0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000600000008000300", @ANYRES32, @ANYBLOB="97a2eada9598c6482aaec5babe5d9e03f32fffa04fbc2b7ad3e28b3ce62d4fcd013c9eae"], 0x1c}}, 0x0) 21:46:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @userptr, 0xff00}) 21:46:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000000600000008000300", @ANYRES32, @ANYBLOB="97a2eada9598c6482aaec5babe5d9e03f32fffa04fbc2b7ad3e28b3ce62d4fcd013c9eae"], 0x1c}}, 0x0) 21:46:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @userptr, 0xff00}) 21:46:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:46:02 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @userptr, 0xff00}) 21:46:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 21:46:03 executing program 3: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) 21:46:03 executing program 2: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 832.765808] kauditd_printk_skb: 11 callbacks suppressed [ 832.765815] audit: type=1800 audit(1588196763.081:46651): pid=12745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16707 res=0 [ 832.803152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.821126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.829020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.846397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.855929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.864802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.882731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.911366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.927379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.942429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="838dc3bcb562b3276f21ea83ae0e695fb3fa06669dd1476fc1943cca9dca"], 0x0, 0x1e, 0x0, 0x400000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:46:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:05 executing program 3: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) 21:46:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 21:46:05 executing program 2: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:05 executing program 3: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) [ 835.549897] audit: type=1800 audit(1588196765.861:46652): pid=12780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16914 res=0 21:46:05 executing program 3: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) 21:46:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 21:46:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 835.728735] audit: type=1800 audit(1588196766.042:46653): pid=12795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16435 res=0 21:46:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="838dc3bcb562b3276f21ea83ae0e695fb3fa06669dd1476fc1943cca9dca"], 0x0, 0x1e, 0x0, 0x400000}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 21:46:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 21:46:08 executing program 2: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 838.601695] audit: type=1800 audit(1588196768.922:46654): pid=12819 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=17070 res=0 [ 838.636484] net_ratelimit: 51 callbacks suppressed [ 838.636490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 838.700227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 838.758201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.771180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.782524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 838.807280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.845171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 838.906612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) [ 838.969702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.002653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:46:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:11 executing program 2: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:11 executing program 4: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:12 executing program 5: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:12 executing program 3: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="e63400001700000000808d858d8e0f828b00"/31]) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 21:46:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 21:46:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) [ 842.394838] audit: type=1800 audit(1588196772.712:46655): pid=12892 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16457 res=0 21:46:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 842.575972] audit: type=1800 audit(1588196772.892:46656): pid=12899 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16457 res=0 21:46:18 executing program 4: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffffffffffeca) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x9, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RFLUSH(r3, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) 21:46:18 executing program 3: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:18 executing program 5: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 848.263065] audit: type=1800 audit(1588196778.582:46657): pid=12929 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16472 res=0 21:46:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 848.409884] audit: type=1800 audit(1588196778.582:46658): pid=12931 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16473 res=0 21:46:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:18 executing program 0: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) 21:46:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 848.514443] audit: type=1800 audit(1588196778.682:46659): pid=12936 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16473 res=0 21:46:18 executing program 0: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) [ 848.660874] audit: type=1800 audit(1588196778.772:46660): pid=12939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16472 res=0 [ 848.752277] audit: type=1800 audit(1588196778.922:46661): pid=12947 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16472 res=0 [ 848.845867] audit: type=1800 audit(1588196778.932:46662): pid=12944 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16473 res=0 21:46:20 executing program 4: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:46:20 executing program 0: personality(0xd21d0356f446a02) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10, r0, 0x0) [ 850.066093] audit: type=1800 audit(1588196780.383:46663): pid=12970 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16018 res=0 21:46:21 executing program 3: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}, 0x68}}, 0x0) 21:46:21 executing program 5: mlockall(0x1) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21:46:21 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}, 0x68}}, 0x0) 21:46:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}, 0x68}}, 0x0) [ 851.216881] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 21:46:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}}}]}]}, 0x68}}, 0x0) [ 851.276868] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 851.327593] CPU: 0 PID: 12990 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 851.335525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.344878] Call Trace: [ 851.347557] dump_stack+0x13e/0x194 [ 851.351233] warn_alloc.cold+0x96/0x1af [ 851.355210] ? zone_watermark_ok_safe+0x280/0x280 [ 851.360065] ? __alloc_pages_direct_compact+0xba/0x360 [ 851.365345] __alloc_pages_slowpath+0x2114/0x26c0 [ 851.370245] ? check_preemption_disabled+0x35/0x240 [ 851.375272] ? warn_alloc+0xf0/0xf0 [ 851.379026] __alloc_pages_nodemask+0x5d3/0x700 [ 851.383795] ? lock_downgrade+0x6e0/0x6e0 [ 851.387945] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 851.392973] ? __list_del_entry_valid+0xb3/0xef [ 851.397707] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 851.403374] alloc_pages_current+0xe7/0x1e0 [ 851.407749] ion_page_pool_alloc+0x118/0x1b0 [ 851.412196] ion_system_heap_allocate+0x134/0x8d0 [ 851.417101] ? rcu_read_lock_sched_held+0x10a/0x130 [ 851.422154] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 851.427003] ? ion_system_heap_free+0x240/0x240 [ 851.431679] ion_alloc+0x1e9/0x7d0 [ 851.435226] ? ion_dma_buf_release+0x40/0x40 [ 851.439648] ? ion_ioctl+0xc9/0x1f8 [ 851.443284] ion_ioctl+0xef/0x1f8 [ 851.446737] ? ion_alloc.cold+0x3d/0x3d [ 851.450807] ? selinux_file_ioctl+0x3f7/0x560 [ 851.455305] ? ion_alloc.cold+0x3d/0x3d [ 851.459339] do_vfs_ioctl+0x75a/0xfe0 [ 851.463146] ? selinux_file_mprotect+0x5c0/0x5c0 [ 851.467905] ? ioctl_preallocate+0x1a0/0x1a0 [ 851.472385] ? security_file_ioctl+0x76/0xb0 [ 851.476797] ? security_file_ioctl+0x83/0xb0 [ 851.481211] SyS_ioctl+0x7f/0xb0 [ 851.484577] ? do_vfs_ioctl+0xfe0/0xfe0 [ 851.488556] do_syscall_64+0x1d5/0x640 [ 851.492570] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 851.497760] RIP: 0033:0x7fce30cbc469 [ 851.501468] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.509177] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 851.516444] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 21:46:21 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 851.523731] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 851.530995] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 851.538261] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 21:46:22 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:22 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 851.643737] Mem-Info: [ 851.646575] active_anon:384343 inactive_anon:60012 isolated_anon:0 [ 851.646575] active_file:19287 inactive_file:11704 isolated_file:35 [ 851.646575] unevictable:19815 dirty:138 writeback:0 unstable:0 [ 851.646575] slab_reclaimable:21821 slab_unreclaimable:126151 [ 851.646575] mapped:80506 shmem:16052 pagetables:9305 bounce:0 [ 851.646575] free:866623 free_pcp:328 free_cma:0 21:46:22 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 851.876562] Node 0 active_anon:1473540kB inactive_anon:115068kB active_file:47352kB inactive_file:42004kB unevictable:21180kB isolated(anon):0kB isolated(file):12kB mapped:284708kB dirty:640kB writeback:0kB shmem:63300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 852.059228] Node 0 DMA free:10452kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 852.162354] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 852.167496] Node 0 DMA32 free:54820kB min:36272kB low:45340kB high:54408kB active_anon:1467264kB inactive_anon:115628kB active_file:49812kB inactive_file:41376kB unevictable:20704kB writepending:708kB present:3129332kB managed:2621260kB mlocked:20704kB kernel_stack:16288kB pagetables:34952kB bounce:0kB free_pcp:1260kB local_pcp:632kB free_cma:0kB [ 852.208910] lowmem_reserve[]: 0 0 0 0 0 [ 852.213073] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 852.275409] lowmem_reserve[]: 0 0 0 0 0 [ 852.310261] Node 0 DMA: 81*4kB (UM) 54*8kB (M) 4*16kB (UM) 1*32kB (E) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10452kB [ 852.371341] Node 0 DMA32: 797*4kB (UMEH) 505*8kB (UMEH) 1441*16kB (UMH) 696*32kB (UMEH) 35*64kB (UMH) 14*128kB (MH) 6*256kB (MH) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 59148kB [ 852.421054] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 852.473891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.523983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 852.566939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 852.656164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 852.678178] 55192 total pagecache pages [ 852.703397] 0 pages in swap cache [ 852.706885] Swap cache stats: add 0, delete 0, find 0/0 [ 852.736808] Free swap = 0kB [ 852.741890] Total swap = 0kB [ 852.745233] 1965979 pages RAM [ 852.777962] 0 pages HighMem/MovableOnly [ 852.833973] 339053 pages reserved [ 852.837455] 0 pages cma reserved 21:46:24 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:24 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:24 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:24 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 855.611265] oom_reaper: reaped process 12990 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 855.649628] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 855.665294] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 855.670750] CPU: 1 PID: 12990 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 855.678619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.687971] Call Trace: [ 855.690561] dump_stack+0x13e/0x194 [ 855.694240] dump_header+0x178/0x6d4 [ 855.697965] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 855.703083] ? ___ratelimit+0x50/0x519 [ 855.706968] oom_kill_process.cold+0x10/0xae3 [ 855.711444] ? lock_acquire+0x170/0x3f0 [ 855.715432] ? lock_downgrade+0x6e0/0x6e0 [ 855.719593] out_of_memory+0x2d5/0x1110 [ 