 2858.240306] Swap cache stats: add 0, delete 0, find 0/0 [ 2858.246281] Free swap = 0kB [ 2858.249297] Total swap = 0kB [ 2858.252487] 1965979 pages RAM [ 2858.255592] 0 pages HighMem/MovableOnly [ 2858.259675] 335855 pages reserved [ 2858.263214] 0 pages cma reserved [ 2858.266725] Out of memory: Kill process 10702 (syz-executor.4) score 1007 or sacrifice child [ 2858.278473] Killed process 10702 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2858.398671] oom_reaper: reaped process 10702 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:10:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040), 0x0) 23:10:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:40 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833", 0x34) 23:10:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833", 0x34) 23:10:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:41 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833", 0x34) 23:10:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 23:10:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268", 0x4e) 23:10:42 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268", 0x4e) 23:10:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 23:10:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268", 0x4e) 23:10:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:43 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 23:10:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d000000000000", 0x5b) 23:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:10:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:43 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d000000000000", 0x5b) 23:10:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:10:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d000000000000", 0x5b) 23:10:44 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:10:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/98, 0x62) 23:10:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 23:10:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 23:10:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/98, 0x62) 23:10:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 23:10:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/98, 0x62) 23:10:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:46 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) [ 2866.859716] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2866.880472] blkid cpuset=/ mems_allowed=0-1 [ 2866.885119] CPU: 1 PID: 25732 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 2866.892254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.901617] Call Trace: [ 2866.904217] dump_stack+0x142/0x197 [ 2866.907857] dump_header+0x177/0x6cd [ 2866.911636] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2866.916928] ? ___ratelimit+0x55/0x537 [ 2866.920935] oom_kill_process.cold+0x10/0xadd [ 2866.925438] ? rcu_read_unlock_special+0x895/0xd40 [ 2866.930387] ? lock_downgrade+0x740/0x740 [ 2866.934551] out_of_memory+0x2ee/0x1180 [ 2866.938670] ? lock_acquire+0x1ea/0x430 [ 2866.942866] ? oom_killer_disable+0x1d0/0x1d0 [ 2866.947561] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2866.952499] __alloc_pages_slowpath+0x2251/0x2930 [ 2866.957409] ? warn_alloc+0xf0/0xf0 [ 2866.961174] ? __might_sleep+0x93/0xb0 [ 2866.965057] __alloc_pages_nodemask+0x62c/0x7a0 [ 2866.969852] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2866.974864] ? cache_grow_begin+0x335/0x400 [ 2866.980436] cache_grow_begin+0x80/0x400 [ 2866.984528] ? __cpuset_node_allowed+0xff/0x450 [ 2866.989248] fallback_alloc+0x1fd/0x2c0 [ 2866.993230] ____cache_alloc_node+0x1be/0x1d0 [ 2866.997907] kmem_cache_alloc_trace+0x213/0x790 [ 2867.002584] ima_calc_file_hash+0x3ec/0x820 [ 2867.006980] ? ext4_xattr_get+0x13e/0x8b0 [ 2867.011135] ? ima_alloc_tfm+0x9f/0xc0 [ 2867.015036] ? ima_calc_file_hash+0x148/0x820 [ 2867.019547] ima_collect_measurement+0x3c1/0x450 [ 2867.024413] ? ima_get_action+0x80/0x80 [ 2867.028400] ? ima_get_cache_status+0x180/0x180 [ 2867.033171] process_measurement+0x7dd/0xb80 [ 2867.037595] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 2867.043662] ? dput.part.0+0x170/0x750 [ 2867.047558] ? dquot_file_open+0x60/0xa0 [ 2867.051631] ? ext4_file_open+0x2da/0x850 [ 2867.055786] ? ext4_release_file+0x2e0/0x2e0 [ 2867.060312] ? inode_has_perm.isra.0+0x1e0/0x1e0 [ 2867.065089] ? lock_downgrade+0x6dc/0x740 [ 2867.069257] ? do_raw_spin_unlock+0x174/0x260 [ 2867.073771] ? security_file_open+0x89/0x190 [ 2867.078188] ? file_ra_state_init+0xc9/0x1e0 [ 2867.082607] ? do_dentry_open+0x452/0xeb0 [ 2867.086763] ? ext4_release_file+0x2e0/0x2e0 [ 2867.091354] ima_file_check+0x30/0x40 [ 2867.095164] path_openat+0x1634/0x3db0 [ 2867.099059] ? find_held_lock+0x35/0x130 [ 2867.103147] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2867.107819] ? __alloc_fd+0x1d4/0x4a0 [ 2867.111701] do_filp_open+0x18e/0x250 [ 2867.116444] ? may_open_dev+0xe0/0xe0 [ 2867.120235] ? do_raw_spin_unlock+0x174/0x260 [ 2867.124915] ? _raw_spin_unlock+0x2d/0x50 [ 2867.129110] ? __alloc_fd+0x1d4/0x4a0 [ 2867.132926] do_sys_open+0x2c5/0x430 [ 2867.136645] ? filp_open+0x70/0x70 [ 2867.140175] ? SyS_access+0x377/0x6b0 [ 2867.144040] SyS_open+0x2d/0x40 [ 2867.147348] ? do_sys_open+0x430/0x430 [ 2867.151236] do_syscall_64+0x1e8/0x640 [ 2867.155318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2867.160342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2867.165537] RIP: 0033:0x7fa818d1f1a7 [ 2867.169228] RSP: 002b:00007ffc04d44528 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2867.176932] RAX: ffffffffffffffda RBX: 0000000000400f31 RCX: 00007fa818d1f1a7 [ 2867.184323] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007fa818d23282 [ 2867.191719] RBP: 0000000000000001 R08: 00007fa818f2a570 R09: 0000000000000000 [ 2867.199009] R10: ffffffffffffffb0 R11: 0000000000000246 R12: 00007fa818f2a090 [ 2867.206807] R13: 00007fa818f29040 R14: 0000000000000000 R15: 00007fa818f2a570 [ 2867.273753] Mem-Info: [ 2867.276367] active_anon:1258976 inactive_anon:198 isolated_anon:0 [ 2867.276367] active_file:62 inactive_file:69 isolated_file:30 [ 2867.276367] unevictable:0 dirty:0 writeback:0 unstable:0 [ 2867.276367] slab_reclaimable:17905 slab_unreclaimable:177509 [ 2867.276367] mapped:52276 shmem:315 pagetables:34278 bounce:0 [ 2867.276367] free:23058 free_pcp:84 free_cma:0 [ 2867.311348] Node 0 active_anon:1780604kB inactive_anon:780kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2867.339420] Node 1 active_anon:3255300kB inactive_anon:12kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:0kB dirty:0kB writeback:0kB shmem:292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 2867.367491] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2867.396224] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2867.401674] Node 0 DMA32 free:28644kB min:36384kB low:45480kB high:54576kB active_anon:1776192kB inactive_anon:780kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22880kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2867.431747] lowmem_reserve[]: 0 0 0 0 0 [ 2867.435890] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2867.461412] lowmem_reserve[]: 0 0 0 0 0 [ 2867.465397] Node 1 Normal free:52852kB min:53504kB low:66880kB high:80256kB active_anon:3255372kB inactive_anon:12kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29472kB pagetables:84528kB bounce:0kB free_pcp:692kB local_pcp:632kB free_cma:0kB [ 2867.494849] lowmem_reserve[]: 0 0 0 0 0 [ 2867.498860] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2867.516754] Node 0 DMA32: 2663*4kB (UME) 1527*8kB (UME) 345*16kB (UME) 8*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28644kB [ 2867.535066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2867.546026] Node 1 Normal: 511*4kB (UME) 517*8kB (UMEH) 224*16kB (UMEH) 206*32kB (UMEH) 125*64kB (UMEH) 165*128kB (UMEH) 32*256kB (MH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53668kB [ 2867.562909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2867.571857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2867.580692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2867.589527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2867.598259] 356 total pagecache pages [ 2867.602127] 0 pages in swap cache [ 2867.605575] Swap cache stats: add 0, delete 0, find 0/0 [ 2867.610993] Free swap = 0kB [ 2867.614135] Total swap = 0kB [ 2867.617135] 1965979 pages RAM [ 2867.620294] 0 pages HighMem/MovableOnly [ 2867.624264] 335855 pages reserved [ 2867.627803] 0 pages cma reserved [ 2867.632602] Out of memory: Kill process 10752 (syz-executor.4) score 1007 or sacrifice child [ 2867.641296] Killed process 10752 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB 23:10:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/101, 0x65) 23:10:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/101, 0x65) 23:10:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:52 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/101, 0x65) 23:10:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/103, 0x67) 23:10:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2873.127244] modprobe invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2873.165716] modprobe cpuset=/ mems_allowed=0-1 [ 2873.176836] CPU: 1 PID: 25838 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 2873.184238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2873.193604] Call Trace: [ 2873.196207] dump_stack+0x142/0x197 [ 2873.199856] dump_header+0x177/0x6cd [ 2873.203668] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2873.208930] ? ___ratelimit+0x55/0x537 [ 2873.212832] oom_kill_process.cold+0x10/0xadd [ 2873.217335] ? rcu_read_unlock_special+0x895/0xd40 [ 2873.222374] ? lock_downgrade+0x740/0x740 [ 2873.226599] out_of_memory+0x2ee/0x1180 [ 2873.230615] ? lock_acquire+0x16f/0x430 [ 2873.234603] ? oom_killer_disable+0x1d0/0x1d0 [ 2873.239302] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2873.244252] __alloc_pages_slowpath+0x2251/0x2930 [ 2873.249132] ? warn_alloc+0xf0/0xf0 [ 2873.252977] ? __might_sleep+0x93/0xb0 [ 2873.256884] __alloc_pages_nodemask+0x62c/0x7a0 [ 2873.261683] ? __anon_vma_prepare+0x184/0x390 [ 2873.266305] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2873.271333] ? get_task_policy.part.0+0x85/0xa0 [ 2873.276016] alloc_pages_vma+0xc9/0x4c0 [ 2873.280001] __handle_mm_fault+0xd12/0x33d0 [ 2873.284389] ? copy_page_range+0x1de0/0x1de0 [ 2873.288806] ? find_held_lock+0x35/0x130 [ 2873.293021] ? handle_mm_fault+0x1b6/0x7c0 [ 2873.297279] handle_mm_fault+0x293/0x7c0 [ 2873.301348] __do_page_fault+0x4c1/0xb80 [ 2873.305426] ? vmalloc_fault+0xe30/0xe30 [ 2873.309506] do_page_fault+0x71/0x511 [ 2873.313321] page_fault+0x25/0x50 [ 2873.316877] RIP: 0010:__clear_user+0x46/0x70 [ 2873.321633] RSP: 0018:ffff8881809f7bf8 EFLAGS: 00010206 [ 2873.327004] RAX: 0000000000000174 RBX: 