855.723569] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 855.728509] ? oom_killer_disable+0x1c0/0x1c0 [ 855.733014] ? mutex_trylock+0x152/0x1a0 [ 855.737061] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 855.741942] ? warn_alloc+0xf0/0xf0 [ 855.745571] __alloc_pages_nodemask+0x5d3/0x700 [ 855.750859] ? lock_downgrade+0x6e0/0x6e0 [ 855.754990] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 855.759987] ? check_preemption_disabled+0x35/0x240 [ 855.764987] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 855.770613] alloc_pages_current+0xe7/0x1e0 [ 855.774944] ion_page_pool_alloc+0x118/0x1b0 [ 855.779354] ion_system_heap_allocate+0x134/0x8d0 [ 855.784180] ? rcu_read_lock_sched_held+0x10a/0x130 [ 855.789182] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 855.794027] ? ion_system_heap_free+0x240/0x240 [ 855.798678] ion_alloc+0x1e9/0x7d0 [ 855.802216] ? ion_dma_buf_release+0x40/0x40 [ 855.806618] ? ion_ioctl+0xc9/0x1f8 [ 855.810225] ion_ioctl+0xef/0x1f8 [ 855.813656] ? ion_alloc.cold+0x3d/0x3d [ 855.817626] ? selinux_file_ioctl+0x3f7/0x560 [ 855.822116] ? ion_alloc.cold+0x3d/0x3d [ 855.826069] do_vfs_ioctl+0x75a/0xfe0 [ 855.829859] ? selinux_file_mprotect+0x5c0/0x5c0 [ 855.834619] ? ioctl_preallocate+0x1a0/0x1a0 [ 855.839030] ? security_file_ioctl+0x76/0xb0 [ 855.843415] ? security_file_ioctl+0x83/0xb0 [ 855.847816] SyS_ioctl+0x7f/0xb0 [ 855.851160] ? do_vfs_ioctl+0xfe0/0xfe0 [ 855.855128] do_syscall_64+0x1d5/0x640 [ 855.859006] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 855.864192] RIP: 0033:0x7fce30cbc469 [ 855.867897] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.875615] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 855.882895] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 855.890147] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 855.897418] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 855.904667] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 855.913022] Mem-Info: [ 855.915455] active_anon:382079 inactive_anon:69103 isolated_anon:0 [ 855.915455] active_file:16914 inactive_file:3410 isolated_file:0 [ 855.915455] unevictable:0 dirty:6 writeback:0 unstable:0 [ 855.915455] slab_reclaimable:20159 slab_unreclaimable:121254 [ 855.915455] mapped:64072 shmem:16052 pagetables:9149 bounce:0 [ 855.915455] free:853012 free_pcp:205 free_cma:0 [ 855.949533] Node 0 active_anon:1463812kB inactive_anon:130200kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249580kB dirty:4kB writeback:0kB shmem:63296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 855.977748] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.004668] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 856.009803] Node 0 DMA32 free:20968kB min:36272kB low:45340kB high:54408kB active_anon:1459396kB inactive_anon:130200kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:34060kB bounce:0kB free_pcp:824kB local_pcp:696kB free_cma:0kB [ 856.039804] lowmem_reserve[]: 0 0 0 0 0 [ 856.043803] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.069439] lowmem_reserve[]: 0 0 0 0 0 [ 856.073457] Node 0 DMA: 82*4kB (ME) 57*8kB (UME) 1*16kB (M) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10336kB [ 856.089267] Node 0 DMA32: 1430*4kB (UMEH) 954*8kB (UMEH) 254*16kB (UMEH) 89*32kB (UMEH) 11*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20968kB [ 856.104023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 856.114851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.123783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 856.132469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.141440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 856.150095] 36407 total pagecache pages [ 856.154064] 0 pages in swap cache [ 856.157493] Swap cache stats: add 0, delete 0, find 0/0 [ 856.162985] Free swap = 0kB [ 856.166000] Total swap = 0kB [ 856.169849] 1965979 pages RAM [ 856.172953] 0 pages HighMem/MovableOnly [ 856.176904] 339053 pages reserved [ 856.180451] 0 pages cma reserved [ 856.183856] Out of memory: Kill process 12767 (syz-executor.2) score 1010 or sacrifice child [ 856.193285] Killed process 12767 (syz-executor.2) total-vm:80212kB, anon-rss:18404kB, file-rss:34560kB, shmem-rss:0kB [ 856.208195] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 856.220553] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 856.225677] CPU: 1 PID: 12990 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 856.234366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.243727] Call Trace: [ 856.246304] dump_stack+0x13e/0x194 [ 856.249925] warn_alloc.cold+0x96/0x1af [ 856.253985] ? zone_watermark_ok_safe+0x280/0x280 [ 856.258852] ? wait_for_completion+0x390/0x390 [ 856.263433] __alloc_pages_slowpath+0x2114/0x26c0 [ 856.268412] ? warn_alloc+0xf0/0xf0 [ 856.272040] __alloc_pages_nodemask+0x5d3/0x700 [ 856.276709] ? lock_downgrade+0x6e0/0x6e0 [ 856.280837] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 856.285921] ? check_preemption_disabled+0x35/0x240 [ 856.290926] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 856.296536] alloc_pages_current+0xe7/0x1e0 [ 856.300837] ion_page_pool_alloc+0x118/0x1b0 [ 856.305250] ion_system_heap_allocate+0x134/0x8d0 [ 856.310079] ? rcu_read_lock_sched_held+0x10a/0x130 [ 856.315075] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 856.319899] ? ion_system_heap_free+0x240/0x240 [ 856.324561] ion_alloc+0x1e9/0x7d0 [ 856.328083] ? ion_dma_buf_release+0x40/0x40 [ 856.332470] ? ion_ioctl+0xc9/0x1f8 [ 856.336074] ion_ioctl+0xef/0x1f8 [ 856.339514] ? ion_alloc.cold+0x3d/0x3d [ 856.343479] ? selinux_file_ioctl+0x3f7/0x560 [ 856.347948] ? ion_alloc.cold+0x3d/0x3d [ 856.352073] do_vfs_ioctl+0x75a/0xfe0 [ 856.355848] ? selinux_file_mprotect+0x5c0/0x5c0 [ 856.360581] ? ioctl_preallocate+0x1a0/0x1a0 [ 856.364974] ? security_file_ioctl+0x76/0xb0 [ 856.369358] ? security_file_ioctl+0x83/0xb0 [ 856.373759] SyS_ioctl+0x7f/0xb0 [ 856.377110] ? do_vfs_ioctl+0xfe0/0xfe0 [ 856.381063] do_syscall_64+0x1d5/0x640 [ 856.384931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 856.390097] RIP: 0033:0x7fce30cbc469 [ 856.393867] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.401552] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 856.408797] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 856.416051] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 856.423322] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 856.430568] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 856.438925] Mem-Info: [ 856.441372] active_anon:382079 inactive_anon:64528 isolated_anon:0 [ 856.441372] active_file:16915 inactive_file:3426 isolated_file:0 [ 856.441372] unevictable:0 dirty:9 writeback:0 unstable:0 [ 856.441372] slab_reclaimable:20159 slab_unreclaimable:121417 [ 856.441372] mapped:64088 shmem:16052 pagetables:9112 bounce:0 [ 856.441372] free:857166 free_pcp:569 free_cma:0 [ 856.475496] Node 0 active_anon:1463812kB inactive_anon:126300kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249580kB dirty:4kB writeback:0kB shmem:63296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 856.503733] Node 1 active_anon:64504kB inactive_anon:131812kB active_file:67624kB inactive_file:13676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6772kB dirty:32kB writeback:0kB shmem:912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 856.531716] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.558321] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 856.563358] Node 0 DMA32 free:26856kB min:36272kB low:45340kB high:54408kB active_anon:1459396kB inactive_anon:126300kB active_file:36kB inactive_file:28kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:34060kB bounce:0kB free_pcp:1412kB local_pcp:696kB free_cma:0kB [ 856.593587] lowmem_reserve[]: 0 0 0 0 0 [ 856.597598] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.623202] lowmem_reserve[]: 0 0 0 0 0 [ 856.627187] Node 1 Normal free:3390944kB min:53612kB low:67012kB high:80412kB active_anon:64504kB inactive_anon:131812kB active_file:67624kB inactive_file:13676kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1248kB pagetables:2388kB bounce:0kB free_pcp:896kB local_pcp:168kB free_cma:0kB [ 856.657692] lowmem_reserve[]: 0 0 0 0 0 [ 856.661791] Node 0 DMA: 82*4kB (ME) 57*8kB (UME) 1*16kB (M) 2*32kB (UE) 2*64kB (ME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10336kB [ 856.677619] Node 0 DMA32: 1950*4kB (UMEH) 1386*8kB (UMEH) 268*16kB (UMEH) 91*32kB (UMEH) 13*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26920kB [ 856.692564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 856.703383] Node 1 Normal: 160*4kB (UM) 25*8kB (UME) 24*16kB (UM) 18*32kB (ME) 13*64kB (UME) 9*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (UME) 824*4096kB (M) = 3390664kB [ 856.720835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.729747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 856.738407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.747238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 856.755877] 36407 total pagecache pages [ 856.759940] 0 pages in swap cache [ 856.763382] Swap cache stats: add 0, delete 0, find 0/0 [ 856.768810] Free swap = 0kB [ 856.771817] Total swap = 0kB [ 856.774831] 1965979 pages RAM [ 856.777999] 0 pages HighMem/MovableOnly [ 856.781963] 339053 pages reserved [ 856.785397] 0 pages cma reserved [ 856.942623] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 856.954086] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 856.959324] CPU: 1 PID: 12990 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 856.967196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.976562] Call Trace: [ 856.979136] dump_stack+0x13e/0x194 [ 856.982741] warn_alloc.cold+0x96/0x1af [ 856.986701] ? zone_watermark_ok_safe+0x280/0x280 [ 856.991531] ? __alloc_pages_direct_compact+0xba/0x360 [ 856.996793] __alloc_pages_slowpath+0x2114/0x26c0 [ 857.001612] ? check_preemption_disabled+0x35/0x240 [ 857.006636] ? warn_alloc+0xf0/0xf0 [ 857.010247] __alloc_pages_nodemask+0x5d3/0x700 [ 857.014890] ? lock_downgrade+0x6e0/0x6e0 [ 857.019014] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 857.024004] ? SOFTIRQ_verbose+0x10/0x10 [ 857.028053] ? find_held_lock+0x2d/0x110 [ 857.032089] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 857.037700] alloc_pages_current+0xe7/0x1e0 [ 857.042001] ion_page_pool_alloc+0x118/0x1b0 [ 857.046472] ion_system_heap_allocate+0x134/0x8d0 [ 857.051294] ? _ion_heap_freelist_drain+0x6e/0x410 [ 857.056210] ? ion_system_heap_free+0x240/0x240 [ 857.060857] ion_alloc+0x611/0x7d0 [ 857.064378] ? ion_dma_buf_release+0x40/0x40 [ 857.068765] ? ion_ioctl+0xc9/0x1f8 [ 857.072377] ion_ioctl+0xef/0x1f8 [ 857.075812] ? ion_alloc.cold+0x3d/0x3d [ 857.079765] ? selinux_file_ioctl+0x3f7/0x560 [ 857.084245] ? ion_alloc.cold+0x3d/0x3d [ 857.088547] do_vfs_ioctl+0x75a/0xfe0 [ 857.092333] ? selinux_file_mprotect+0x5c0/0x5c0 [ 857.097064] ? ioctl_preallocate+0x1a0/0x1a0 [ 857.101471] ? security_file_ioctl+0x76/0xb0 [ 857.105871] ? security_file_ioctl+0x83/0xb0 [ 857.110260] SyS_ioctl+0x7f/0xb0 [ 857.113601] ? do_vfs_ioctl+0xfe0/0xfe0 [ 857.117553] do_syscall_64+0x1d5/0x640 [ 857.121422] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 857.126602] RIP: 0033:0x7fce30cbc469 [ 857.130305] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.138019] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 857.145266] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 857.152607] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.159867] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.167129] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 857.296779] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 857.312894] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 857.318084] CPU: 1 PID: 12990 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 857.325959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.335295] Call Trace: [ 857.337885] dump_stack+0x13e/0x194 [ 857.341494] dump_header+0x178/0x6d4 [ 857.345206] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 857.350201] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 857.355297] ? ___ratelimit+0x50/0x519 [ 857.359181] oom_kill_process.cold+0x10/0xae3 [ 857.363661] ? lock_acquire+0x170/0x3f0 [ 857.367611] ? lock_downgrade+0x6e0/0x6e0 [ 857.371753] out_of_memory+0x2d5/0x1110 [ 857.375704] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 857.380615] ? oom_killer_disable+0x1c0/0x1c0 [ 857.385089] ? mutex_trylock+0x152/0x1a0 [ 857.389142] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 857.393980] ? warn_alloc+0xf0/0xf0 [ 857.397592] __alloc_pages_nodemask+0x5d3/0x700 [ 857.402241] ? lock_downgrade+0x6e0/0x6e0 [ 857.406366] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 857.411373] ? SOFTIRQ_verbose+0x10/0x10 [ 857.415433] ? find_held_lock+0x2d/0x110 [ 857.419473] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 857.425090] alloc_pages_current+0xe7/0x1e0 [ 857.429406] ion_page_pool_alloc+0x118/0x1b0 [ 857.435008] ion_system_heap_allocate+0x134/0x8d0 [ 857.439828] ? _ion_heap_freelist_drain+0x6e/0x410 [ 857.444747] ? ion_system_heap_free+0x240/0x240 [ 857.449396] ion_alloc+0x611/0x7d0 [ 857.452938] ? ion_dma_buf_release+0x40/0x40 [ 857.458403] ? ion_ioctl+0xc9/0x1f8 [ 857.462010] ion_ioctl+0xef/0x1f8 [ 857.465454] ? ion_alloc.cold+0x3d/0x3d [ 857.469425] ? selinux_file_ioctl+0x3f7/0x560 [ 857.473912] ? ion_alloc.cold+0x3d/0x3d [ 857.477866] do_vfs_ioctl+0x75a/0xfe0 [ 857.481662] ? selinux_file_mprotect+0x5c0/0x5c0 [ 857.486425] ? ioctl_preallocate+0x1a0/0x1a0 [ 857.490832] ? security_file_ioctl+0x76/0xb0 [ 857.495232] ? security_file_ioctl+0x83/0xb0 [ 857.499633] SyS_ioctl+0x7f/0xb0 [ 857.502980] ? do_vfs_ioctl+0xfe0/0xfe0 [ 857.506931] do_syscall_64+0x1d5/0x640 [ 857.510822] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 857.516024] RIP: 0033:0x7fce30cbc469 [ 857.519777] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.527485] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 857.534765] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 857.542018] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.549283] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 857.556545] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 857.564912] Mem-Info: [ 857.567354] active_anon:382080 inactive_anon:64509 isolated_anon:0 [ 857.567354] active_file:16915 inactive_file:3440 isolated_file:0 [ 857.567354] unevictable:0 dirty:21 writeback:0 unstable:0 [ 857.567354] slab_reclaimable:20127 slab_unreclaimable:121713 [ 857.567354] mapped:64101 shmem:16052 pagetables:9114 bounce:0 [ 857.567354] free:854676 free_pcp:69 free_cma:0 [ 857.601600] Node 0 active_anon:1463812kB inactive_anon:126240kB active_file:36kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249652kB dirty:16kB writeback:0kB shmem:63296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 857.629920] Node 0 DMA free:10372kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 857.656497] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 857.661638] Node 0 DMA32 free:18516kB min:36272kB low:45340kB high:54408kB active_anon:1459396kB inactive_anon:126240kB active_file:40kB inactive_file:24kB unevictable:0kB writepending:16kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:34060kB bounce:0kB free_pcp:280kB local_pcp:120kB free_cma:0kB [ 857.691906] lowmem_reserve[]: 0 0 0 0 0 [ 857.695918] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 857.721601] lowmem_reserve[]: 0 0 0 0 0 [ 857.725594] Node 0 DMA: 83*4kB (UME) 63*8kB (UME) 8*16kB (UM) 5*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10404kB [ 857.741558] Node 0 DMA32: 1567*4kB (MEH) 603*8kB (UMEH) 210*16kB (UMEH) 136*32kB (UMEH) 3*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18996kB [ 857.756131] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 857.766958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.775875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 857.784550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.793443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 857.802123] 36425 total pagecache pages [ 857.806082] 0 pages in swap cache [ 857.809601] Swap cache stats: add 0, delete 0, find 0/0 [ 857.814950] Free swap = 0kB [ 857.818725] Total swap = 0kB [ 857.821760] 1965979 pages RAM [ 857.824840] 0 pages HighMem/MovableOnly [ 857.828876] 339053 pages reserved [ 857.832328] 0 pages cma reserved [ 857.835672] Out of memory: Kill process 12765 (syz-executor.2) score 1010 or sacrifice child [ 857.844348] Killed process 12765 (syz-executor.2) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 857.855480] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 857.867003] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 857.872224] CPU: 1 PID: 12990 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 857.880103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.882471] oom_reaper: reaped process 12765 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 857.889461] Call Trace: [ 857.889488] dump_stack+0x13e/0x194 [ 857.889503] warn_alloc.cold+0x96/0x1af [ 857.909595] ? zone_watermark_ok_safe+0x280/0x280 [ 857.914535] ? wait_for_completion+0x390/0x390 [ 857.919124] __alloc_pages_slowpath+0x2114/0x26c0 [ 857.923955] ? warn_alloc+0xf0/0xf0 [ 857.927569] __alloc_pages_nodemask+0x5d3/0x700 [ 857.932218] ? lock_downgrade+0x6e0/0x6e0 [ 857.936347] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 857.941340] ? SOFTIRQ_verbose+0x10/0x10 [ 857.945380] ? find_held_lock+0x2d/0x110 [ 857.949419] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 857.955022] alloc_pages_current+0xe7/0x1e0 [ 857.959323] ion_page_pool_alloc+0x118/0x1b0 [ 857.963729] ion_system_heap_allocate+0x134/0x8d0 [ 857.968552] ? _ion_heap_freelist_drain+0x6e/0x410 [ 857.973458] ? ion_system_heap_free+0x240/0x240 [ 857.978125] ion_alloc+0x611/0x7d0 [ 857.981659] ? ion_dma_buf_release+0x40/0x40 [ 857.986062] ? ion_ioctl+0xc9/0x1f8 [ 857.989683] ion_ioctl+0xef/0x1f8 [ 857.993128] ? ion_alloc.cold+0x3d/0x3d [ 857.997086] ? selinux_file_ioctl+0x3f7/0x560 [ 858.001558] ? ion_alloc.cold+0x3d/0x3d [ 858.005512] do_vfs_ioctl+0x75a/0xfe0 [ 858.009292] ? selinux_file_mprotect+0x5c0/0x5c0 [ 858.014027] ? ioctl_preallocate+0x1a0/0x1a0 [ 858.018439] ? security_file_ioctl+0x76/0xb0 [ 858.022845] ? security_file_ioctl+0x83/0xb0 [ 858.027240] SyS_ioctl+0x7f/0xb0 [ 858.030585] ? do_vfs_ioctl+0xfe0/0xfe0 [ 858.034554] do_syscall_64+0x1d5/0x640 [ 858.038485] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 858.043655] RIP: 0033:0x7fce30cbc469 [ 858.047359] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.055045] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 858.062401] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 858.069669] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 858.076945] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 858.084205] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 858.093037] warn_alloc_show_mem: 1 callbacks suppressed [ 858.093041] Mem-Info: [ 858.100915] active_anon:382078 inactive_anon:59945 isolated_anon:0 [ 858.100915] active_file:16917 inactive_file:3736 isolated_file:0 [ 858.100915] unevictable:0 dirty:32 writeback:0 unstable:0 [ 858.100915] slab_reclaimable:20120 slab_unreclaimable:121662 [ 858.100915] mapped:64328 shmem:16052 pagetables:9079 bounce:0 [ 858.100915] free:858885 free_pcp:230 free_cma:0 [ 858.135800] Node 0 active_anon:1463804kB inactive_anon:107984kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249692kB dirty:24kB writeback:0kB shmem:63296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 858.164173] Node 1 active_anon:64512kB inactive_anon:131796kB active_file:67632kB inactive_file:15404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8172kB dirty:116kB writeback:0kB shmem:912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 858.192251] Node 0 DMA free:10444kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.219389] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 858.224470] Node 0 DMA32 free:39824kB min:36272kB low:45340kB high:54408kB active_anon:1459388kB inactive_anon:107984kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:24kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33920kB bounce:0kB free_pcp:816kB local_pcp:120kB free_cma:0kB [ 858.254021] lowmem_reserve[]: 0 0 0 0 0 [ 858.258103] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 858.283659] lowmem_reserve[]: 0 0 0 0 0 [ 858.287668] Node 1 Normal free:3384884kB min:53612kB low:67012kB high:80412kB active_anon:64512kB inactive_anon:131796kB active_file:67632kB inactive_file:15460kB unevictable:0kB writepending:124kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1216kB pagetables:2396kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB [ 858.317548] lowmem_reserve[]: 0 0 0 0 0 [ 858.321654] Node 0 DMA: 83*4kB (UME) 64*8kB (UME) 8*16kB (UM) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10444kB [ 858.337687] Node 0 DMA32: 2384*4kB (UMEH) 1848*8kB (UMEH) 384*16kB (UMEH) 206*32kB (UMEH) 38*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39488kB [ 858.353168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 858.363972] Node 1 Normal: 39*4kB (U) 3*8kB (UME) 0*16kB 4*32kB (UME) 12*64kB (UME) 8*128kB (M) 6*256kB (UM) 2*512kB (M) 1*1024kB (M) 4*2048kB (UME) 823*4096kB (M) = 3384884kB [ 858.379980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 858.388908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 858.397665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 858.406592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 858.415266] 36844 total pagecache pages [ 858.419315] 0 pages in swap cache [ 858.422777] Swap cache stats: add 0, delete 0, find 0/0 [ 858.428218] Free swap = 0kB [ 858.431245] Total swap = 0kB [ 858.434239] 1965979 pages RAM [ 858.437323] 0 pages HighMem/MovableOnly [ 858.441363] 339053 pages reserved [ 858.444811] 0 pages cma reserved 21:46:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:28 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:28 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:28 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) 21:46:28 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:28 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 858.742748] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 858.754798] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 858.762315] CPU: 1 PID: 13112 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 858.770239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.779593] Call Trace: [ 858.782189] dump_stack+0x13e/0x194 [ 858.785824] warn_alloc.cold+0x96/0x1af [ 858.789803] ? zone_watermark_ok_safe+0x280/0x280 [ 858.794652] ? __alloc_pages_direct_compact+0xba/0x360 [ 858.799928] __alloc_pages_slowpath+0x2114/0x26c0 [ 858.804768] ? check_preemption_disabled+0x35/0x240 [ 858.809773] ? warn_alloc+0xf0/0xf0 [ 858.813408] __alloc_pages_nodemask+0x5d3/0x700 [ 858.818077] ? lock_downgrade+0x6e0/0x6e0 [ 858.822206] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 858.827206] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 858.832812] alloc_pages_current+0xe7/0x1e0 [ 858.837128] ion_page_pool_alloc+0x118/0x1b0 [ 858.841519] ion_system_heap_allocate+0x134/0x8d0 [ 858.846343] ? ion_system_heap_free+0x240/0x240 [ 858.850993] ? ion_alloc+0x17b/0x7d0 [ 858.854688] ion_alloc+0x1e9/0x7d0 [ 858.858218] ? ion_dma_buf_release+0x40/0x40 [ 858.862693] ? __might_fault+0x177/0x1b0 [ 858.866738] ion_ioctl+0xef/0x1f8 [ 858.870172] ? ion_alloc.cold+0x3d/0x3d [ 858.874131] ? selinux_file_ioctl+0x3f7/0x560 [ 858.878622] ? ion_alloc.cold+0x3d/0x3d [ 858.882591] do_vfs_ioctl+0x75a/0xfe0 [ 858.886375] ? selinux_file_mprotect+0x5c0/0x5c0 [ 858.891115] ? ioctl_preallocate+0x1a0/0x1a0 [ 858.895516] ? security_file_ioctl+0x76/0xb0 [ 858.899906] ? security_file_ioctl+0x83/0xb0 [ 858.904293] SyS_ioctl+0x7f/0xb0 [ 858.907659] ? do_vfs_ioctl+0xfe0/0xfe0 [ 858.911618] do_syscall_64+0x1d5/0x640 [ 858.915516] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 858.920701] RIP: 0033:0x7fce30cbc469 [ 858.924394] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.932084] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 858.939347] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 858.946599] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 858.953850] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 858.961113] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 21:46:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) 21:46:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) 21:46:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) [ 859.166714] Mem-Info: [ 859.179867] active_anon:382952 inactive_anon:59947 isolated_anon:0 [ 859.179867] active_file:17444 inactive_file:4832 isolated_file:0 [ 859.179867] unevictable:0 dirty:19 writeback:4 unstable:0 [ 859.179867] slab_reclaimable:20140 slab_unreclaimable:121559 [ 859.179867] mapped:65589 shmem:16055 pagetables:9264 bounce:0 [ 859.179867] free:880098 free_pcp:311 free_cma:0 21:46:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) [ 859.216511] Node 0 active_anon:1466604kB inactive_anon:107996kB active_file:176kB inactive_file:3096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250440kB dirty:20kB writeback:0kB shmem:63308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 21:46:29 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 859.247254] Node 0 DMA free:10544kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.367833] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 859.394444] Node 0 DMA32 free:154368kB min:36272kB low:45340kB high:54408kB active_anon:1459780kB inactive_anon:107996kB active_file:1128kB inactive_file:2456kB unevictable:0kB writepending:20kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16448kB pagetables:34160kB bounce:0kB free_pcp:992kB local_pcp:376kB free_cma:0kB [ 