0000000000000ba0 RCX: 0000000000000174 [ 2873.334716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b1b73a1460 [ 2873.342107] RBP: ffff8881809f7c08 R08: 0000000000000008 R09: 0000000000000000 [ 2873.349531] R10: 0000000000000000 R11: ffff8881fbfb2640 R12: 000055b1b73a1460 [ 2873.356933] R13: 000055b1b73a1460 R14: 000055b1b73a2000 R15: 1ffff1103013efa5 [ 2873.364270] ? __clear_user+0x23/0x70 [ 2873.368095] clear_user+0x79/0xa0 [ 2873.371569] load_elf_binary+0x2fe6/0x4d60 [ 2873.376025] ? notesize.isra.0+0x80/0x80 [ 2873.380098] ? lock_downgrade+0x740/0x740 [ 2873.384269] search_binary_handler+0x149/0x6f0 [ 2873.388954] do_execveat_common.isra.0+0x1000/0x1dd0 [ 2873.394083] ? prepare_bprm_creds+0x120/0x120 [ 2873.398599] ? commit_creds+0x6b2/0xef0 [ 2873.402594] do_execve+0x31/0x40 [ 2873.406119] call_usermodehelper_exec_async+0x292/0x4c0 [ 2873.411601] ? umh_complete+0x90/0x90 [ 2873.415410] ret_from_fork+0x24/0x30 [ 2873.422968] Mem-Info: [ 2873.425685] active_anon:1258183 inactive_anon:196 isolated_anon:0 [ 2873.425685] active_file:301 inactive_file:294 isolated_file:60 [ 2873.425685] unevictable:0 dirty:47 writeback:5 unstable:0 [ 2873.425685] slab_reclaimable:17639 slab_unreclaimable:178598 [ 2873.425685] mapped:52682 shmem:320 pagetables:34406 bounce:0 [ 2873.425685] free:22053 free_pcp:154 free_cma:0 [ 2873.461242] Node 0 active_anon:1781796kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:4kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2873.490917] Node 1 active_anon:3250936kB inactive_anon:4kB active_file:1084kB inactive_file:1052kB unevictable:0kB isolated(anon):0kB isolated(file):200kB mapped:1824kB dirty:188kB writeback:16kB shmem:312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2873.519686] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.562545] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2873.570181] Node 0 DMA32 free:27416kB min:36384kB low:45480kB high:54576kB active_anon:1777384kB inactive_anon:780kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:22880kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.601706] lowmem_reserve[]: 0 0 0 0 0 [ 2873.605952] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.635522] lowmem_reserve[]: 0 0 0 0 0 [ 2873.643557] Node 1 Normal free:51416kB min:53504kB low:66880kB high:80256kB active_anon:3250936kB inactive_anon:4kB active_file:1576kB inactive_file:1308kB unevictable:0kB writepending:304kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29664kB pagetables:85040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2873.714907] lowmem_reserve[]: 0 0 0 0 0 [ 2873.723984] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2873.745114] Node 0 DMA32: 2671*4kB (UME) 1387*8kB (UME) 344*16kB (UME) 7*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27508kB [ 2873.792492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2873.828302] Node 1 Normal: 971*4kB (UME) 645*8kB (UMEH) 188*16kB (UMEH) 74*32kB (UMEH) 15*64kB (EH) 166*128kB (MEH) 43*256kB (UMH) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 52756kB [ 2873.858315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2873.885497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2873.895686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2873.914789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2873.928745] 581 total pagecache pages [ 2873.933850] 0 pages in swap cache [ 2873.937704] Swap cache stats: add 0, delete 0, find 0/0 [ 2873.948253] Free swap = 0kB [ 2873.952550] Total swap = 0kB [ 2873.956011] 1965979 pages RAM [ 2873.959477] 0 pages HighMem/MovableOnly [ 2873.968302] 335855 pages reserved [ 2873.985624] 0 pages cma reserved [ 2873.989316] Out of memory: Kill process 10807 (syz-executor.4) score 1007 or sacrifice child [ 2873.999059] Killed process 10807 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2874.102996] oom_reaper: reaped process 10807 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:10:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100), 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/103, 0x67) 23:10:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/103, 0x67) 23:10:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:10:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:57 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100), 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:10:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:58 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:10:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100), 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:10:59 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:10:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:10:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:10:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:11:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:11:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:11:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:11:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:01 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 23:11:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:01 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:11:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:11:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:11:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) 23:11:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) 23:11:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') 23:11:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{0x0}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:11:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') 23:11:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 23:11:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 23:11:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:10 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 2893.912498] NOHZ: local_softirq_pending 08 [ 2893.919010] NOHZ: local_softirq_pending 08 23:11:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 23:11:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 23:11:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 23:11:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:11:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 23:11:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:11:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a0", 0x6f) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)='h', 0x1}], 0x1}}], 0x1, 0x0) 23:11:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:11:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a0", 0x6f) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 23:11:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:11:23 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 23:11:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a0", 0x6f) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:11:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 23:11:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28ae", 0x82) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) 23:11:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:11:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 23:11:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28ae", 0x82) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:25 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x0) 23:11:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28ae", 0x82) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:26 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:26 executing program 4: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x680) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f00000000c0)={0x0, 0x4, 0x626, [], &(0x7f0000000040)=0x1}) 23:11:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x0) 23:11:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c", 0x8b) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:26 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2904.895793] audit: type=1804 audit(1580339486.653:793): pid=26639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1842/bus" dev="sda1" ino=17366 res=1 23:11:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c", 0x8b) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x0) [ 2905.690646] audit: type=1804 audit(1580339487.453:794): pid=26639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1842/bus" dev="sda1" ino=17366 res=1 23:11:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:28 executing program 4: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x800000000010) 23:11:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c", 0x8b) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:11:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:11:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139e", 0x90) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2907.588106] audit: type=1804 audit(1580339489.343:795): pid=26726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1843/bus" dev="sda1" ino=17603 res=1 23:11:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:11:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139e", 0x90) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2908.444418] audit: type=1804 audit(1580339490.203:796): pid=26741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1843/bus" dev="sda1" ino=17603 res=1 [ 2908.492105] audit: type=1804 audit(1580339490.243:797): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1843/bus" dev="sda1" ino=17603 res=1 23:11:30 executing program 4: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x800000000010) [ 2909.054809] udevd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=-1000 [ 2909.087979] udevd cpuset=/ mems_allowed=0-1 [ 2909.140850] CPU: 1 PID: 7718 Comm: udevd Not tainted 4.14.169-syzkaller #0 [ 2909.148013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2909.157736] Call Trace: [ 2909.160334] dump_stack+0x142/0x197 [ 2909.163973] dump_header+0x177/0x6cd [ 2909.167699] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2909.172801] ? ___ratelimit+0x55/0x537 [ 2909.176830] oom_kill_process.cold+0x10/0xadd [ 2909.181385] ? rcu_read_unlock_special+0x895/0xd40 [ 2909.186325] ? lock_downgrade+0x740/0x740 [ 2909.190484] out_of_memory+0x2ee/0x1180 [ 2909.194475] ? lock_acquire+0x16f/0x430 [ 2909.198593] ? oom_killer_disable+0x1d0/0x1d0 [ 2909.203095] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2909.208043] __alloc_pages_slowpath+0x2251/0x2930 [ 2909.212908] ? warn_alloc+0xf0/0xf0 [ 2909.216679] ? __might_sleep+0x93/0xb0 [ 2909.220665] __alloc_pages_nodemask+0x62c/0x7a0 [ 2909.225344] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2909.230462] ? rcu_read_lock_sched_held+0x110/0x130 [ 2909.235493] copy_process.part.0+0x26a/0x6a70 [ 2909.239995] ? save_trace+0x290/0x290 [ 2909.243903] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2909.248822] ? save_trace+0x290/0x290 [ 2909.252770] ? __fd_install+0x1fb/0x5f0 [ 2909.256779] ? find_held_lock+0x35/0x130 [ 2909.260833] ? __fd_install+0x1fb/0x5f0 [ 2909.264808] ? __lock_is_held+0xb6/0x140 [ 2909.268872] ? __cleanup_sighand+0x50/0x50 [ 2909.273125] ? __fd_install+0x236/0x5f0 [ 2909.277181] _do_fork+0x19e/0xce0 [ 2909.280813] ? fork_idle+0x280/0x280 [ 2909.284524] ? fd_install+0x4d/0x60 [ 2909.288153] ? SyS_pipe2+0x7b/0x120 [ 2909.291798] ? do_pipe_flags+0x120/0x120 [ 2909.295861] SyS_clone+0x37/0x50 [ 2909.299242] ? sys_vfork+0x30/0x30 [ 2909.302775] do_syscall_64+0x1e8/0x640 [ 2909.306660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2909.311505] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2909.316702] RIP: 0033:0x7f812dc2bf46 [ 2909.320420] RSP: 002b:00007ffc6a4ba4f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2909.328132] RAX: ffffffffffffffda RBX: 00007ffc6a4ba4f0 RCX: 00007f812dc2bf46 [ 2909.335503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2909.343210] RBP: 00007ffc6a4ba550 R08: 0000000000001e26 R09: 0000000000001e26 [ 2909.351099] R10: 00007f812e548a70 R11: 0000000000000246 R12: 0000000000000000 [ 2909.358394] R13: 00007ffc6a4ba510 R14: 0000000000000005 R15: 0000000000000005 [ 2909.669250] Mem-Info: [ 2909.671933] active_anon:1258324 inactive_anon:200 isolated_anon:0 [ 2909.671933] active_file:151 inactive_file:137 isolated_file:16 [ 2909.671933] unevictable:0 dirty:20 writeback:0 unstable:0 [ 2909.671933] slab_reclaimable:17362 slab_unreclaimable:179111 [ 2909.671933] mapped:52508 shmem:348 pagetables:34575 bounce:0 [ 2909.671933] free:22199 free_pcp:19 free_cma:0 [ 2909.708655] Node 0 active_anon:1779696kB inactive_anon:780kB active_file:36kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209012kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2909.751184] Node 1 active_anon:3253600kB inactive_anon:20kB active_file:568kB inactive_file:280kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:820kB dirty:76kB writeback:0kB shmem:424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2909.789727] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2909.816663] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2909.822338] Node 0 DMA32 free:27756kB min:36384kB low:45480kB high:54576kB active_anon:1775284kB inactive_anon:780kB active_file:36kB inactive_file:80kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23008kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2909.852767] lowmem_reserve[]: 0 0 0 0 0 [ 2909.856946] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2909.894025] lowmem_reserve[]: 0 0 0 0 0 [ 2909.898085] Node 1 Normal free:50752kB min:53504kB low:66880kB high:80256kB active_anon:3253600kB inactive_anon:20kB active_file:740kB inactive_file:1048kB unevictable:0kB writepending:276kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29600kB pagetables:85716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2909.930845] lowmem_reserve[]: 0 0 0 0 0 [ 2909.934965] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2909.951553] Node 0 DMA32: 2795*4kB (UME) 1360*8kB (UME) 351*16kB (UME) 6*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27868kB [ 2909.965472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2909.977055] Node 1 Normal: 2568*4kB (UME) 646*8kB (UMEH) 322*16kB (UMEH) 83*32kB (UMEH) 26*64kB (UMEH) 125*128kB (MEH) 41*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51408kB [ 2909.994617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2910.003920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2910.019065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2910.028088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2910.036764] 484 total pagecache pages [ 2910.045516] 0 pages in swap cache [ 2910.049008] Swap cache stats: add 0, delete 0, find 0/0 [ 2910.061794] Free swap = 0kB [ 2910.064920] Total swap = 0kB [ 2910.067958] 1965979 pages RAM [ 2910.074809] 0 pages HighMem/MovableOnly [ 2910.078887] 335855 pages reserved [ 2910.082452] 0 pages cma reserved [ 2910.085822] Out of memory: Kill process 26746 (syz-executor.1) score 1007 or sacrifice child [ 2910.107370] Killed process 26759 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34844kB, shmem-rss:0kB [ 2910.289416] oom_reaper: reaped process 26759 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2910.360956] audit: type=1804 audit(1580339492.113:798): pid=26762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1844/bus" dev="sda1" ino=17411 res=1 23:11:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139e", 0x90) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:33 executing program 4: r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x800000000010) 23:11:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) 23:11:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2911.863081] audit: type=1804 audit(1580339493.603:799): pid=26779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir659397931/syzkaller.yFnZsL/1845/bus" dev="sda1" ino=17554 res=1 23:11:33 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 23:11:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30", 0x92) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) 23:11:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2912.640307] syz-executor.0 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2912.712540] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2912.732880] CPU: 1 PID: 7452 Comm: syz-executor.0 Not tainted 4.14.169-syzkaller #0 [ 2912.740718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2912.750082] Call Trace: [ 2912.752688] dump_stack+0x142/0x197 [ 2912.756420] dump_header+0x177/0x6cd [ 2912.760344] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2912.765569] ? ___ratelimit+0x55/0x537 [ 2912.769473] oom_kill_process.cold+0x10/0xadd [ 2912.773976] ? rcu_read_unlock_special+0x895/0xd40 [ 2912.778916] ? lock_downgrade+0x740/0x740 [ 2912.783164] out_of_memory+0x2ee/0x1180 [ 2912.787143] ? lock_acquire+0x16f/0x430 [ 2912.791272] ? oom_killer_disable+0x1d0/0x1d0 [ 2912.795778] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2912.800729] __alloc_pages_slowpath+0x2251/0x2930 [ 2912.805591] ? kasan_kmalloc+0xce/0xf0 [ 2912.809517] ? warn_alloc+0xf0/0xf0 [ 2912.813174] ? __might_sleep+0x93/0xb0 [ 2912.817071] __alloc_pages_nodemask+0x62c/0x7a0 [ 2912.821994] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2912.827011] ? rcu_read_lock_sched_held+0x110/0x130 [ 2912.832204] ? kasan_unpoison_shadow+0x35/0x50 [ 2912.836782] alloc_pages_current+0xec/0x1e0 [ 2912.841107] __vmalloc_node_range+0x3e9/0x6a0 [ 2912.845596] vzalloc+0x46/0x50 [ 2912.848796] ? alloc_counters.isra.0+0x48/0x90 [ 2912.853387] alloc_counters.isra.0+0x48/0x90 [ 2912.857809] do_ip6t_get_ctl+0x439/0x820 [ 2912.861873] ? save_trace+0x290/0x290 [ 2912.865664] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2912.870611] ? alloc_counters.isra.0+0x90/0x90 [ 2912.875200] ? find_held_lock+0x35/0x130 [ 2912.879255] ? wait_for_completion+0x420/0x420 [ 2912.883863] ? mutex_unlock+0xd/0x10 [ 2912.887564] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 2912.892843] nf_getsockopt+0x6a/0xc0 [ 2912.896566] ipv6_getsockopt+0x182/0x1f0 [ 2912.900619] ? do_ipv6_getsockopt.isra.0+0x2040/0x2040 [ 2912.906363] tcp_getsockopt+0x84/0xd0 [ 2912.910164] sock_common_getsockopt+0x94/0xd0 [ 2912.914668] SyS_getsockopt+0x126/0x1e0 [ 2912.918653] ? SyS_setsockopt+0x210/0x210 [ 2912.922810] ? do_syscall_64+0x53/0x640 [ 2912.926906] ? SyS_setsockopt+0x210/0x210 [ 2912.931065] do_syscall_64+0x1e8/0x640 [ 2912.934981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2912.939950] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2912.945189] RIP: 0033:0x45de5a [ 2912.948378] RSP: 002b:00007ffd9850f808 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 2912.956203] RAX: ffffffffffffffda RBX: 00007ffd9850f830 RCX: 000000000045de5a [ 2912.963475] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 2912.970876] RBP: 000000000071bcc0 R08: 00007ffd9850f82c R09: 0000000000004000 [ 2912.978154] R10: 00007ffd9850f930 R11: 0000000000000212 R12: 0000000000000003 [ 2912.985536] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000719b00 [ 2913.069479] Mem-Info: [ 2913.086110] active_anon:1258425 inactive_anon:196 isolated_anon:0 [ 2913.086110] active_file:595 inactive_file:567 isolated_file:63 [ 2913.086110] unevictable:0 dirty:84 writeback:0 unstable:0 [ 2913.086110] slab_reclaimable:17497 slab_unreclaimable:177803 [ 2913.086110] mapped:53364 shmem:350 pagetables:34663 bounce:0 [ 2913.086110] free:22058 free_pcp:41 free_cma:0 [ 2913.188369] Node 0 active_anon:1779064kB inactive_anon:780kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2913.229485] Node 1 active_anon:3254656kB inactive_anon:8kB active_file:2004kB inactive_file:1972kB unevictable:0kB isolated(anon):0kB isolated(file):216kB mapped:3868kB dirty:300kB writeback:12kB shmem:432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2913.360205] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2913.387115] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2913.405500] Node 0 DMA32 free:27524kB min:36384kB low:45480kB high:54576kB active_anon:1774652kB inactive_anon:780kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23008kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2913.445454] lowmem_reserve[]: 0 0 0 0 0 [ 2913.457465] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2913.514470] lowmem_reserve[]: 0 0 0 0 0 [ 2913.544988] Node 1 Normal free:53248kB min:53504kB low:66880kB high:80256kB active_anon:3254656kB inactive_anon:8kB active_file:932kB inactive_file:1176kB unevictable:0kB writepending:312kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29728kB pagetables:86104kB bounce:0kB free_pcp:496kB local_pcp:0kB free_cma:0kB [ 2913.624733] lowmem_reserve[]: 0 0 0 0 0 [ 2913.640138] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2913.678803] Node 0 DMA32: 2940*4kB (UME) 1251*8kB (UME) 352*16kB (UME) 4*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27528kB [ 2913.693310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2913.705908] Node 1 Normal: 2229*4kB (UME) 827*8kB (UME) 724*16kB (UME) 145*32kB (UMEH) 29*64kB (UMEH) 84*128kB (MEH) 42*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55116kB [ 2913.724129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2913.733584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2913.742605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2913.752228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2913.761345] 494 total pagecache pages [ 2913.765375] 0 pages in swap cache [ 2913.769057] Swap cache stats: add 0, delete 0, find 0/0 [ 2913.774752] Free swap = 0kB [ 2913.778030] Total swap = 0kB [ 2913.784885] 1965979 pages RAM [ 2913.788388] 0 pages HighMem/MovableOnly [ 2913.792541] 