859.546140] lowmem_reserve[]: 0 0 0 0 0 [ 859.568023] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.673765] lowmem_reserve[]: 0 0 0 0 0 [ 859.701367] Node 0 DMA: 84*4kB (UME) 66*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10480kB [ 859.791862] Node 0 DMA32: 2382*4kB (UMEH) 6156*8kB (UMEH) 2876*16kB (UMEH) 1014*32kB (UMEH) 8*64kB (MH) 3*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 138904kB [ 859.864030] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 859.880673] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 859.885124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 859.886122] CPU: 1 PID: 13151 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 859.904478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.913396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.913850] Call Trace: [ 859.925250] dump_stack+0x13e/0x194 [ 859.928883] warn_alloc.cold+0x96/0x1af [ 859.932861] ? zone_watermark_ok_safe+0x280/0x280 [ 859.937701] ? retint_kernel+0x2d/0x2d [ 859.938836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 859.941765] ? __alloc_pages_direct_compact+0x25e/0x360 [ 859.950349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 859.955675] __alloc_pages_slowpath+0x2114/0x26c0 [ 859.967695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 859.969339] ? mark_held_locks+0xa6/0xf0 [ 859.977910] 37899 total pagecache pages [ 859.981934] ? retint_kernel+0x2d/0x2d [ 859.985880] 0 pages in swap cache [ 859.989751] ? warn_alloc+0xf0/0xf0 [ 859.989768] ? lock_is_held_type+0x17a/0x210 [ 859.989785] __alloc_pages_nodemask+0x5d3/0x700 [ 859.996058] Swap cache stats: add 0, delete 0, find 0/0 [ 859.997022] ? lock_downgrade+0x6e0/0x6e0 [ 860.002189] Free swap = 0kB [ 860.006052] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 860.012190] Total swap = 0kB [ 860.015543] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 860.019294] 1965979 pages RAM [ 860.023542] alloc_pages_current+0xe7/0x1e0 [ 860.026547] 0 pages HighMem/MovableOnly [ 860.032152] ion_page_pool_alloc+0x118/0x1b0 [ 860.032165] ion_system_heap_allocate+0x134/0x8d0 [ 860.032178] ? rcu_read_lock_sched_held+0x10a/0x130 [ 860.032186] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 860.032200] ? ion_system_heap_free+0x240/0x240 [ 860.038151] 339053 pages reserved [ 860.040119] ion_alloc+0x1e9/0x7d0 [ 860.044062] 0 pages cma reserved [ 860.048457] ? ion_dma_buf_release+0x40/0x40 [ 860.048473] ? __might_fault+0x177/0x1b0 [ 860.048487] ion_ioctl+0xef/0x1f8 [ 860.048497] ? ion_alloc.cold+0x3d/0x3d [ 860.048511] ? ion_alloc.cold+0x3d/0x3d [ 860.097916] do_vfs_ioctl+0x75a/0xfe0 [ 860.101717] ? selinux_file_mprotect+0x5c0/0x5c0 [ 860.106479] ? ioctl_preallocate+0x1a0/0x1a0 [ 860.110901] ? security_file_ioctl+0x76/0xb0 [ 860.115313] ? security_file_ioctl+0x83/0xb0 [ 860.119724] SyS_ioctl+0x7f/0xb0 [ 860.123091] ? do_vfs_ioctl+0xfe0/0xfe0 [ 860.127087] do_syscall_64+0x1d5/0x640 [ 860.130983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 860.136171] RIP: 0033:0x7f5232e49469 [ 860.139892] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.147601] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 860.154879] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 860.162161] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 860.169457] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 860.176740] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 860.190867] Mem-Info: [ 860.193850] active_anon:383141 inactive_anon:59945 isolated_anon:0 [ 860.193850] active_file:17809 inactive_file:3083 isolated_file:0 [ 860.193850] unevictable:0 dirty:10 writeback:43 unstable:0 [ 860.193850] slab_reclaimable:20157 slab_unreclaimable:122155 [ 860.193850] mapped:65731 shmem:16052 pagetables:9208 bounce:0 [ 860.193850] free:859566 free_pcp:163 free_cma:0 [ 860.228892] Node 0 active_anon:1468092kB inactive_anon:108008kB active_file:396kB inactive_file:536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250384kB dirty:12kB writeback:36kB shmem:63320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 860.265112] Node 0 DMA free:10424kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.296960] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 860.305640] Node 0 DMA32 free:36780kB min:36272kB low:45340kB high:54408kB active_anon:1463676kB inactive_anon:108008kB active_file:224kB inactive_file:204kB unevictable:0kB writepending:48kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16512kB pagetables:34324kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 860.341718] lowmem_reserve[]: 0 0 0 0 0 [ 860.345765] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.364831] oom_reaper: reaped process 13112 (syz-executor.1), now anon-rss:0kB, file-rss:44kB, shmem-rss:0kB [ 860.375565] lowmem_reserve[]: 0 0 0 0 0 [ 860.395192] Node 0 DMA: 82*4kB (ME) 60*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10424kB [ 860.416204] Node 0 DMA32: 289*4kB (UMEH) 59*8kB (UMEH) 27*16kB (UMEH) 785*32kB (UMEH) 4*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27436kB [ 860.435304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 860.446473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.455503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 860.464885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.475133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 860.484425] 37125 total pagecache pages [ 860.489083] 0 pages in swap cache [ 860.492548] Swap cache stats: add 0, delete 0, find 0/0 [ 860.495039] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 860.498978] Free swap = 0kB [ 860.502688] 0 [ 860.510428] Total swap = 0kB [ 860.513014] , order=0, oom_score_adj=1000 [ 860.514341] 1965979 pages RAM [ 860.514346] 0 pages HighMem/MovableOnly [ 860.514350] 339053 pages reserved [ 860.514354] 0 pages cma reserved [ 860.536838] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 860.542723] CPU: 0 PID: 13112 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 860.550617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.560155] Call Trace: [ 860.562751] dump_stack+0x13e/0x194 [ 860.566369] dump_header+0x178/0x6d4 [ 860.570093] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 860.575110] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 860.580204] ? ___ratelimit+0x50/0x519 [ 860.584208] oom_kill_process.cold+0x10/0xae3 [ 860.588792] ? lock_downgrade+0x6e0/0x6e0 [ 860.592963] out_of_memory+0x2d5/0x1110 [ 860.597107] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 860.602028] ? oom_killer_disable+0x1c0/0x1c0 [ 860.606514] ? mutex_trylock+0x152/0x1a0 [ 860.610639] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 860.615490] ? warn_alloc+0xf0/0xf0 [ 860.619114] __alloc_pages_nodemask+0x5d3/0x700 [ 860.623801] ? lock_downgrade+0x6e0/0x6e0 [ 860.627952] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 860.632713] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 860.637729] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 860.643345] alloc_pages_current+0xe7/0x1e0 [ 860.647687] ion_page_pool_alloc+0x118/0x1b0 [ 860.652101] ion_system_heap_allocate+0x134/0x8d0 [ 860.656944] ? ion_system_heap_free+0x240/0x240 [ 860.661602] ? ion_alloc+0x17b/0x7d0 [ 860.665330] ion_alloc+0x1e9/0x7d0 [ 860.668873] ? ion_dma_buf_release+0x40/0x40 [ 860.673292] ? __might_fault+0x177/0x1b0 [ 860.677352] ion_ioctl+0xef/0x1f8 [ 860.680794] ? ion_alloc.cold+0x3d/0x3d [ 860.684793] ? selinux_file_ioctl+0x3f7/0x560 [ 860.689283] ? ion_alloc.cold+0x3d/0x3d [ 860.693265] do_vfs_ioctl+0x75a/0xfe0 [ 860.697107] ? selinux_file_mprotect+0x5c0/0x5c0 [ 860.701860] ? ioctl_preallocate+0x1a0/0x1a0 [ 860.706302] ? security_file_ioctl+0x76/0xb0 [ 860.710707] ? security_file_ioctl+0x83/0xb0 [ 860.715114] SyS_ioctl+0x7f/0xb0 [ 860.718466] ? do_vfs_ioctl+0xfe0/0xfe0 [ 860.722435] do_syscall_64+0x1d5/0x640 [ 860.726340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 860.731525] RIP: 0033:0x7fce30cbc469 [ 860.735264] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.742975] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 860.750239] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 860.757508] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 860.764798] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 860.772076] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 860.780536] Mem-Info: [ 860.783050] active_anon:382121 inactive_anon:59944 isolated_anon:0 [ 860.783050] active_file:17625 inactive_file:3435 isolated_file:0 [ 860.783050] unevictable:0 dirty:0 writeback:21 unstable:0 [ 860.783050] slab_reclaimable:20157 slab_unreclaimable:121644 [ 860.783050] mapped:65447 shmem:16052 pagetables:9208 bounce:0 [ 860.783050] free:853411 free_pcp:156 free_cma:0 [ 860.817198] Node 0 active_anon:1464096kB inactive_anon:108004kB active_file:8kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249804kB dirty:8kB writeback:56kB shmem:63320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 860.845561] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.872412] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 860.877552] Node 0 DMA32 free:20564kB min:36272kB low:45340kB high:54408kB active_anon:1460152kB inactive_anon:108004kB active_file:236kB inactive_file:192kB unevictable:0kB writepending:64kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16384kB pagetables:34324kB bounce:0kB free_pcp:624kB local_pcp:624kB free_cma:0kB [ 860.907415] lowmem_reserve[]: 0 0 0 0 0 [ 860.911500] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 860.937127] lowmem_reserve[]: 0 0 0 0 0 [ 860.941216] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 860.957181] Node 0 DMA32: 983*4kB (UMEH) 437*8kB (UMEH) 31*16kB (UMEH) 385*32kB (UMEH) 5*64kB (UH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20564kB [ 860.971769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 860.982625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.991688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.000341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.009315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.019590] 37141 total pagecache pages [ 861.023846] 0 pages in swap cache [ 861.027411] Swap cache stats: add 0, delete 0, find 0/0 [ 861.037709] Free swap = 0kB [ 861.040765] Total swap = 0kB [ 861.043773] 1965979 pages RAM [ 861.046916] 0 pages HighMem/MovableOnly [ 861.052782] 339053 pages reserved [ 861.056328] 0 pages cma reserved [ 861.059845] Out of memory: Kill process 12807 (syz-executor.2) score 1010 or sacrifice child [ 861.068622] Killed process 12807 (syz-executor.2) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 861.083139] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 861.103120] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 861.103296] oom_reaper: reaped process 12807 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 861.109968] CPU: 1 PID: 13112 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 861.126176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.135622] Call Trace: [ 861.138205] dump_stack+0x13e/0x194 [ 861.141916] warn_alloc.cold+0x96/0x1af [ 861.145895] ? zone_watermark_ok_safe+0x280/0x280 [ 861.150740] ? wait_for_completion+0x390/0x390 [ 861.155398] __alloc_pages_slowpath+0x2114/0x26c0 [ 861.160457] ? warn_alloc+0xf0/0xf0 [ 861.164138] __alloc_pages_nodemask+0x5d3/0x700 [ 861.168801] ? lock_downgrade+0x6e0/0x6e0 [ 861.172934] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.177678] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 861.182683] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 861.188294] alloc_pages_current+0xe7/0x1e0 [ 861.192604] ion_page_pool_alloc+0x118/0x1b0 [ 861.197023] ion_system_heap_allocate+0x134/0x8d0 [ 861.201850] ? ion_system_heap_free+0x240/0x240 [ 861.206528] ? ion_alloc+0x17b/0x7d0 [ 861.210237] ion_alloc+0x1e9/0x7d0 [ 861.213767] ? ion_dma_buf_release+0x40/0x40 [ 861.218161] ? __might_fault+0x177/0x1b0 [ 861.222205] ion_ioctl+0xef/0x1f8 [ 861.225731] ? ion_alloc.cold+0x3d/0x3d [ 861.229695] ? selinux_file_ioctl+0x3f7/0x560 [ 861.234175] ? ion_alloc.cold+0x3d/0x3d [ 861.238134] do_vfs_ioctl+0x75a/0xfe0 [ 861.241922] ? selinux_file_mprotect+0x5c0/0x5c0 [ 861.246690] ? ioctl_preallocate+0x1a0/0x1a0 [ 861.251124] ? security_file_ioctl+0x76/0xb0 [ 861.255515] ? security_file_ioctl+0x83/0xb0 [ 861.259908] SyS_ioctl+0x7f/0xb0 [ 861.263254] ? do_vfs_ioctl+0xfe0/0xfe0 [ 861.267212] do_syscall_64+0x1d5/0x640 [ 861.271091] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 861.276264] RIP: 0033:0x7fce30cbc469 [ 861.279969] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.287669] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 861.294947] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 861.302385] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 861.309662] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 861.316918] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 861.345444] oom_reaper: reaped process 13151 (syz-executor.2), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB [ 861.347579] Mem-Info: [ 861.370742] active_anon:382082 inactive_anon:55381 isolated_anon:0 [ 861.370742] active_file:17667 inactive_file:3467 isolated_file:0 [ 861.370742] unevictable:0 dirty:15 writeback:0 unstable:0 [ 861.370742] slab_reclaimable:20160 slab_unreclaimable:121861 [ 861.370742] mapped:65343 shmem:16052 pagetables:9073 bounce:0 [ 861.370742] free:855924 free_pcp:99 free_cma:0 [ 861.405084] Node 0 active_anon:1463968kB inactive_anon:104440kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249812kB dirty:8kB writeback:0kB shmem:63316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.434028] Node 1 active_anon:64352kB inactive_anon:117084kB active_file:70760kB inactive_file:13800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11560kB dirty:8kB writeback:0kB shmem:892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 861.462750] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.490895] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 861.493944] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 861.496922] Node 0 [ 861.509178] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 861.509253] CPU: 1 PID: 13151 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 861.509259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.509263] Call Trace: [ 861.509279] dump_stack+0x13e/0x194 [ 861.509297] dump_header+0x178/0x6d4 [ 861.509309] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 861.509321] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 861.509339] ? ___ratelimit+0x50/0x519 [ 861.509353] oom_kill_process.cold+0x10/0xae3 [ 861.509364] ? lock_acquire+0x170/0x3f0 [ 861.509375] ? lock_downgrade+0x6e0/0x6e0 [ 861.509392] out_of_memory+0x2d5/0x1110 [ 861.509402] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 861.509416] ? oom_killer_disable+0x1c0/0x1c0 [ 861.509426] ? mutex_trylock+0x152/0x1a0 [ 861.509439] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 861.509465] ? warn_alloc+0xf0/0xf0 [ 861.509491] __alloc_pages_nodemask+0x5d3/0x700 [ 861.509501] ? lock_downgrade+0x6e0/0x6e0 [ 861.509512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.509521] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 861.509539] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 861.509554] alloc_pages_current+0xe7/0x1e0 [ 861.509568] ion_page_pool_alloc+0x118/0x1b0 [ 861.509580] ion_system_heap_allocate+0x134/0x8d0 [ 861.509593] ? rcu_read_lock_sched_held+0x10a/0x130 [ 861.509602] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 861.509613] ? ion_system_heap_free+0x240/0x240 [ 861.509627] ion_alloc+0x1e9/0x7d0 [ 861.509644] ? ion_dma_buf_release+0x40/0x40 [ 861.509661] ? __might_fault+0x177/0x1b0 [ 861.509677] ion_ioctl+0xef/0x1f8 [ 861.509687] ? ion_alloc.cold+0x3d/0x3d [ 861.509703] ? ion_alloc.cold+0x3d/0x3d [ 861.509715] do_vfs_ioctl+0x75a/0xfe0 [ 861.509727] ? selinux_file_mprotect+0x5c0/0x5c0 [ 861.509740] ? ioctl_preallocate+0x1a0/0x1a0 [ 861.509763] ? security_file_ioctl+0x76/0xb0 [ 861.509773] ? security_file_ioctl+0x83/0xb0 [ 861.509785] SyS_ioctl+0x7f/0xb0 [ 861.509794] ? do_vfs_ioctl+0xfe0/0xfe0 [ 861.509807] do_syscall_64+0x1d5/0x640 [ 861.509824] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 861.509832] RIP: 0033:0x7f5232e49469 [ 861.509837] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.528385] DMA32 free:18544kB min:36272kB low:45340kB high:54408kB active_anon:1459552kB inactive_anon:104440kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16320kB pagetables:33788kB bounce:0kB free_pcp:384kB local_pcp:276kB free_cma:0kB [ 861.534412] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 861.534418] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 861.534424] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 861.534430] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 861.534436] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 861.534575] Mem-Info: [ 861.549580] lowmem_reserve[]: [ 861.554652] active_anon:382080 inactive_anon:55381 isolated_anon:0 [ 861.554652] active_file:17690 inactive_file:3453 isolated_file:0 [ 861.554652] unevictable:0 dirty:9 writeback:0 unstable:0 [ 861.554652] slab_reclaimable:20160 slab_unreclaimable:122059 [ 861.554652] mapped:65344 shmem:16052 pagetables:9073 bounce:0 [ 861.554652] free:855460 free_pcp:99 free_cma:0 [ 861.554668] Node 0 active_anon:1463968kB inactive_anon:104440kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249816kB dirty:12kB writeback:0kB shmem:63316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 861.554674] Node 0 [ 861.574289] 0 [ 861.575416] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.575421] lowmem_reserve[]: 0 2557 [ 861.588873] 0 [ 861.589676] 2557 [ 861.593899] 0 [ 861.597454] 2557 2557 [ 861.597467] Node 0 DMA32 free:20568kB min:36272kB low:45340kB high:54408kB active_anon:1459552kB inactive_anon:104440kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16320kB pagetables:33788kB bounce:0kB free_pcp:396kB local_pcp:120kB free_cma:0kB [ 861.597489] lowmem_reserve[]: 0 0 0 0 0 [ 861.597512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.597532] lowmem_reserve[]: 0 0 0 0 0 [ 861.597553] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 861.597647] Node 0 DMA32: 1080*4kB (MEH) 448*8kB (UMEH) [ 861.612347] 0 [ 861.616422] 73*16kB (UMEH) 351*32kB (UMEH) 5*64kB (UH) 0*128kB 0*256kB 0*512kB [ 861.625917] 0 [ 861.626453] 0*1024kB [ 861.635806] 0*2048kB 0*4096kB = 20624kB [ 861.635819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 861.644059] Node 0 [ 861.647572] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 861.647609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.647616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.647623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 861.647628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 861.647632] 37196 total pagecache pages [ 861.647643] 0 pages in swap cache [ 861.647648] Swap cache stats: add 0, delete 0, find 0/0 [ 861.647652] Free swap = 0kB [ 861.647656] Total swap = 0kB [ 861.647663] 1965979 pages RAM [ 861.647667] 0 pages HighMem/MovableOnly [ 861.647670] 339053 pages reserved [ 861.647674] 0 pages cma reserved [ 861.647682] Out of memory: Kill process 12850 (syz-executor.2) score 1010 or sacrifice child [ 861.647717] Killed process 12850 (syz-executor.2) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 861.648152] syz-executor.2: [ 861.671225] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 861.672082] page allocation failure: order:0 [ 861.686734] lowmem_reserve[]: [ 861.689123] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 861.689134] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 861.702147] 0 [ 861.705356] CPU: 1 PID: 13151 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 861.705363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.705367] Call Trace: [ 861.705387] dump_stack+0x13e/0x194 [ 861.719849] 0 [ 861.725856] warn_alloc.cold+0x96/0x1af [ 861.725868] ? zone_watermark_ok_safe+0x280/0x280 [ 861.725888] ? wait_for_completion+0x390/0x390 [ 861.755150] oom_reaper: reaped process 12850 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 861.761797] __alloc_pages_slowpath+0x2114/0x26c0 [ 861.761823] ? warn_alloc+0xf0/0xf0 [ 861.761848] __alloc_pages_nodemask+0x5d3/0x700 [ 861.761863] ? lock_downgrade+0x6e0/0x6e0 [ 861.775394] 0 [ 861.776426] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.776439] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 861.776455] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 861.787880] 0 [ 861.790985] alloc_pages_current+0xe7/0x1e0 [ 861.790999] ion_page_pool_alloc+0x118/0x1b0 [ 861.791012] ion_system_heap_allocate+0x134/0x8d0 [ 861.793473] 0 [ 861.796507] ? rcu_read_lock_sched_held+0x10a/0x130 [ 861.796517] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 861.796527] ? ion_system_heap_free+0x240/0x240 [ 861.796549] ion_alloc+0x1e9/0x7d0 [ 861.858569] ? ion_dma_buf_release+0x40/0x40 [ 861.858588] ? __might_fault+0x177/0x1b0 [ 861.858603] ion_ioctl+0xef/0x1f8 [ 861.858614] ? ion_alloc.cold+0x3d/0x3d [ 861.858627] ? ion_alloc.cold+0x3d/0x3d [ 861.858640] do_vfs_ioctl+0x75a/0xfe0 [ 861.863625] Node 1 [ 861.888506] ? selinux_file_mprotect+0x5c0/0x5c0 [ 861.888520] ? ioctl_preallocate+0x1a0/0x1a0 [ 861.888541] ? security_file_ioctl+0x76/0xb0 [ 861.888551] ? security_file_ioctl+0x83/0xb0 [ 861.888562] SyS_ioctl+0x7f/0xb0 [ 861.888570] ? do_vfs_ioctl+0xfe0/0xfe0 [ 861.888583] do_syscall_64+0x1d5/0x640 [ 861.895903] Normal free:3399296kB min:53612kB low:67012kB high:80412kB active_anon:64352kB inactive_anon:105284kB active_file:70760kB inactive_file:13800kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1184kB pagetables:2504kB bounce:0kB free_pcp:688kB local_pcp:684kB free_cma:0kB [ 861.896172] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 861.899048] lowmem_reserve[]: [ 861.900486] RIP: 0033:0x7f5232e49469 [ 861.900492] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.900504] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 861.900509] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 861.900517] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 861.932633] 0 [ 861.933701] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 861.933708] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 861.952903] syz-executor.2: [ 861.960402] 0 [ 861.969026] page allocation failure: order:4 [ 861.983684] 0 [ 861.985893] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 861.986506] 0 [ 861.995718] 0 [ 861.995727] syz-executor.2 cpuset= [ 862.000853] 0 [ 862.005379] / [ 862.011818] mems_allowed=0-1 [ 862.018004] Node 0 [ 862.030645] CPU: 1 PID: 13151 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 862.035458] DMA: [ 862.043397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.043401] Call Trace: [ 862.043420] dump_stack+0x13e/0x194 [ 862.043436] warn_alloc.cold+0x96/0x1af [ 862.043444] ? zone_watermark_ok_safe+0x280/0x280 [ 862.043464] ? __alloc_pages_direct_compact+0xba/0x360 [ 862.052098] 83*4kB [ 862.056009] __alloc_pages_slowpath+0x2114/0x26c0 [ 862.056026] ? check_preemption_disabled+0x35/0x240 [ 862.063140] (UME) [ 862.064914] ? warn_alloc+0xf0/0xf0 [ 862.064939] __alloc_pages_nodemask+0x5d3/0x700 [ 862.069101] 57*8kB [ 862.070941] ? lock_downgrade+0x6e0/0x6e0 [ 862.070952] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 862.074064] (UME) [ 862.077997] ? SOFTIRQ_verbose+0x10/0x10 [ 862.078011] ? find_held_lock+0x2d/0x110 [ 862.078022] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 862.078036] alloc_pages_current+0xe7/0x1e0 [ 862.078049] ion_page_pool_alloc+0x118/0x1b0 [ 862.084726] 5*16kB [ 862.084839] ion_system_heap_allocate+0x134/0x8d0 [ 862.094249] (UM) [ 862.104159] ? _ion_heap_freelist_drain+0x6e/0x410 [ 862.104169] ? ion_system_heap_free+0x240/0x240 [ 862.104184] ion_alloc+0x611/0x7d0 [ 862.104199] ? ion_dma_buf_release+0x40/0x40 [ 862.107281] 6*32kB [ 862.132037] ? __might_fault+0x177/0x1b0 [ 862.132055] ion_ioctl+0xef/0x1f8 [ 862.132067] ? ion_alloc.cold+0x3d/0x3d [ 862.132080] ? ion_alloc.cold+0x3d/0x3d [ 862.132093] do_vfs_ioctl+0x75a/0xfe0 [ 862.132104] ? selinux_file_mprotect+0x5c0/0x5c0 [ 862.132116] ? ioctl_preallocate+0x1a0/0x1a0 [ 862.138553] (UE) [ 862.139685] ? security_file_ioctl+0x76/0xb0 [ 862.139696] ? security_file_ioctl+0x83/0xb0 [ 862.152127] 3*64kB [ 862.153763] SyS_ioctl+0x7f/0xb0 [ 862.161741] (UME) [ 862.170984] ? do_vfs_ioctl+0xfe0/0xfe0 [ 862.171001] do_syscall_64+0x1d5/0x640 [ 862.171017] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 862.171028] RIP: 0033:0x7f5232e49469 [ 862.173677] 3*128kB [ 862.177240] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.177251] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 862.177257] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 862.177265] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 862.183398] (UME) [ 862.187839] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 862.187845] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 862.222770] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 862.237990] 2*256kB [ 862.239767] 0 [ 862.243829] (ME) [ 862.252634] , order=0, oom_score_adj=1000 [ 862.255382] 2*512kB [ 862.260360] syz-executor.2 cpuset= [ 862.266671] (ME) [ 862.274196] / [ 862.279309] 1*1024kB [ 862.283589] mems_allowed=0-1 [ 862.286830] (E) [ 862.294011] CPU: 1 PID: 13151 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 862.298515] 1*2048kB [ 862.299771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.299776] Call Trace: [ 862.299792] dump_stack+0x13e/0x194 [ 862.299808] dump_header+0x178/0x6d4 [ 862.304597] (E) [ 862.308939] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 862.308950] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 862.308960] ? ___ratelimit+0x50/0x519 [ 862.308974] oom_kill_process.cold+0x10/0xae3 [ 862.308985] ? lock_acquire+0x170/0x3f0 [ 862.308996] ? lock_downgrade+0x6e0/0x6e0 [ 862.317908] 1*4096kB [ 862.321150] out_of_memory+0x2d5/0x1110 [ 862.321161] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 862.325201] (M) [ 862.329143] ? oom_killer_disable+0x1c0/0x1c0 [ 862.329155] ? mutex_trylock+0x152/0x1a0 [ 862.329168] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 862.329196] ? warn_alloc+0xf0/0xf0 [ 862.329219] __alloc_pages_nodemask+0x5d3/0x700 [ 862.362556] = 10340kB [ 862.363913] ? lock_downgrade+0x6e0/0x6e0 [ 862.363924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 862.363935] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 862.367068] Node 0 [ 862.370737] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 862.370751] alloc_pages_current+0xe7/0x1e0 [ 862.370764] ion_page_pool_alloc+0x118/0x1b0 [ 862.370778] ion_system_heap_allocate+0x134/0x8d0 [ 862.370792] ? _ion_heap_freelist_drain+0x6e/0x410 [ 862.382352] DMA32: [ 862.385750] ? ion_system_heap_free+0x240/0x240 [ 862.385768] ion_alloc+0x611/0x7d0 [ 862.395380] 1131*4kB [ 862.400331] ? ion_dma_buf_release+0x40/0x40 [ 862.400349] ? __might_fault+0x177/0x1b0 [ 862.400363] ion_ioctl+0xef/0x1f8 [ 862.400375] ? ion_alloc.cold+0x3d/0x3d [ 862.404229] (UMEH) [ 862.409584] ? ion_alloc.cold+0x3d/0x3d [ 862.409597] do_vfs_ioctl+0x75a/0xfe0 [ 862.409610] ? selinux_file_mprotect+0x5c0/0x5c0 [ 862.409624] ? ioctl_preallocate+0x1a0/0x1a0 [ 862.419832] 477*8kB [ 862.419917] ? security_file_ioctl+0x76/0xb0 [ 862.421685] (UMEH) 36*16kB [ 862.426087] ? security_file_ioctl+0x83/0xb0 [ 862.427954] (MEH) [ 862.434962] SyS_ioctl+0x7f/0xb0 [ 862.434972] ? do_vfs_ioctl+0xfe0/0xfe0 [ 862.434987] do_syscall_64+0x1d5/0x640 [ 862.436793] 363*32kB [ 862.438478] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 862.438487] RIP: 0033:0x7f5232e49469 [ 862.438493] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.438504] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 862.438513] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 862.447298] (UMEH) [ 862.448621] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 862.448627] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 862.448633] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 862.458111] Mem-Info: [ 862.461506] 4*64kB [ 862.479358] active_anon:382078 inactive_anon:50817 isolated_anon:0 [ 862.479358] active_file:17691 inactive_file:3462 isolated_file:0 [ 862.479358] unevictable:0 dirty:5 writeback:0 unstable:0 [ 862.479358] slab_reclaimable:20159 slab_unreclaimable:122252 [ 862.479358] mapped:65359 shmem:16052 pagetables:9038 bounce:0 [ 862.479358] free:856495 free_pcp:195 free_cma:0 [ 862.481633] (H) [ 862.485716] Node 0 active_anon:1463960kB inactive_anon:98064kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249876kB dirty:8kB writeback:0kB shmem:63316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 862.485722] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.485741] lowmem_reserve[]: [ 862.494458] 0*128kB [ 862.498734] 0 [ 862.506308] 0*256kB [ 862.509363] 2557 [ 862.515490] 0*512kB [ 862.516207] 2557 [ 862.526810] 0*1024kB [ 862.527906] 2557 [ 862.532608] 0*2048kB [ 862.535832] 2557 [ 862.535841] Node 0 DMA32 free:22188kB min:36272kB low:45340kB high:54408kB active_anon:1459544kB inactive_anon:98064kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16320kB pagetables:33648kB bounce:0kB free_pcp:800kB local_pcp:120kB free_cma:0kB [ 862.535864] lowmem_reserve[]: [ 862.551037] 0*4096kB [ 862.553399] 0 [ 862.560568] = 20788kB [ 862.564511] 0 0 0 0 [ 862.564532] Node 0 [ 862.571304] Node 0 [ 862.573486] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.581592] Normal: [ 862.584410] lowmem_reserve[]: [ 862.587981] 0*4kB [ 862.595183] 0 [ 862.595455] 0*8kB [ 862.599334] 0 [ 862.605737] 0*16kB [ 862.613101] 0 [ 862.616427] 0*32kB [ 862.620059] 0 0 [ 862.620073] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 862.620169] Node 0 DMA32: 1131*4kB (UMEH) 640*8kB (UMEH) 51*16kB (UMEH) 363*32kB (UMEH) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22332kB [ 862.620242] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 862.624825] 0*64kB [ 862.626224] 0*1024kB [ 862.629169] 0*128kB [ 862.636691] 0*2048kB [ 862.642302] 0*256kB [ 862.645245] 0*4096kB [ 862.648377] 0*512kB [ 862.660097] = 0kB [ 862.665408] 0*1024kB [ 862.670451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.683292] 0*2048kB [ 862.687443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.695337] 0*4096kB [ 862.704998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.711779] = 0kB [ 862.718043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.722906] Node 1 [ 862.723451] 37208 total pagecache pages [ 862.725084] Normal: [ 862.728741] 0 pages in swap cache [ 862.733641] 99*4kB [ 862.741540] Swap cache stats: add 0, delete 0, find 0/0 [ 862.744551] (UME) [ 862.753553] Free swap = 0kB [ 862.758374] 98*8kB [ 862.759945] Total swap = 0kB [ 862.762680] (ME) [ 862.764589] 1965979 pages RAM [ 862.773981] 77*16kB [ 862.776390] 0 pages HighMem/MovableOnly [ 862.778716] (ME) 65*32kB (UM) 52*64kB (UME) 36*128kB (M) 26*256kB (M) 13*512kB (UM) 2*1024kB (M) 3*2048kB (UME) 820*4096kB (M) = 3392652kB [ 862.778790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.778798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.778805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.778811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.778818] 37208 total pagecache pages [ 862.788491] 339053 pages reserved [ 862.795856] 0 pages in swap cache [ 862.799172] 0 pages cma reserved [ 862.803514] Swap cache stats: add 0, delete 0, find 0/0 [ 862.805149] Out of memory: Kill process 12911 (syz-executor.3) score 1010 or sacrifice child [ 862.805189] Killed process 12911 (syz-executor.3) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 862.813962] Free swap = 0kB [ 862.837563] syz-executor.2: [ 862.842814] Total swap = 0kB [ 862.843422] page allocation failure: order:0 [ 862.845696] 1965979 pages RAM [ 862.861190] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 862.869416] 0 pages HighMem/MovableOnly [ 862.871325] 0 [ 862.872253] 339053 pages reserved [ 862.876846] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 862.876871] CPU: 1 PID: 13151 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 862.880521] 0 pages cma reserved [ 862.882966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.882971] Call Trace: [ 862.882991] dump_stack+0x13e/0x194 [ 862.883006] warn_alloc.cold+0x96/0x1af [ 863.513186] ? zone_watermark_ok_safe+0x280/0x280 [ 863.518025] ? wait_for_completion+0x390/0x390 [ 863.522596] __alloc_pages_slowpath+0x2114/0x26c0 [ 863.527431] ? warn_alloc+0xf0/0xf0 [ 863.531049] __alloc_pages_nodemask+0x5d3/0x700 [ 863.535698] ? lock_downgrade+0x6e0/0x6e0 [ 863.539831] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 863.544567] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 863.549574] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 863.555202] alloc_pages_current+0xe7/0x1e0 [ 863.559532] ion_page_pool_alloc+0x118/0x1b0 [ 863.563927] ion_system_heap_allocate+0x134/0x8d0 [ 863.568806] ? _ion_heap_freelist_drain+0x6e/0x410 [ 863.573739] ? ion_system_heap_free+0x240/0x240 [ 863.578436] ion_alloc+0x611/0x7d0 [ 863.581986] ? ion_dma_buf_release+0x40/0x40 [ 863.586384] ? __might_fault+0x177/0x1b0 [ 863.590432] ion_ioctl+0xef/0x1f8 [ 863.594064] ? ion_alloc.cold+0x3d/0x3d [ 863.598063] ? ion_alloc.cold+0x3d/0x3d [ 863.602026] do_vfs_ioctl+0x75a/0xfe0 [ 863.605842] ? selinux_file_mprotect+0x5c0/0x5c0 [ 863.610586] ? ioctl_preallocate+0x1a0/0x1a0 [ 863.614992] ? security_file_ioctl+0x76/0xb0 [ 863.619404] ? security_file_ioctl+0x83/0xb0 [ 863.623798] SyS_ioctl+0x7f/0xb0 [ 863.627148] ? do_vfs_ioctl+0xfe0/0xfe0 [ 863.631243] do_syscall_64+0x1d5/0x640 [ 863.635152] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 863.640341] RIP: 0033:0x7f5232e49469 [ 863.644038] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.651736] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 863.659019] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 863.666297] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 863.673551] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 863.680840] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 863.691023] warn_alloc_show_mem: 2 callbacks suppressed [ 863.691027] Mem-Info: [ 863.698982] active_anon:382076 inactive_anon:46253 isolated_anon:0 [ 863.698982] active_file:17692 inactive_file:3477 isolated_file:0 [ 863.698982] unevictable:0 dirty:20 writeback:0 unstable:0 [ 863.698982] slab_reclaimable:20157 slab_unreclaimable:122270 [ 863.698982] mapped:65386 shmem:16052 pagetables:9003 bounce:0 [ 863.698982] free:893245 free_pcp:45 free_cma:0 [ 863.707279] syz-executor.1: [ 863.733072] Node 0 active_anon:1463960kB inactive_anon:96176kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249984kB dirty:12kB writeback:0kB shmem:63316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 863.749062] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 863.764780] Node 1 active_anon:64344kB inactive_anon:88836kB active_file:70760kB inactive_file:13908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11560kB dirty:68kB writeback:0kB shmem:892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 863.780039] syz-executor.1 cpuset= [ 863.802139] Node 0 DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 863.802161] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 863.802183] Node 0 DMA32 free:153800kB min:36272kB low:45340kB high:54408kB active_anon:1459544kB inactive_anon:96176kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16320kB pagetables:33648kB bounce:0kB free_pcp:184kB local_pcp:64kB free_cma:0kB [ 863.802203] lowmem_reserve[]: 0 0 0 0 0 [ 863.802225] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 863.802244] lowmem_reserve[]: 0 0 0 0 0 [ 863.802266] Node 1 Normal free:3408412kB min:53612kB low:67012kB high:80412kB active_anon:64344kB inactive_anon:88836kB active_file:70760kB inactive_file:13908kB unevictable:0kB writepending:68kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1120kB pagetables:2364kB bounce:0kB free_pcp:168kB local_pcp:168kB free_cma:0kB [ 863.802289] lowmem_reserve[]: 0 0 0 0 0 [ 863.802311] Node 0 DMA: 84*4kB (UME) 66*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) [ 863.813941] / [ 863.833259] 1*2048kB [ 863.842961] mems_allowed=0-1 [ 863.867366] (E) [ 863.875479] CPU: 0 PID: 13112 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 863.896430] 1*4096kB [ 863.900370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.900375] Call Trace: [ 863.900394] dump_stack+0x13e/0x194 [ 863.900410] warn_alloc.cold+0x96/0x1af [ 863.900420] ? zone_watermark_ok_safe+0x280/0x280 [ 863.900441] ? __alloc_pages_direct_compact+0xba/0x360 [ 863.900455] __alloc_pages_slowpath+0x2114/0x26c0 [ 863.900472] ? check_preemption_disabled+0x35/0x240 [ 863.930306] (M) [ 863.934212] ? warn_alloc+0xf0/0xf0 [ 863.946895] = 10352kB [ 863.948630] __alloc_pages_nodemask+0x5d3/0x700 [ 863.948644] ? lock_downgrade+0x6e0/0x6e0 [ 863.948656] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 863.951079] Node 0 [ 863.954190] ? SOFTIRQ_verbose+0x10/0x10 [ 863.956147] DMA32: [ 863.964016] ? find_held_lock+0x2d/0x110 [ 863.964026] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 863.964041] alloc_pages_current+0xe7/0x1e0 [ 863.964054] ion_page_pool_alloc+0x118/0x1b0 [ 863.964066] ion_system_heap_allocate+0x134/0x8d0 [ 863.964079] ? _ion_heap_freelist_drain+0x6e/0x410 [ 863.964088] ? ion_system_heap_free+0x240/0x240 [ 863.964098] ? ion_alloc+0x17b/0x7d0 [ 863.964113] ion_alloc+0x611/0x7d0 [ 863.977249] 4178*4kB [ 863.978595] ? ion_dma_buf_release+0x40/0x40 [ 863.982204] (UMEH) [ 863.986179] ? __might_fault+0x177/0x1b0 [ 863.994163] 6499*8kB [ 863.996271] ion_ioctl+0xef/0x1f8 [ 864.001139] (UMEH) [ 864.006107] ? ion_alloc.cold+0x3d/0x3d [ 864.008113] 3184*16kB [ 864.011675] ? selinux_file_ioctl+0x3f7/0x560 [ 864.014057] (UMEH) [ 864.018709] ? ion_alloc.cold+0x3d/0x3d [ 864.018721] do_vfs_ioctl+0x75a/0xfe0 [ 864.018731] ? selinux_file_mprotect+0x5c0/0x5c0 [ 864.018744] ? ioctl_preallocate+0x1a0/0x1a0 [ 864.018765] ? security_file_ioctl+0x76/0xb0 [ 864.018775] ? security_file_ioctl+0x83/0xb0 [ 864.023522] 1035*32kB [ 864.027928] SyS_ioctl+0x7f/0xb0 [ 864.027937] ? do_vfs_ioctl+0xfe0/0xfe0 [ 864.027951] do_syscall_64+0x1d5/0x640 [ 864.027969] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 864.027978] RIP: 0033:0x7fce30cbc469 [ 864.027982] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.027992] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 864.027997] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 864.028003] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 864.028009] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 864.028014] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 864.217605] (UMEH) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 