335855 pages reserved [ 2913.796142] 0 pages cma reserved [ 2913.799623] Out of memory: Kill process 26776 (syz-executor.1) score 1007 or sacrifice child [ 2913.808755] Killed process 26803 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34848kB, shmem-rss:0kB [ 2913.916706] oom_reaper: reaped process 26803 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB 23:11:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) 23:11:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) 23:11:37 executing program 4: 23:11:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30", 0x92) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:41 executing program 4: 23:11:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:11:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:42 executing program 4: 23:11:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:42 executing program 4: 23:11:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) 23:11:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30", 0x92) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2922.314927] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2922.356408] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 2922.370080] CPU: 1 PID: 7451 Comm: syz-executor.5 Not tainted 4.14.169-syzkaller #0 [ 2922.378198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2922.387566] Call Trace: [ 2922.390169] dump_stack+0x142/0x197 [ 2922.393936] dump_header+0x177/0x6cd [ 2922.397672] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2922.402783] ? ___ratelimit+0x55/0x537 [ 2922.406784] oom_kill_process.cold+0x10/0xadd [ 2922.411280] ? rcu_read_unlock_special+0x639/0xd40 [ 2922.416223] ? lock_downgrade+0x740/0x740 [ 2922.420376] out_of_memory+0x2ee/0x1180 [ 2922.424398] ? lock_acquire+0x16f/0x430 [ 2922.428405] ? oom_killer_disable+0x1d0/0x1d0 [ 2922.433104] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2922.438037] __alloc_pages_slowpath+0x2251/0x2930 [ 2922.443077] ? warn_alloc+0xf0/0xf0 [ 2922.446772] ? __might_sleep+0x93/0xb0 [ 2922.450651] __alloc_pages_nodemask+0x62c/0x7a0 [ 2922.455325] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2922.460334] ? ____cache_alloc_node+0x1be/0x1d0 [ 2922.465123] ? cache_grow_begin+0x335/0x400 [ 2922.469437] cache_grow_begin+0x80/0x400 [ 2922.473497] ? __cpuset_node_allowed+0xff/0x450 [ 2922.478167] fallback_alloc+0x1fd/0x2c0 [ 2922.482159] ____cache_alloc_node+0x1be/0x1d0 [ 2922.486787] kmem_cache_alloc+0x1f3/0x780 [ 2922.490944] getname_flags+0xcb/0x580 [ 2922.494864] user_path_mountpoint_at+0x29/0x50 [ 2922.499460] SyS_umount+0x10c/0x380 [ 2922.503170] ? __do_page_fault+0x358/0xb80 [ 2922.507406] ? __detach_mounts+0x2f0/0x2f0 [ 2922.511638] ? do_syscall_64+0x53/0x640 [ 2922.516135] ? __detach_mounts+0x2f0/0x2f0 [ 2922.520377] do_syscall_64+0x1e8/0x640 [ 2922.524265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2922.529293] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2922.534475] RIP: 0033:0x45dd77 [ 2922.537669] RSP: 002b:00007fffca382428 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 2922.545636] RAX: ffffffffffffffda RBX: 00000000002c947d RCX: 000000000045dd77 [ 2922.552899] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007fffca3824d0 [ 2922.560298] RBP: 0000000000001974 R08: 0000000000000000 R09: 000000000000000d [ 2922.567608] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fffca383560 [ 2922.575413] R13: 0000000002147940 R14: 0000000000000000 R15: 00007fffca383560 [ 2922.718047] Mem-Info: [ 2922.721131] active_anon:1260539 inactive_anon:201 isolated_anon:0 [ 2922.721131] active_file:103 inactive_file:136 isolated_file:53 [ 2922.721131] unevictable:0 dirty:16 writeback:4 unstable:0 [ 2922.721131] slab_reclaimable:17858 slab_unreclaimable:175731 [ 2922.721131] mapped:52455 shmem:355 pagetables:34701 bounce:0 [ 2922.721131] free:22605 free_pcp:0 free_cma:0 [ 2922.780902] Node 0 active_anon:1779084kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2922.817932] Node 1 active_anon:3263072kB inactive_anon:24kB active_file:300kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:616kB dirty:64kB writeback:16kB shmem:452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2922.853889] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.886717] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2922.892108] Node 0 DMA32 free:27268kB min:36384kB low:45480kB high:54576kB active_anon:1774672kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23008kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.925648] lowmem_reserve[]: 0 0 0 0 0 [ 2922.929784] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2922.963188] lowmem_reserve[]: 0 0 0 0 0 [ 2922.967545] Node 1 Normal free:53268kB min:53504kB low:66880kB high:80256kB active_anon:3262604kB inactive_anon:24kB active_file:472kB inactive_file:28kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29792kB pagetables:86220kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 2923.006032] lowmem_reserve[]: 0 0 0 0 0 [ 2923.012907] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2923.035548] Node 0 DMA32: 2935*4kB (UME) 1251*8kB (UME) 341*16kB (UME) 2*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27268kB [ 2923.054962] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2923.066719] Node 1 Normal: 840*4kB (UME) 727*8kB (UMEH) 806*16kB (UMEH) 294*32kB (UMEH) 42*64kB (UME) 71*128kB (MEH) 42*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54008kB [ 2923.088126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2923.097880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2923.113799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2923.137528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2923.147989] 459 total pagecache pages [ 2923.155181] 0 pages in swap cache [ 2923.166593] Swap cache stats: add 0, delete 0, find 0/0 [ 2923.172108] Free swap = 0kB [ 2923.175223] Total swap = 0kB [ 2923.178329] 1965979 pages RAM [ 2923.181505] 0 pages HighMem/MovableOnly [ 2923.185478] 335855 pages reserved [ 2923.189359] 0 pages cma reserved [ 2923.200129] Out of memory: Kill process 26843 (syz-executor.1) score 1007 or sacrifice child [ 2923.208899] Killed process 26843 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34840kB, shmem-rss:0kB [ 2923.287755] oom_reaper: reaped process 26843 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:11:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) 23:11:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac", 0x93) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)}], 0x1}}], 0x1, 0x0) 23:11:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac", 0x93) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:46 executing program 4: 23:11:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac", 0x93) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:11:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)}], 0x1}}], 0x1, 0x0) 23:11:46 executing program 4: 23:11:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:11:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)}], 0x1}}], 0x1, 0x0) 23:11:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:47 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000280)={0x1, 0x0, {0x2, 0x2, 0x7, 0x3, 0x9}, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0x71, 0x1, {{0x1, 0x4}}}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c080094927b8b3ad4a9e266c4fd0ad66b32b5acfdeb602ef1e148daa520324ce8a82acef260f1848d3018f63731070140c95ae37d1f7bc81a4ea807fd7a2def9959e7de5d38e8d9c3e7f179e501f2cb260a25e36880984663d87c827823d716f340994c4c1e4155c8ef59be681feacea7f39d18b8c17b18e10e409bd996efed5f5bccfbca8c1d9bbc9ee3ad024fb2b14cdd08c4a1c879e8c626c00dcda3e418d46586d2ff20bca621fb8804c77130971e76fe23f95c1bea09ceae0cd90d87dec0b15c6631a074bd8a6db2a45c1ade7d3cdbec1a458aa298acba01e4d24f202d854251fa1da17aa01ce8d266", @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf2502000000050001000000000005000100000000002300070073797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a7330000014000200ff020000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4040881) write$UHID_INPUT(r2, &(0x7f0000001cc0), 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) execve(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='/dev/dri/card#\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='/dev/ion\x00']) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x9a9, 0x68a202) mount(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='udf\x00', 0x1000000, &(0x7f0000000740)='^(mime_type!-\\em1eth1]bdevbdevvmnet1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 23:11:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:11:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:11:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x68, &(0x7f0000000100), 0x4) 23:11:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:11:48 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:11:48 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], 0x10) bind$can_raw(r0, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 23:11:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:11:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:51 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000280)={0x1, 0x0, {0x2, 0x2, 0x7, 0x3, 0x9}, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0x71, 0x1, {{0x1, 0x4}}}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c080094927b8b3ad4a9e266c4fd0ad66b32b5acfdeb602ef1e148daa520324ce8a82acef260f1848d3018f63731070140c95ae37d1f7bc81a4ea807fd7a2def9959e7de5d38e8d9c3e7f179e501f2cb260a25e36880984663d87c827823d716f340994c4c1e4155c8ef59be681feacea7f39d18b8c17b18e10e409bd996efed5f5bccfbca8c1d9bbc9ee3ad024fb2b14cdd08c4a1c879e8c626c00dcda3e418d46586d2ff20bca621fb8804c77130971e76fe23f95c1bea09ceae0cd90d87dec0b15c6631a074bd8a6db2a45c1ade7d3cdbec1a458aa298acba01e4d24f202d854251fa1da17aa01ce8d266", @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf2502000000050001000000000005000100000000002300070073797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a7330000014000200ff020000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4040881) write$UHID_INPUT(r2, &(0x7f0000001cc0), 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) execve(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='/dev/dri/card#\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='/dev/ion\x00']) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x9a9, 0x68a202) mount(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='udf\x00', 0x1000000, &(0x7f0000000740)='^(mime_type!