153088kB [ 864.226307] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.233242] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 864.239669] Node 1 Normal: 250*4kB (ME) 207*8kB (ME) 182*16kB (UME) 148*32kB (UM) 129*64kB (ME) 74*128kB (UM) 31*256kB (UM) 14*512kB (UM) 3*1024kB (UM) 3*2048kB (UME) 819*4096kB (M) = 3406976kB [ 864.255261] syz-executor.1 cpuset= [ 864.268433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.272508] / mems_allowed=0-1 [ 864.283327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.284422] CPU: 0 PID: 13112 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 864.294294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.300852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.300857] Call Trace: [ 864.300875] dump_stack+0x13e/0x194 [ 864.300891] dump_header+0x178/0x6d4 [ 864.300902] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 864.300912] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 864.300923] ? ___ratelimit+0x50/0x519 [ 864.312895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.319107] oom_kill_process.cold+0x10/0xae3 [ 864.319120] ? lock_acquire+0x170/0x3f0 [ 864.319130] ? lock_downgrade+0x6e0/0x6e0 [ 864.319144] out_of_memory+0x2d5/0x1110 [ 864.319154] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 864.319166] ? oom_killer_disable+0x1c0/0x1c0 [ 864.319176] ? mutex_trylock+0x152/0x1a0 [ 864.319189] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 864.325503] 37223 total pagecache pages [ 864.329282] ? warn_alloc+0xf0/0xf0 [ 864.329308] __alloc_pages_nodemask+0x5d3/0x700 [ 864.329320] ? lock_downgrade+0x6e0/0x6e0 [ 864.329329] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 864.329345] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 864.329358] alloc_pages_current+0xe7/0x1e0 [ 864.329371] ion_page_pool_alloc+0x118/0x1b0 [ 864.329384] ion_system_heap_allocate+0x134/0x8d0 [ 864.337884] 0 pages in swap cache [ 864.339497] ? _ion_heap_freelist_drain+0x6e/0x410 [ 864.343358] Swap cache stats: add 0, delete 0, find 0/0 [ 864.351918] ? ion_system_heap_free+0x240/0x240 [ 864.351929] ? ion_alloc+0x17b/0x7d0 [ 864.351940] ion_alloc+0x611/0x7d0 [ 864.351960] ? ion_dma_buf_release+0x40/0x40 [ 864.351978] ? __might_fault+0x177/0x1b0 [ 864.351992] ion_ioctl+0xef/0x1f8 [ 864.352001] ? ion_alloc.cold+0x3d/0x3d [ 864.352017] ? selinux_file_ioctl+0x3f7/0x560 [ 864.362234] Free swap = 0kB [ 864.364591] ? ion_alloc.cold+0x3d/0x3d [ 864.368669] Total swap = 0kB [ 864.373514] do_vfs_ioctl+0x75a/0xfe0 [ 864.380704] 1965979 pages RAM [ 864.382041] ? selinux_file_mprotect+0x5c0/0x5c0 [ 864.386862] 0 pages HighMem/MovableOnly [ 864.390823] ? ioctl_preallocate+0x1a0/0x1a0 [ 864.390843] ? security_file_ioctl+0x76/0xb0 [ 864.390852] ? security_file_ioctl+0x83/0xb0 [ 864.390862] SyS_ioctl+0x7f/0xb0 [ 864.390870] ? do_vfs_ioctl+0xfe0/0xfe0 [ 864.390883] do_syscall_64+0x1d5/0x640 [ 864.390899] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 864.390908] RIP: 0033:0x7fce30cbc469 [ 864.390913] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.390923] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 864.390929] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 864.390934] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 864.390940] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 864.390945] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 864.396814] Mem-Info: [ 864.405969] 339053 pages reserved [ 864.413072] active_anon:382076 inactive_anon:46253 isolated_anon:0 [ 864.413072] active_file:17692 inactive_file:3477 isolated_file:0 [ 864.413072] unevictable:0 dirty:20 writeback:0 unstable:0 [ 864.413072] slab_reclaimable:20132 slab_unreclaimable:122924 [ 864.413072] mapped:65386 shmem:16052 pagetables:9003 bounce:0 [ 864.413072] free:858754 free_pcp:88 free_cma:0 [ 864.415135] 0 pages cma reserved [ 864.418910] Node 0 active_anon:1463960kB inactive_anon:96176kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249984kB dirty:12kB writeback:0kB shmem:63316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 864.649145] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.649169] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 864.649191] Node 0 DMA32 free:20720kB min:36272kB low:45340kB high:54408kB active_anon:1459544kB inactive_anon:96176kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16320kB pagetables:33648kB bounce:0kB free_pcp:352kB local_pcp:148kB free_cma:0kB [ 864.649212] lowmem_reserve[]: 0 0 0 0 0 [ 864.714872] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 864.741432] lowmem_reserve[]: 0 0 0 0 0 [ 864.745459] Node 0 DMA: 83*4kB (UME) 64*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10332kB [ 864.761364] Node 0 DMA32: 1110*4kB (MEH) 656*8kB (UMEH) 43*16kB (UMEH) 361*32kB (UMEH) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22248kB [ 864.776007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 864.786921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.795938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.804616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 864.813582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 864.822268] 37240 total pagecache pages [ 864.826255] 0 pages in swap cache [ 864.829779] Swap cache stats: add 0, delete 0, find 0/0 [ 864.835254] Free swap = 0kB [ 864.838391] Total swap = 0kB [ 864.841397] 1965979 pages RAM [ 864.844520] 0 pages HighMem/MovableOnly [ 864.848577] 339053 pages reserved [ 864.852021] 0 pages cma reserved [ 864.855372] Out of memory: Kill process 12956 (syz-executor.3) score 1010 or sacrifice child [ 864.864093] Killed process 12956 (syz-executor.3) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 864.887158] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 864.898827] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 864.899592] oom_reaper: reaped process 12956 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 864.903981] CPU: 1 PID: 13112 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 864.921878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.931229] Call Trace: [ 864.933829] dump_stack+0x13e/0x194 [ 864.937464] warn_alloc.cold+0x96/0x1af [ 864.941448] ? zone_watermark_ok_safe+0x280/0x280 [ 864.946313] ? wait_for_completion+0x390/0x390 [ 864.950909] __alloc_pages_slowpath+0x2114/0x26c0 [ 864.955775] ? warn_alloc+0xf0/0xf0 [ 864.959430] __alloc_pages_nodemask+0x5d3/0x700 [ 864.964119] ? lock_downgrade+0x6e0/0x6e0 [ 864.968386] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 864.973419] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 864.979087] alloc_pages_current+0xe7/0x1e0 [ 864.983426] ion_page_pool_alloc+0x118/0x1b0 [ 864.987975] ion_system_heap_allocate+0x134/0x8d0 [ 864.992815] ? _ion_heap_freelist_drain+0x6e/0x410 [ 864.997868] ? ion_system_heap_free+0x240/0x240 [ 865.002529] ? ion_alloc+0x17b/0x7d0 [ 865.006252] ion_alloc+0x611/0x7d0 [ 865.009804] ? ion_dma_buf_release+0x40/0x40 [ 865.014224] ? __might_fault+0x177/0x1b0 [ 865.018272] ion_ioctl+0xef/0x1f8 [ 865.021739] ? ion_alloc.cold+0x3d/0x3d [ 865.025702] ? selinux_file_ioctl+0x3f7/0x560 [ 865.030181] ? ion_alloc.cold+0x3d/0x3d [ 865.034139] do_vfs_ioctl+0x75a/0xfe0 [ 865.037923] ? selinux_file_mprotect+0x5c0/0x5c0 [ 865.042687] ? ioctl_preallocate+0x1a0/0x1a0 [ 865.047214] ? security_file_ioctl+0x76/0xb0 [ 865.051633] ? security_file_ioctl+0x83/0xb0 [ 865.056023] SyS_ioctl+0x7f/0xb0 [ 865.059372] ? do_vfs_ioctl+0xfe0/0xfe0 [ 865.063332] do_syscall_64+0x1d5/0x640 [ 865.067208] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 865.072378] RIP: 0033:0x7fce30cbc469 [ 865.076070] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.083762] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 865.091013] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 865.098265] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 865.105517] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 865.112773] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 865.121036] warn_alloc_show_mem: 1 callbacks suppressed [ 865.121039] Mem-Info: [ 865.128919] active_anon:382075 inactive_anon:41689 isolated_anon:0 [ 865.128919] active_file:17961 inactive_file:3496 isolated_file:0 [ 865.128919] unevictable:0 dirty:27 writeback:0 unstable:0 [ 865.128919] slab_reclaimable:20140 slab_unreclaimable:122845 [ 865.128919] mapped:65408 shmem:16052 pagetables:8939 bounce:0 [ 865.128919] free:862868 free_pcp:409 free_cma:0 [ 865.163297] Node 0 active_anon:1463884kB inactive_anon:89948kB active_file:8kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250080kB dirty:20kB writeback:0kB shmem:63312kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 865.191670] Node 1 active_anon:64416kB inactive_anon:76808kB active_file:71836kB inactive_file:13948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11560kB dirty:88kB writeback:0kB shmem:896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 865.219788] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 865.246478] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 865.252310] Node 0 DMA32 free:32580kB min:36272kB low:45340kB high:54408kB active_anon:1459468kB inactive_anon:89948kB active_file:8kB inactive_file:36kB unevictable:0kB writepending:20kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33532kB bounce:0kB free_pcp:784kB local_pcp:148kB free_cma:0kB [ 865.281859] lowmem_reserve[]: 0 0 0 0 0 [ 865.285857] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 865.311416] lowmem_reserve[]: 0 0 0 0 0 [ 865.315453] Node 1 Normal free:3409040kB min:53612kB low:67012kB high:80412kB active_anon:64416kB inactive_anon:76808kB active_file:71836kB inactive_file:13948kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1088kB pagetables:2224kB bounce:0kB free_pcp:824kB local_pcp:168kB free_cma:0kB [ 865.345634] lowmem_reserve[]: 0 0 0 0 0 [ 865.349714] Node 0 DMA: 83*4kB (UME) 64*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10332kB [ 865.365656] Node 0 DMA32: 1347*4kB (UMEH) 1511*8kB (UMEH) 188*16kB (UMEH) 368*32kB (UMEH) 5*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32580kB [ 865.381220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 865.392172] Node 1 Normal: 246*4kB (UME) 285*8kB (ME) 249*16kB (UME) 204*32kB (ME) 172*64kB (M) 90*128kB (M) 34*256kB (M) 16*512kB (UM) 1*1024kB (M) 4*2048kB (UME) 817*4096kB (M) = 3408848kB [ 865.409503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.418445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.427013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 865.435919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 865.444603] 37516 total pagecache pages [ 865.449441] 0 pages in swap cache [ 865.452921] Swap cache stats: add 0, delete 0, find 0/0 [ 865.458347] Free swap = 0kB [ 865.461388] Total swap = 0kB [ 865.464393] 1965979 pages RAM [ 865.467568] 0 pages HighMem/MovableOnly 21:46:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:35 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:35 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) 21:46:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 865.471544] 339053 pages reserved [ 865.474969] 0 pages cma reserved 21:46:35 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x800000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xe012, @private0, 0x4}}}, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0) 21:46:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000700a0000980000006001000098000000600100009800000071220000d8090000d8090000d8090000d809000004000000000000000000000000000000ac1414bb0000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000080ac1e00010000000000000000000000006970766c616e310000000000000000004272696467655f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61726b000000000000000000000000000000000000000000000000000100000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000002ac1e0001000000000000100076657468305f6df324428b6170000000766972745f776966693000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000500878080000000000000000000000000000000000000000e0077533320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af7002aacb06e6ba000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000aed3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e6713f80828d4d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000b010000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) [ 865.786562] net_ratelimit: 11 callbacks suppressed [ 865.786567] ip_tables: iptables: counters copy to user failed while replacing table [ 865.879333] ip_tables: iptables: counters copy to user failed while replacing table 