-\\em1eth1]bdevbdevvmnet1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 23:11:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:11:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2930.666981] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2930.790944] kdevtmpfs cpuset=/ mems_allowed=0-1 [ 2930.833393] CPU: 0 PID: 20 Comm: kdevtmpfs Not tainted 4.14.169-syzkaller #0 [ 2930.840850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2930.850386] Call Trace: [ 2930.852987] dump_stack+0x142/0x197 [ 2930.856630] dump_header+0x177/0x6cd [ 2930.860528] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2930.865817] ? ___ratelimit+0x55/0x537 [ 2930.869822] oom_kill_process.cold+0x10/0xadd [ 2930.874328] ? rcu_read_unlock_special+0x895/0xd40 [ 2930.879419] ? lock_downgrade+0x740/0x740 [ 2930.883585] out_of_memory+0x2ee/0x1180 [ 2930.887568] ? lock_acquire+0x16f/0x430 [ 2930.891556] ? oom_killer_disable+0x1d0/0x1d0 [ 2930.896219] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2930.901346] __alloc_pages_slowpath+0x2251/0x2930 [ 2930.906213] ? warn_alloc+0xf0/0xf0 [ 2930.909861] ? __might_sleep+0x93/0xb0 [ 2930.913869] __alloc_pages_nodemask+0x62c/0x7a0 [ 2930.918616] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2930.923748] ? ____cache_alloc_node+0x1be/0x1d0 [ 2930.928427] ? cache_grow_begin+0x335/0x400 [ 2930.932773] cache_grow_begin+0x80/0x400 [ 2930.936844] ? __cpuset_node_allowed+0xff/0x450 [ 2930.941527] fallback_alloc+0x1fd/0x2c0 [ 2930.945518] ____cache_alloc_node+0x1be/0x1d0 [ 2930.950052] kmem_cache_alloc+0x1f3/0x780 [ 2930.954213] ? find_held_lock+0x35/0x130 [ 2930.958289] ? finish_task_switch+0x178/0x650 [ 2930.962833] getname_kernel+0x53/0x350 [ 2930.966838] kern_path_create+0x25/0x40 [ 2930.970831] handle_create+0xb8/0x520 [ 2930.974645] ? dev_mount+0x40/0x40 [ 2930.978193] ? devtmpfsd+0x1f9/0x470 [ 2930.982047] ? lock_downgrade+0x740/0x740 [ 2930.986209] ? do_raw_spin_unlock+0x174/0x260 [ 2930.990890] devtmpfsd+0x217/0x470 [ 2930.994579] ? handle_create+0x520/0x520 [ 2930.998657] kthread+0x319/0x430 [ 2931.002179] ? handle_create+0x520/0x520 [ 2931.006250] ? kthread_create_on_node+0xd0/0xd0 [ 2931.011181] ret_from_fork+0x24/0x30 23:11:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:11:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:52 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:11:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2931.637532] Mem-Info: [ 2931.641286] active_anon:1257433 inactive_anon:202 isolated_anon:0 [ 2931.641286] active_file:861 inactive_file:671 isolated_file:64 [ 2931.641286] unevictable:0 dirty:26 writeback:0 unstable:0 [ 2931.641286] slab_reclaimable:17807 slab_unreclaimable:176477 [ 2931.641286] mapped:53553 shmem:367 pagetables:34705 bounce:0 [ 2931.641286] free:23339 free_pcp:324 free_cma:0 [ 2931.680381] Node 0 active_anon:1780352kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2931.711759] Node 1 active_anon:3249380kB inactive_anon:28kB active_file:3836kB inactive_file:2664kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:5108kB dirty:100kB writeback:0kB shmem:500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2931.742503] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2931.781441] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2931.796908] Node 0 DMA32 free:27136kB min:36384kB low:45480kB high:54576kB active_anon:1775940kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23040kB pagetables:52584kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 2931.829815] lowmem_reserve[]: 0 0 0 0 0 [ 2931.901410] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2931.988574] lowmem_reserve[]: 0 0 0 0 0 [ 2931.999305] Node 1 Normal free:53876kB min:53504kB low:66880kB high:80256kB active_anon:3250592kB inactive_anon:28kB active_file:3968kB inactive_file:3392kB unevictable:0kB writepending:400kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29888kB pagetables:86236kB bounce:0kB free_pcp:760kB local_pcp:300kB free_cma:0kB [ 2932.068764] lowmem_reserve[]: 0 0 0 0 0 [ 2932.086305] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2932.128172] Node 0 DMA32: 2717*4kB (UE) 1344*8kB (UME) 344*16kB (UME) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27156kB [ 2932.171299] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2932.258133] Node 1 Normal: 939*4kB (UME) 221*8kB (UMEH) 500*16kB (UMEH) 385*32kB (UMEH) 93*64kB (UMEH) 100*128kB (UME) 42*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55348kB [ 2932.340096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2932.404154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2932.430191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2932.439086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2932.460124] 1752 total pagecache pages [ 2932.464224] 0 pages in swap cache [ 2932.467699] Swap cache stats: add 0, delete 0, find 0/0 [ 2932.490086] Free swap = 0kB [ 2932.493165] Total swap = 0kB [ 2932.496334] 1965979 pages RAM [ 2932.499438] 0 pages HighMem/MovableOnly [ 2932.580107] 335855 pages reserved [ 2932.583605] 0 pages cma reserved [ 2932.586990] Out of memory: Kill process 10853 (syz-executor.4) score 1007 or sacrifice child [ 2932.630110] Killed process 10853 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2932.957529] oom_reaper: reaped process 10853 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:11:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:11:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x0) 23:11:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:11:56 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000280)={0x1, 0x0, {0x2, 0x2, 0x7, 0x3, 0x9}, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0x71, 0x1, {{0x1, 0x4}}}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c080094927b8b3ad4a9e266c4fd0ad66b32b5acfdeb602ef1e148daa520324ce8a82acef260f1848d3018f63731070140c95ae37d1f7bc81a4ea807fd7a2def9959e7de5d38e8d9c3e7f179e501f2cb260a25e36880984663d87c827823d716f340994c4c1e4155c8ef59be681feacea7f39d18b8c17b18e10e409bd996efed5f5bccfbca8c1d9bbc9ee3ad024fb2b14cdd08c4a1c879e8c626c00dcda3e418d46586d2ff20bca621fb8804c77130971e76fe23f95c1bea09ceae0cd90d87dec0b15c6631a074bd8a6db2a45c1ade7d3cdbec1a458aa298acba01e4d24f202d854251fa1da17aa01ce8d266", @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf2502000000050001000000000005000100000000002300070073797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a7330000014000200ff020000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4040881) write$UHID_INPUT(r2, &(0x7f0000001cc0), 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) execve(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='/dev/dri/card#\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='/dev/ion\x00']) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x9a9, 0x68a202) mount(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='udf\x00', 0x1000000, &(0x7f0000000740)='^(mime_type!-\\em1eth1]bdevbdevvmnet1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 23:11:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x0) 23:11:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x0) 23:11:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:11:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:11:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 23:11:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) [ 2937.468869] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=-1000 [ 2937.503689] blkid cpuset=/ mems_allowed=0-1 [ 2937.508493] CPU: 0 PID: 27170 Comm: blkid Not tainted 4.14.169-syzkaller #0 [ 2937.515732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2937.525338] Call Trace: [ 2937.527941] dump_stack+0x142/0x197 [ 2937.531583] dump_header+0x177/0x6cd [ 2937.535456] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2937.540568] ? ___ratelimit+0x55/0x537 [ 2937.544469] oom_kill_process.cold+0x10/0xadd [ 2937.548969] ? oom_unkillable_task+0x294/0x390 [ 2937.553568] ? lock_downgrade+0x740/0x740 [ 2937.557730] out_of_memory+0x2ee/0x1180 [ 2937.561716] ? lock_acquire+0x16f/0x430 [ 2937.565681] ? oom_killer_disable+0x1d0/0x1d0 [ 2937.570175] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2937.576060] __alloc_pages_slowpath+0x2251/0x2930 [ 2937.581094] ? warn_alloc+0xf0/0xf0 [ 2937.584723] ? __might_sleep+0x93/0xb0 [ 2937.588604] __alloc_pages_nodemask+0x62c/0x7a0 [ 2937.593264] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2937.598454] ? cache_grow_begin+0x335/0x400 [ 2937.602787] cache_grow_begin+0x80/0x400 [ 2937.606888] ? __cpuset_node_allowed+0xff/0x450 [ 2937.611586] fallback_alloc+0x1fd/0x2c0 [ 2937.615749] ____cache_alloc_node+0x1be/0x1d0 [ 2937.620496] kmem_cache_alloc+0x1f3/0x780 [ 2937.624829] ima_d_path+0x52/0x1de [ 2937.628792] process_measurement+0x96a/0xb80 [ 2937.633288] ? ima_rdwr_violation_check+0x3f0/0x3f0 [ 2937.638305] ? dput.part.0+0x170/0x750 [ 2937.642215] ? dquot_file_open+0x60/0xa0 [ 2937.646305] ? ext4_file_open+0x2da/0x850 [ 2937.650448] ? ext4_release_file+0x2e0/0x2e0 [ 2937.654934] ? inode_has_perm.isra.0+0x1e0/0x1e0 [ 2937.659724] ? lock_downgrade+0x6dc/0x740 [ 2937.663868] ? do_raw_spin_unlock+0x174/0x260 [ 2937.668367] ? security_file_open+0x89/0x190 [ 2937.672889] ? file_ra_state_init+0xc9/0x1e0 [ 2937.677292] ? do_dentry_open+0x452/0xeb0 [ 2937.681430] ? ext4_release_file+0x2e0/0x2e0 [ 2937.685890] ima_file_check+0x30/0x40 [ 2937.689696] path_openat+0x1634/0x3db0 [ 2937.693613] ? find_held_lock+0x35/0x130 [ 2937.697680] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2937.702438] ? __alloc_fd+0x1d4/0x4a0 [ 2937.706257] do_filp_open+0x18e/0x250 [ 2937.710063] ? may_open_dev+0xe0/0xe0 [ 2937.714006] ? _raw_spin_unlock+0x2d/0x50 [ 2937.718207] ? __alloc_fd+0x1d4/0x4a0 [ 2937.722129] do_sys_open+0x2c5/0x430 [ 2937.725839] ? filp_open+0x70/0x70 [ 2937.729563] ? SyS_access+0x377/0x6b0 [ 2937.733382] SyS_open+0x2d/0x40 [ 2937.736660] ? do_sys_open+0x430/0x430 [ 2937.740554] do_syscall_64+0x1e8/0x640 [ 2937.744438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2937.749304] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2937.754590] RIP: 0033:0x7ff50cf1d1a7 [ 2937.758284] RSP: 002b:00007fff4b9dca48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2937.766006] RAX: ffffffffffffffda RBX: 00007ff50d1281c8 RCX: 00007ff50cf1d1a7 [ 2937.773391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff50d1230ee [ 2937.780775] RBP: 00007fff4b9dcac0 R08: 00007fff4b9dcebf R09: 0000000000000000 [ 2937.788177] R10: 00007ff50d1230ee R11: 0000000000000246 R12: 0000000000000008 [ 2937.795444] R13: 00007ff50d127040 R14: 0000000000000000 R15: 00007fff4b9dcebf [ 2937.827612] Mem-Info: [ 2937.842722] active_anon:1259477 inactive_anon:201 isolated_anon:0 [ 2937.842722] active_file:16 inactive_file:115 isolated_file:25 [ 2937.842722] unevictable:2 dirty:0 writeback:0 unstable:0 [ 2937.842722] slab_reclaimable:17935 slab_unreclaimable:175975 [ 2937.842722] mapped:52301 shmem:372 pagetables:34916 bounce:0 [ 2937.842722] free:23106 free_pcp:57 free_cma:0 [ 2937.886988] Node 0 active_anon:1780516kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2937.923900] Node 1 active_anon:3257392kB inactive_anon:24kB active_file:64kB inactive_file:120kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2937.964389] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2937.998249] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2938.003621] Node 0 DMA32 free:27400kB min:36384kB low:45480kB high:54576kB active_anon:1776104kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23040kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2938.039689] lowmem_reserve[]: 0 0 0 0 0 [ 2938.049802] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2938.119644] lowmem_reserve[]: 0 0 0 0 0 [ 2938.184991] Node 1 Normal free:54868kB min:53504kB low:66880kB high:80256kB active_anon:3257392kB inactive_anon:24kB active_file:52kB inactive_file:56kB unevictable:8kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30016kB pagetables:87080kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 2938.228124] lowmem_reserve[]: 0 0 0 0 0 [ 2938.238717] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2938.257014] Node 0 DMA32: 2756*4kB (UE) 1337*8kB (UME) 351*16kB (UME) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27400kB [ 2938.270884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2938.282437] Node 1 Normal: 349*4kB (UME) 217*8kB (UME) 351*16kB (UME) 328*32kB (UME) 76*64kB (UE) 82*128kB (UME) 47*256kB (UM) 4*512kB (M) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 54828kB [ 2938.299501] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2938.308608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2938.317289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2938.328799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2938.337646] 438 total pagecache pages [ 2938.350893] 0 pages in swap cache [ 2938.354537] Swap cache stats: add 0, delete 0, find 0/0 [ 2938.365510] Free swap = 0kB [ 2938.368565] Total swap = 0kB [ 2938.371875] 1965979 pages RAM [ 2938.375082] 0 pages HighMem/MovableOnly [ 2938.379170] 335855 pages reserved [ 2938.382816] 0 pages cma reserved [ 2938.386397] Out of memory: Kill process 10909 (syz-executor.4) score 1007 or sacrifice child [ 2938.395279] Killed process 10909 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2938.458208] oom_reaper: reaped process 10909 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2939.448666] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2939.559425] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 2939.587217] CPU: 1 PID: 27195 Comm: syz-executor.3 Not tainted 4.14.169-syzkaller #0 [ 2939.595717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2939.605203] Call Trace: [ 2939.607955] dump_stack+0x142/0x197 [ 2939.611721] dump_header+0x177/0x6cd [ 2939.615645] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2939.620856] ? ___ratelimit+0x55/0x537 [ 2939.624902] oom_kill_process.cold+0x10/0xadd [ 2939.629628] ? oom_unkillable_task+0x294/0x390 [ 2939.634251] ? lock_downgrade+0x740/0x740 [ 2939.638426] out_of_memory+0x2ee/0x1180 [ 2939.642493] ? lock_acquire+0x16f/0x430 [ 2939.646484] ? oom_killer_disable+0x1d0/0x1d0 [ 2939.651110] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2939.656054] __alloc_pages_slowpath+0x2251/0x2930 [ 2939.661062] ? warn_alloc+0xf0/0xf0 [ 2939.664711] ? __might_sleep+0x93/0xb0 [ 2939.668625] __alloc_pages_nodemask+0x62c/0x7a0 [ 2939.673414] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2939.678728] ? ____cache_alloc_node+0x1be/0x1d0 [ 2939.683411] ? cache_grow_begin+0x335/0x400 [ 2939.687748] cache_grow_begin+0x80/0x400 [ 2939.691822] ? __cpuset_node_allowed+0xff/0x450 [ 2939.696543] fallback_alloc+0x1fd/0x2c0 [ 2939.700546] ____cache_alloc_node+0x1be/0x1d0 [ 2939.705077] kmem_cache_alloc+0x1f3/0x780 [ 2939.709929] ? __do_page_fault+0x4e9/0xb80 [ 2939.714176] getname_flags+0xcb/0x580 [ 2939.718098] ? lock_downgrade+0x740/0x740 [ 2939.722255] user_path_at_empty+0x2f/0x50 [ 2939.726414] SyS_chdir+0x86/0x190 [ 2939.729880] ? SyS_access+0x6b0/0x6b0 [ 2939.733796] ? do_syscall_64+0x53/0x640 [ 2939.737916] ? SyS_access+0x6b0/0x6b0 [ 2939.741768] do_syscall_64+0x1e8/0x640 [ 2939.745693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2939.750639] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2939.756069] RIP: 0033:0x45a937 [ 2939.759261] RSP: 002b:00007fff76486418 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 2939.766984] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a937 [ 2939.774269] RDX: 0000000000000001 RSI: 000000000071de90 RDI: 00007fff76486460 [ 2939.781649] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000001264940 [ 2939.788933] R10: 0000000001264c10 R11: 0000000000000246 R12: 0000000000000000 [ 2939.796320] R13: 00007fff76486450 R14: 0000000000000000 R15: 00007fff76486460 [ 2939.916166] Mem-Info: [ 2939.923485] active_anon:1255293 inactive_anon:203 isolated_anon:0 [ 2939.923485] active_file:46 inactive_file:196 isolated_file:32 [ 2939.923485] unevictable:827 dirty:12 writeback:0 unstable:0 [ 2939.923485] slab_reclaimable:17906 slab_unreclaimable:175985 [ 2939.923485] mapped:52511 shmem:372 pagetables:34866 bounce:0 [ 2939.923485] free:26423 free_pcp:296 free_cma:0 [ 2939.965248] Node 0 active_anon:1780516kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2939.992945] Node 1 active_anon:3240556kB inactive_anon:32kB active_file:184kB inactive_file:704kB unevictable:3308kB isolated(anon):0kB isolated(file):128kB mapped:740kB dirty:44kB writeback:0kB shmem:520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2940.021987] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2940.048964] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2940.054449] Node 0 DMA32 free:27304kB min:36384kB low:45480kB high:54576kB active_anon:1776104kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23040kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2940.113269] lowmem_reserve[]: 0 0 0 0 0 [ 2940.117419] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2940.150432] lowmem_reserve[]: 0 0 0 0 0 [ 2940.155260] Node 1 Normal free:69384kB min:53504kB low:66880kB high:80256kB active_anon:3240504kB inactive_anon:32kB active_file:116kB inactive_file:196kB unevictable:3396kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:29760kB pagetables:86572kB bounce:0kB free_pcp:644kB local_pcp:184kB free_cma:0kB [ 2940.192103] lowmem_reserve[]: 0 0 0 0 0 [ 2940.196239] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2940.217697] Node 0 DMA32: 2758*4kB (UE) 1328*8kB (UME) 351*16kB (UME) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27336kB [ 2940.240361] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2940.252112] Node 1 Normal: 629*4kB (UME) 291*8kB (UME) 303*16kB (UME) 408*32kB (UME) 139*64kB (UME) 99*128kB (UME) 54*256kB (UM) 6*512kB (M) 4*1024kB (M) 2*2048kB (M) 0*4096kB = 69404kB [ 2940.280391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2940.289696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2940.299421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2940.309476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2940.322278] 1927 total pagecache pages [ 2940.331436] 0 pages in swap cache [ 2940.334941] Swap cache stats: add 0, delete 0, find 0/0 [ 2940.345737] Free swap = 0kB [ 2940.349249] Total swap = 0kB [ 2940.353066] 1965979 pages RAM [ 2940.356697] 0 pages HighMem/MovableOnly [ 2940.367101] 335855 pages reserved 23:12:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) [ 2940.370740] 0 pages cma reserved [ 2940.374303] Out of memory: Kill process 10962 (syz-executor.4) score 1007 or sacrifice child [ 2940.389959] Killed process 10962 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB 23:12:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)='%', 0xe}, {&(0x7f0000000140)="02", 0x20000041}], 0x2}], 0x1, 0x0) 23:12:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:12:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:12:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:12:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:12:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:04 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:12:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:12:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:12:05 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:05 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) 23:12:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x0) 23:12:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:12:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x0) 23:12:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:06 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x0) 23:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) [ 2945.842093] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2945.894716] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2945.919450] CPU: 1 PID: 7455 Comm: syz-executor.4 Not tainted 4.14.169-syzkaller #0 [ 2945.927293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2945.936654] Call Trace: [ 2945.939341] dump_stack+0x142/0x197 [ 2945.942977] dump_header+0x177/0x6cd [ 2945.946715] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2945.951943] ? ___ratelimit+0x55/0x537 [ 2945.955835] oom_kill_process.cold+0x10/0xadd [ 2945.960329] ? rcu_read_unlock_special+0x895/0xd40 [ 2945.965261] ? lock_downgrade+0x740/0x740 [ 2945.969419] out_of_memory+0x2ee/0x1180 [ 2945.973421] ? lock_acquire+0x16f/0x430 [ 2945.977498] ? oom_killer_disable+0x1d0/0x1d0 [ 2945.982114] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2945.987064] __alloc_pages_slowpath+0x2251/0x2930 [ 2945.991911] ? warn_alloc+0xf0/0xf0 [ 2945.995534] ? __might_sleep+0x93/0xb0 [ 2945.999556] __alloc_pages_nodemask+0x62c/0x7a0 [ 2946.004225] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2946.009246] ? ____cache_alloc_node+0x1be/0x1d0 [ 2946.013920] ? cache_grow_begin+0x335/0x400 [ 2946.018277] cache_grow_begin+0x80/0x400 [ 2946.022351] ? __cpuset_node_allowed+0xff/0x450 [ 2946.027041] fallback_alloc+0x1fd/0x2c0 [ 2946.031017] ____cache_alloc_node+0x1be/0x1d0 [ 2946.035596] kmem_cache_alloc_node+0xe3/0x780 [ 2946.040217] ? __lock_acquire+0x5f7/0x4620 [ 2946.044469] copy_process.part.0+0x17d5/0x6a70 [ 2946.049063] ? trace_hardirqs_on+0x10/0x10 [ 2946.053453] ? save_trace+0x290/0x290 [ 2946.057264] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 2946.062194] ? __might_fault+0x110/0x1d0 [ 2946.066250] ? find_held_lock+0x35/0x130 [ 2946.070413] ? __cleanup_sighand+0x50/0x50 [ 2946.074638] ? lock_downgrade+0x740/0x740 [ 2946.078782] _do_fork+0x19e/0xce0 [ 2946.082252] ? fork_idle+0x280/0x280 [ 2946.085970] ? put_timespec64+0xb4/0x100 [ 2946.090450] ? nsecs_to_jiffies+0x30/0x30 [ 2946.094595] ? SyS_clock_gettime+0xf8/0x180 [ 2946.098926] SyS_clone+0x37/0x50 [ 2946.102414] ? sys_vfork+0x30/0x30 [ 2946.106050] do_syscall_64+0x1e8/0x640 [ 2946.110153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2946.115066] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2946.120254] RIP: 0033:0x45991a [ 2946.123453] RSP: 002b:00007ffcef6f2b40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2946.131209] RAX: ffffffffffffffda RBX: 00007ffcef6f2b40 RCX: 000000000045991a [ 2946.138483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2946.145753] RBP: 00007ffcef6f2b80 R08: 0000000000000001 R09: 0000000001fa6940 [ 2946.153028] R10: 0000000001fa6c10 R11: 0000000000000246 R12: 0000000000000001 [ 2946.161167] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcef6f2bd0 [ 2946.308079] Mem-Info: [ 2946.312998] active_anon:1257228 inactive_anon:201 isolated_anon:0 [ 2946.312998] active_file:362 inactive_file:606 isolated_file:90 [ 2946.312998] unevictable:0 dirty:48 writeback:0 unstable:0 [ 2946.312998] slab_reclaimable:17964 slab_unreclaimable:175420 [ 2946.312998] mapped:53000 shmem:377 pagetables:34913 bounce:0 [ 2946.312998] free:25193 free_pcp:119 free_cma:0 [ 2946.347013] Node 0 active_anon:1780356kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2946.469847] Node 1 active_anon:3248556kB inactive_anon:24kB active_file:1340kB inactive_file:3412kB unevictable:0kB isolated(anon):0kB isolated(file):324kB mapped:3496kB dirty:92kB writeback:0kB shmem:540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2946.616572] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.692097] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2946.707565] Node 0 DMA32 free:27276kB min:36384kB low:45480kB high:54576kB active_anon:1775944kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23040kB pagetables:52584kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2946.783361] lowmem_reserve[]: 0 0 0 0 0 [ 2946.844180] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.947067] lowmem_reserve[]: 0 0 0 0 0 [ 2946.956819] Node 1 Normal free:61316kB min:53504kB low:66880kB high:80256kB active_anon:3248556kB inactive_anon:24kB active_file:1100kB inactive_file:2120kB unevictable:0kB writepending:236kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30208kB pagetables:87068kB bounce:0kB free_pcp:708kB local_pcp:480kB free_cma:0kB [ 2946.992032] lowmem_reserve[]: 0 0 0 0 0 [ 2947.005048] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2947.058344] Node 0 DMA32: 2772*4kB (UME) 1320*8kB (UME) 351*16kB (UME) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27328kB [ 2947.086106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2947.097620] Node 1 Normal: 89*4kB (UME) 342*8kB (UMEH) 315*16kB (UMEH) 307*32kB (UME) 78*64kB (UE) 51*128kB (UME) 61*256kB (UM) 10*512kB (M) 5*1024kB (M) 2*2048kB (M) 0*4096kB = 59428kB [ 2947.116721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2947.127359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2947.139450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2947.149141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2947.158322] 1550 total pagecache pages [ 2947.185642] 0 pages in swap cache [ 2947.198702] Swap cache stats: add 0, delete 0, find 0/0 [ 2947.217094] Free swap = 0kB [ 2947.226110] Total swap = 0kB [ 2947.236315] 1965979 pages RAM [ 2947.244374] 0 pages HighMem/MovableOnly [ 2947.256826] 335855 pages reserved [ 2947.302475] 0 pages cma reserved [ 2947.313089] Out of memory: Kill process 27402 (syz-executor.1) score 1007 or sacrifice child [ 2947.356584] Killed process 27407 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:35208kB, shmem-rss:0kB [ 2947.515890] oom_reaper: reaped process 27407 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB 23:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 23:12:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 2951.864105] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2951.910550] modprobe cpuset=/ mems_allowed=0-1 [ 2951.922246] CPU: 1 PID: 27471 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 2951.929698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2951.939151] Call Trace: [ 2951.941739] dump_stack+0x142/0x197 [ 2951.945499] dump_header+0x177/0x6cd [ 2951.949460] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2951.954652] ? ___ratelimit+0x55/0x537 [ 2951.958596] oom_kill_process.cold+0x10/0xadd [ 2951.963090] ? rcu_read_unlock_special+0x639/0xd40 [ 2951.968185] ? lock_downgrade+0x740/0x740 [ 2951.972341] out_of_memory+0x2ee/0x1180 [ 2951.976320] ? lock_acquire+0x16f/0x430 [ 2951.980322] ? oom_killer_disable+0x1d0/0x1d0 [ 2951.984906] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2951.989838] __alloc_pages_slowpath+0x2251/0x2930 [ 2951.994702] ? warn_alloc+0xf0/0xf0 [ 2951.998339] ? __might_sleep+0x93/0xb0 [ 2952.002248] __alloc_pages_nodemask+0x62c/0x7a0 [ 2952.007036] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2952.012049] ? ____cache_alloc_node+0x1be/0x1d0 [ 2952.016722] ? cache_grow_begin+0x335/0x400 [ 2952.021265] cache_grow_begin+0x80/0x400 [ 2952.025342] ? __cpuset_node_allowed+0xff/0x450 [ 2952.030017] fallback_alloc+0x1fd/0x2c0 [ 2952.034000] ____cache_alloc_node+0x1be/0x1d0 [ 2952.038578] kmem_cache_alloc+0x1f3/0x780 [ 2952.042749] getname_flags+0xcb/0x580 [ 2952.046745] user_path_at_empty+0x2f/0x50 [ 2952.050899] SyS_access+0x222/0x6b0 [ 2952.054525] ? __do_page_fault+0x358/0xb80 [ 2952.058766] ? SyS_faccessat+0x6b0/0x6b0 [ 2952.062947] ? do_syscall_64+0x53/0x640 [ 2952.066931] ? SyS_faccessat+0x6b0/0x6b0 [ 2952.070989] do_syscall_64+0x1e8/0x640 [ 2952.074878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2952.079737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2952.084977] RIP: 0033:0x7f1197dfe267 [ 2952.088705] RSP: 002b:00007ffcb6272728 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 2952.096434] RAX: ffffffffffffffda RBX: 00005605c0d4bbf2 RCX: 00007f1197dfe267 [ 2952.103732] RDX: 000000000000001d RSI: 0000000000000000 RDI: 00007f1197e022e6 [ 2952.111095] RBP: 00007f1198001000 R08: 00007f1198009570 R09: 0000000000000000 [ 2952.118633] R10: 000000006ffffeff R11: 0000000000000246 R12: 00007f11980091c8 [ 2952.125902] R13: 00007f1198001718 R14: 00000000000033ef R15: 00007f1198009570 [ 2952.185825] Mem-Info: [ 2952.188499] active_anon:1260588 inactive_anon:201 isolated_anon:0 [ 2952.188499] active_file:161 inactive_file:194 isolated_file:0 [ 2952.188499] unevictable:0 dirty:13 writeback:0 unstable:0 [ 2952.188499] slab_reclaimable:18449 slab_unreclaimable:173865 [ 2952.188499] mapped:52584 shmem:378 pagetables:35048 bounce:0 [ 2952.188499] free:22959 free_pcp:249 free_cma:0 [ 2952.223522] Node 0 active_anon:1780356kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2952.265904] Node 1 active_anon:3261996kB inactive_anon:24kB active_file:644kB inactive_file:604kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1332kB dirty:52kB writeback:0kB shmem:544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2952.309865] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2952.339691] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2952.350428] Node 0 DMA32 free:27300kB min:36384kB low:45480kB high:54576kB active_anon:1775944kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23040kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2952.385943] lowmem_reserve[]: 0 0 0 0 0 [ 2952.391406] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2952.422920] lowmem_reserve[]: 0 0 0 0 0 [ 2952.427564] Node 1 Normal free:56164kB min:53504kB low:66880kB high:80256kB active_anon:3261996kB inactive_anon:24kB active_file:444kB inactive_file:776kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30240kB pagetables:87608kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2952.458022] lowmem_reserve[]: 0 0 0 0 0 [ 2952.462646] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2952.478934] Node 0 DMA32: 2775*4kB (UME) 1315*8kB (UME) 351*16kB (UME) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27300kB [ 2952.494037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2952.507328] Node 1 Normal: 531*4kB (UME) 331*8kB (UME) 575*16kB (UME) 341*32kB (UME) 93*64kB (UME) 11*128kB (UE) 38*256kB (UM) 10*512kB (M) 5*1024kB (M) 2*2048kB (M) 0*4096kB = 56308kB [ 2952.525478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2952.534770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2952.543501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2952.552538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2952.561300] 453 total pagecache pages [ 2952.565909] 0 pages in swap cache [ 2952.569360] Swap cache stats: add 0, delete 0, find 0/0 [ 2952.576349] Free swap = 0kB [ 2952.579380] Total swap = 0kB [ 2952.582477] 1965979 pages RAM [ 2952.585640] 0 pages HighMem/MovableOnly [ 2952.589616] 335855 pages reserved [ 2952.595805] 0 pages cma reserved [ 2952.599205] Out of memory: Kill process 27428 (syz-executor.1) score 1007 or sacrifice child [ 2952.607933] Killed process 27437 (syz-executor.1) total-vm:72984kB, anon-rss:16560kB, file-rss:34840kB, shmem-rss:0kB [ 2952.680486] oom_reaper: reaped process 27437 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:12:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:12:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) 23:12:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 23:12:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) 23:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$9p(r2, &(0x7f0000000040)="0600000000000000c9b90003020000002a1f5a09ab8383afd2de1a3487fe067fde18fa64249e1d2bdd9514480a16f3733d18f833b3aacfe8ce31cf04f7b0bdd78687423a6b51fb27b2da7ac41268b9f9218a3c9e3d00"/104, 0x95) 23:12:18 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') 23:12:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:19 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1500}], 0x1) ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:12:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') 23:12:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r2}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 23:12:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') 23:12:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) [ 2963.671378] NOHZ: local_softirq_pending 08 23:12:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:32 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2974.098269] kworker/u4:5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2974.170108] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 2974.175240] CPU: 1 PID: 12707 Comm: kworker/u4:5 Not tainted 4.14.169-syzkaller #0 [ 2974.182953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2974.192326] Workqueue: events_unbound call_usermodehelper_exec_work [ 2974.198742] Call Trace: [ 2974.201391] dump_stack+0x142/0x197 [ 2974.205038] dump_header+0x177/0x6cd [ 2974.208770] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2974.213883] ? ___ratelimit+0x55/0x537 [ 2974.217790] oom_kill_process.cold+0x10/0xadd [ 2974.222404] ? oom_unkillable_task+0x294/0x390 [ 2974.227008] ? lock_downgrade+0x740/0x740 [ 2974.231226] out_of_memory+0x2ee/0x1180 [ 2974.235220] ? lock_acquire+0x16f/0x430 [ 2974.239213] ? oom_killer_disable+0x1d0/0x1d0 [ 2974.243724] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2974.248667] __alloc_pages_slowpath+0x2251/0x2930 [ 2974.253601] ? warn_alloc+0xf0/0xf0 [ 2974.257247] ? __might_sleep+0x93/0xb0 [ 2974.261147] __alloc_pages_nodemask+0x62c/0x7a0 [ 2974.265826] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2974.270852] ? cache_grow_begin+0x335/0x400 [ 2974.275198] cache_grow_begin+0x80/0x400 [ 2974.279403] ? __cpuset_node_allowed+0xff/0x450 [ 2974.284079] fallback_alloc+0x1fd/0x2c0 [ 2974.288213] ____cache_alloc_node+0x1be/0x1d0 [ 2974.292756] kmem_cache_alloc_node+0xe3/0x780 [ 2974.297361] copy_process.part.0+0x17d5/0x6a70 [ 2974.301958] ? __lock_acquire+0x5f7/0x4620 [ 2974.306358] ? __lock_acquire+0x5f7/0x4620 [ 2974.310694] ? save_trace+0x290/0x290 [ 2974.314663] ? trace_hardirqs_on+0x10/0x10 [ 2974.318915] ? trace_hardirqs_on+0x10/0x10 [ 2974.323158] ? umh_complete+0x90/0x90 [ 2974.326972] ? __cleanup_sighand+0x50/0x50 [ 2974.331217] ? kernel_sigaction+0x147/0x210 [ 2974.335563] ? find_held_lock+0x35/0x130 [ 2974.339629] _do_fork+0x19e/0xce0 [ 2974.343261] ? umh_complete+0x90/0x90 [ 2974.347164] ? fork_idle+0x280/0x280 [ 2974.350897] ? trace_hardirqs_on_caller+0x400/0x590 [ 2974.355963] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2974.360468] ? kernel_sigaction+0x147/0x210 [ 2974.364796] ? recalc_sigpending+0xa0/0xa0 [ 2974.369762] ? umh_complete+0x90/0x90 [ 2974.373569] kernel_thread+0x34/0x40 [ 2974.377297] call_usermodehelper_exec_work+0xa4/0x220 [ 2974.382498] ? call_usermodehelper_exec_async+0x4c0/0x4c0 [ 2974.388249] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 2974.393711] process_one_work+0x863/0x1600 [ 2974.397985] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 2974.403022] worker_thread+0x5d9/0x1050 [ 2974.407018] kthread+0x319/0x430 [ 2974.410488] ? process_one_work+0x1600/0x1600 [ 2974.415208] ? kthread_create_on_node+0xd0/0xd0 [ 2974.419887] ret_from_fork+0x24/0x30 [ 2974.428073] Mem-Info: [ 2974.442144] active_anon:1258949 inactive_anon:201 isolated_anon:0 [ 2974.442144] active_file:90 inactive_file:104 isolated_file:30 [ 2974.442144] unevictable:0 dirty:5 writeback:0 unstable:0 [ 2974.442144] slab_reclaimable:18522 slab_unreclaimable:174834 [ 2974.442144] mapped:52415 shmem:394 pagetables:35168 bounce:0 [ 2974.442144] free:23910 free_pcp:6 free_cma:0 [ 2974.483165] Node 0 active_anon:1780380kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 856064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2974.515336] Node 1 active_anon:3255416kB inactive_anon:24kB active_file:256kB inactive_file:308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:556kB dirty:20kB writeback:0kB shmem:608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2974.579055] Node 0 DMA free:10388kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2974.614323] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2974.621418] Node 0 DMA32 free:27212kB min:36384kB low:45480kB high:54576kB active_anon:1775968kB inactive_anon:780kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2634396kB mlocked:0kB kernel_stack:23040kB pagetables:52584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2974.658845] lowmem_reserve[]: 0 0 0 0 0 [ 2974.663755] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2974.689569] lowmem_reserve[]: 0 0 0 0 0 [ 2974.694503] Node 1 Normal free:58488kB min:53504kB low:66880kB high:80256kB active_anon:3255416kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30208kB pagetables:88088kB bounce:0kB free_pcp:488kB local_pcp:188kB free_cma:0kB [ 2974.724617] lowmem_reserve[]: 0 0 0 0 0 [ 2974.729282] Node 0 DMA: 23*4kB (UME) 31*8kB (UE) 22*16kB (UE) 9*32kB (UE) 3*64kB (M) 2*128kB (UE) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10388kB [ 2974.753811] Node 0 DMA32: 2743*4kB (UME) 1326*8kB (UME) 348*16kB (UME) 2*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27212kB [ 2974.772190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2974.783827] Node 1 Normal: 377*4kB (UME) 312*8kB (UME) 380*16kB (UME) 354*32kB (UME) 83*64kB (UME) 25*128kB (UME) 53*256kB (UM) 10*512kB (M) 5*1024kB (M) 2*2048kB (M) 0*4096kB = 57828kB [ 2974.801387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2974.811814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2974.822796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2974.832347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2974.841446] 684 total pagecache pages [ 2974.845264] 0 pages in swap cache [ 2974.849395] Swap cache stats: add 0, delete 0, find 0/0 [ 2974.855017] Free swap = 0kB [ 2974.858234] Total swap = 0kB [ 2974.861492] 1965979 pages RAM [ 2974.864601] 0 pages HighMem/MovableOnly [ 2974.868862] 335855 pages reserved [ 2974.872641] 0 pages cma reserved [ 2974.876045] Out of memory: Kill process 11019 (syz-executor.4) score 1007 or sacrifice child [ 2974.884962] Killed process 11019 (syz-executor.4) total-vm:72984kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB [ 2974.978925] oom_reaper: reaped process 11019 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 23:12:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000f0000000b000100666c6f776572000024000200200054801c000180050043000000000006000100000000000500020000000000"], 0x54}}, 0x0) 23:12:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000680)) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000680)) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 23:12:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000680)) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 23:12:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 23:12:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:12:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 23:12:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 23:12:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:12:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 23:12:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 23:12:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:12:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) 23:12:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:12:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 23:12:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:43 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 23:12:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 23:12:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0), 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) 23:12:45 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 23:12:45 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 23:12:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32], 0x2}}, 0x0) 23:12:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b", 0x4a) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3, 0x0, 0x0, 0x10000}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) mount$9p_rdma(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x42400, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@access_any='access=any'}], [{@euid_lt={'euid<'}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<'}}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) 23:12:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32], 0x2}}, 0x0) 23:12:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:46 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 23:12:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 23:12:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32], 0x2}}, 0x0) 23:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2986.014883] kasan: CONFIG_KASAN_INLINE enabled [ 2986.034610] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2986.071496] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2986.077879] Modules linked in: [ 2986.081149] CPU: 1 PID: 28142 Comm: modprobe Not tainted 4.14.169-syzkaller #0 [ 2986.088502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2986.097946] task: ffff888177c46080 task.stack: ffff88818be80000 [ 2986.104392] RIP: 0010:path_openat+0x20b/0x3db0 [ 2986.109098] RSP: 0018:ffff88818be87b28 EFLAGS: 00010247 [ 2986.114469] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0001020304050608 [ 2986.121741] RDX: 0000000000000000 RSI: 1ffff110317d0f56 RDI: 0000000000000004 [ 2986.129062] RBP: ffff88818be87c80 R08: ffff888177c46080 R09: 0000000000000001 [ 2986.136453] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88818be87cc0 [ 2986.143726] R13: ffff88818be87cc0 R14: ffff888091d04000 R15: 0000000000000000 [ 2986.151005] FS: 0000000000000000(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 2986.159239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2986.165249] CR2: 00007f953bec6000 CR3: 000000020e7a9000 CR4: 00000000001406e0 [ 2986.172524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2986.179926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2986.187202] Call Trace: [ 2986.189798] ? find_held_lock+0x35/0x130 [ 2986.193862] ? save_trace+0x290/0x290 [ 2986.197897] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 2986.202575] ? save_trace+0x290/0x290 [ 2986.206388] ? __alloc_fd+0x1d4/0x4a0 [ 2986.210195] do_filp_open+0x18e/0x250 [ 2986.214741] ? may_open_dev+0xe0/0xe0 [ 2986.218563] ? do_raw_spin_unlock+0x174/0x260 [ 2986.223056] ? _raw_spin_unlock+0x2d/0x50 [ 2986.227309] ? __alloc_fd+0x1d4/0x4a0 [ 2986.231217] do_sys_open+0x2c5/0x430 [ 2986.234939] ? filp_open+0x70/0x70 [ 2986.238493] SyS_open+0x2d/0x40 [ 2986.241776] ? do_sys_open+0x430/0x430 [ 2986.245672] do_syscall_64+0x1e8/0x640 [ 2986.249575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2986.254424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2986.259612] RIP: 0033:0x7f852cc701a7 [ 2986.263320] RSP: 002b:00007ffd9b192c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2986.271031] RAX: ffffffffffffffda RBX: 0000562a4d90e5c1 RCX: 00007f852cc701a7 [ 2986.278323] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f852cc74282 [ 2986.285719] RBP: 0000000000000001 R08: 00007f852ce7b570 R09: 0000000000000000 [ 2986.293099] R10: ffffffffffffffb0 R11: 0000000000000246 R12: 00007f852ce7b090 [ 2986.300367] R13: 00007f852ce7a040 R14: 0000000000000000 R15: 00007f852ce7b570 [ 2986.307778] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 03 30 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5e 58 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 2986.327114] RIP: path_openat+0x20b/0x3db0 RSP: ffff88818be87b28 23:12:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 23:12:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) 23:12:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) dup(0xffffffffffffffff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) [ 2986.476164] ---[ end trace a76fd7e23e61fd33 ]--- [ 2986.493921] Kernel panic - not syncing: Fatal exception [ 2986.501050] Kernel Offset: disabled [ 2986.504692] Rebooting in 86400 seconds..