21:46:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000700a0000980000006001000098000000600100009800000071220000d8090000d8090000d8090000d809000004000000000000000000000000000000ac1414bb0000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000080ac1e00010000000000000000000000006970766c616e310000000000000000004272696467655f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61726b000000000000000000000000000000000000000000000000000100000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000002ac1e0001000000000000100076657468305f6df324428b6170000000766972745f776966693000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000500878080000000000000000000000000000000000000000e0077533320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af7002aacb06e6ba000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000aed3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e6713f80828d4d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000b010000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) [ 866.068906] ip_tables: iptables: counters copy to user failed while replacing table 21:46:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000700a0000980000006001000098000000600100009800000071220000d8090000d8090000d8090000d809000004000000000000000000000000000000ac1414bb0000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000080ac1e00010000000000000000000000006970766c616e310000000000000000004272696467655f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61726b000000000000000000000000000000000000000000000000000100000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000002ac1e0001000000000000100076657468305f6df324428b6170000000766972745f776966693000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000500878080000000000000000000000000000000000000000e0077533320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af7002aacb06e6ba000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000aed3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e6713f80828d4d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000b010000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) [ 866.214721] ip_tables: iptables: counters copy to user failed while replacing table 21:46:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000700a0000980000006001000098000000600100009800000071220000d8090000d8090000d8090000d809000004000000000000000000000000000000ac1414bb0000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000080ac1e00010000000000000000000000006970766c616e310000000000000000004272696467655f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61726b000000000000000000000000000000000000000000000000000100000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000002ac1e0001000000000000100076657468305f6df324428b6170000000766972745f776966693000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000500878080000000000000000000000000000000000000000e0077533320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af7002aacb06e6ba000000000000000000000000000000000000000000000000e0ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000aed3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e6713f80828d4d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000b010000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) [ 866.300827] ip_tables: iptables: counters copy to user failed while replacing table 21:46:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8bdda3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfafc72ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c7a59c4fbad5daac39cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31b76f4eb8af9edcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb07faf425f2b8c041ed6e416868a8f0e1baf4866becd3b98b477c2771364df5e5fc6c4dcd0f3"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) [ 866.492051] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 866.493167] syz-executor.4: [ 866.504668] syz-executor.5: [ 866.509694] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 866.523245] page allocation failure: order:4 [ 866.533885] page allocation failure: order:4 [ 866.534121] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 866.539293] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 866.544080] 0 [ 866.556323] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 866.565852] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 866.566651] CPU: 1 PID: 13181 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 866.579291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.580134] syz-executor.5 cpuset= [ 866.588627] Call Trace: [ 866.588647] dump_stack+0x13e/0x194 [ 866.588664] warn_alloc.cold+0x96/0x1af [ 866.588674] ? zone_watermark_ok_safe+0x280/0x280 [ 866.588695] ? __alloc_pages_direct_compact+0xba/0x360 [ 866.603938] / [ 866.607157] __alloc_pages_slowpath+0x2114/0x26c0 [ 866.618923] ? retint_kernel+0x2d/0x2d [ 866.622574] mems_allowed=0-1 [ 866.622822] ? warn_alloc+0xf0/0xf0 [ 866.629542] __alloc_pages_nodemask+0x5d3/0x700 [ 866.634197] ? lock_downgrade+0x6e0/0x6e0 [ 866.638326] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 866.643326] ? save_trace+0x290/0x290 [ 866.647112] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 866.652720] alloc_pages_current+0xe7/0x1e0 [ 866.657026] ion_page_pool_alloc+0x118/0x1b0 [ 866.661417] ion_system_heap_allocate+0x134/0x8d0 [ 866.666241] ? rcu_read_lock_sched_held+0x10a/0x130 [ 866.671242] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 866.676079] ? ion_system_heap_free+0x240/0x240 [ 866.680736] ion_alloc+0x1e9/0x7d0 [ 866.684268] ? ion_dma_buf_release+0x40/0x40 [ 866.688677] ? __might_fault+0x177/0x1b0 [ 866.692742] ion_ioctl+0xef/0x1f8 [ 866.696194] ? ion_alloc.cold+0x3d/0x3d [ 866.700154] ? selinux_file_ioctl+0x3f7/0x560 [ 866.704628] ? ion_alloc.cold+0x3d/0x3d [ 866.708597] do_vfs_ioctl+0x75a/0xfe0 [ 866.712382] ? selinux_file_mprotect+0x5c0/0x5c0 [ 866.717121] ? ioctl_preallocate+0x1a0/0x1a0 [ 866.721532] ? security_file_ioctl+0x76/0xb0 [ 866.725921] ? security_file_ioctl+0x83/0xb0 [ 866.730321] SyS_ioctl+0x7f/0xb0 [ 866.733669] ? do_vfs_ioctl+0xfe0/0xfe0 [ 866.737634] do_syscall_64+0x1d5/0x640 [ 866.741511] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 866.746682] RIP: 0033:0x7f5232e49469 [ 866.750390] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.760086] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 866.767347] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 866.774598] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 866.781850] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 866.789103] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 866.796370] CPU: 0 PID: 13182 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 866.799937] 0 [ 866.804250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.804254] Call Trace: [ 866.804272] dump_stack+0x13e/0x194 [ 866.804290] warn_alloc.cold+0x96/0x1af [ 866.806035] syz-executor.4 cpuset= [ 866.815333] ? zone_watermark_ok_safe+0x280/0x280 [ 866.815351] ? __alloc_pages_direct_compact+0xba/0x360 [ 866.815364] __alloc_pages_slowpath+0x2114/0x26c0 [ 866.815378] ? check_preemption_disabled+0x35/0x240 [ 866.815401] ? warn_alloc+0xf0/0xf0 [ 866.815423] __alloc_pages_nodemask+0x5d3/0x700 [ 866.815435] ? lock_downgrade+0x6e0/0x6e0 [ 866.815445] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 866.815455] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 866.818424] / [ 866.821636] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 866.825672] mems_allowed=0-1 [ 866.829115] alloc_pages_current+0xe7/0x1e0 [ 866.829129] ion_page_pool_alloc+0x118/0x1b0 [ 866.829142] ion_system_heap_allocate+0x134/0x8d0 [ 866.829155] ? rcu_read_lock_sched_held+0x10a/0x130 [ 866.829164] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 866.829174] ? ion_system_heap_free+0x240/0x240 [ 866.829189] ion_alloc+0x1e9/0x7d0 [ 866.829205] ? ion_dma_buf_release+0x40/0x40 [ 866.917566] ? __might_fault+0x177/0x1b0 [ 866.921616] ion_ioctl+0xef/0x1f8 [ 866.925063] ? ion_alloc.cold+0x3d/0x3d [ 866.929045] ? selinux_file_ioctl+0x3f7/0x560 [ 866.933539] ? ion_alloc.cold+0x3d/0x3d [ 866.937526] do_vfs_ioctl+0x75a/0xfe0 [ 866.941328] ? selinux_file_mprotect+0x5c0/0x5c0 [ 866.946089] ? ioctl_preallocate+0x1a0/0x1a0 [ 866.950503] ? security_file_ioctl+0x76/0xb0 [ 866.954897] ? security_file_ioctl+0x83/0xb0 [ 866.959304] SyS_ioctl+0x7f/0xb0 [ 866.962666] ? do_vfs_ioctl+0xfe0/0xfe0 [ 866.966636] do_syscall_64+0x1d5/0x640 [ 866.970517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 866.975695] RIP: 0033:0x7fce30cbc469 [ 866.979422] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.987148] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 866.994404] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 867.001662] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 867.008920] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 867.016181] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 867.030510] CPU: 1 PID: 13178 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 867.038428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.047784] Call Trace: [ 867.050378] dump_stack+0x13e/0x194 [ 867.054013] warn_alloc.cold+0x96/0x1af [ 867.057991] ? zone_watermark_ok_safe+0x280/0x280 [ 867.062854] ? __alloc_pages_direct_compact+0xba/0x360 [ 867.068130] __alloc_pages_slowpath+0x2114/0x26c0 [ 867.072972] ? retint_kernel+0x2d/0x2d [ 867.076868] ? warn_alloc+0xf0/0xf0 [ 867.080507] __alloc_pages_nodemask+0x5d3/0x700 [ 867.085183] ? lock_downgrade+0x6e0/0x6e0 [ 867.089334] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 867.094349] ? check_preemption_disabled+0x35/0x240 [ 867.096669] Mem-Info: [ 867.099453] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 867.099470] alloc_pages_current+0xe7/0x1e0 [ 867.099485] ion_page_pool_alloc+0x118/0x1b0 [ 867.099499] ion_system_heap_allocate+0x134/0x8d0 [ 867.099511] ? rcu_read_lock_sched_held+0x10a/0x130 [ 867.102772] active_anon:382322 inactive_anon:43714 isolated_anon:0 [ 867.102772] active_file:18275 inactive_file:3669 isolated_file:0 [ 867.102772] unevictable:0 dirty:125 writeback:0 unstable:0 [ 867.102772] slab_reclaimable:20153 slab_unreclaimable:123281 [ 867.102772] mapped:65714 shmem:18077 pagetables:9098 bounce:0 [ 867.102772] free:898541 free_pcp:111 free_cma:0 [ 867.107510] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 867.107525] ? ion_system_heap_free+0x240/0x240 [ 867.107543] ion_alloc+0x1e9/0x7d0 [ 867.107557] ? ion_dma_buf_release+0x40/0x40 [ 867.107575] ? __might_fault+0x177/0x1b0 [ 867.107589] ion_ioctl+0xef/0x1f8 [ 867.107600] ? ion_alloc.cold+0x3d/0x3d [ 867.121991] Node 0 active_anon:1464520kB inactive_anon:98052kB active_file:1228kB inactive_file:1508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250200kB dirty:44kB writeback:0kB shmem:71416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 867.126132] ? selinux_file_ioctl+0x3f7/0x560 [ 867.126145] ? ion_alloc.cold+0x3d/0x3d [ 867.126157] do_vfs_ioctl+0x75a/0xfe0 [ 867.126178] ? selinux_file_mprotect+0x5c0/0x5c0 [ 867.180269] Node 0 [ 867.182114] ? ioctl_preallocate+0x1a0/0x1a0 [ 867.182139] ? security_file_ioctl+0x76/0xb0 [ 867.182150] ? security_file_ioctl+0x83/0xb0 [ 867.185947] DMA free:10352kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.189576] SyS_ioctl+0x7f/0xb0 [ 867.189586] ? do_vfs_ioctl+0xfe0/0xfe0 [ 867.189601] do_syscall_64+0x1d5/0x640 [ 867.189617] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 867.189626] RIP: 0033:0x7fd58e5e9469 [ 867.189632] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.189642] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 867.189648] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 867.189657] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 867.223620] lowmem_reserve[]: [ 867.226533] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 867.226540] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 867.228913] CPU: 1 PID: 13175 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 867.237281] 0 [ 867.237326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.241837] 2557 [ 867.246095] Call Trace: [ 867.246115] dump_stack+0x13e/0x194 [ 867.246130] warn_alloc.cold+0x96/0x1af [ 867.246141] ? zone_watermark_ok_safe+0x280/0x280 [ 867.251254] 2557 [ 867.276367] ? __alloc_pages_direct_compact+0xba/0x360 [ 867.276382] __alloc_pages_slowpath+0x2114/0x26c0 [ 867.276394] ? check_preemption_disabled+0x35/0x240 [ 867.276415] ? warn_alloc+0xf0/0xf0 [ 867.276440] __alloc_pages_nodemask+0x5d3/0x700 [ 867.285978] 2557 [ 867.287619] ? lock_downgrade+0x6e0/0x6e0 [ 867.287630] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 867.287641] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 867.287659] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 867.287675] alloc_pages_current+0xe7/0x1e0 [ 867.287691] ion_page_pool_alloc+0x118/0x1b0 [ 867.296418] 2557 [ 867.296563] ion_system_heap_allocate+0x134/0x8d0 [ 867.311532] ? rcu_read_lock_sched_held+0x10a/0x130 [ 867.311542] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 867.311555] ? ion_system_heap_free+0x240/0x240 [ 867.311570] ion_alloc+0x1e9/0x7d0 [ 867.311585] ? ion_dma_buf_release+0x40/0x40 [ 867.318930] Node 0 [ 867.326107] ? __might_fault+0x177/0x1b0 [ 867.326126] ion_ioctl+0xef/0x1f8 [ 867.326138] ? ion_alloc.cold+0x3d/0x3d [ 867.326154] ? selinux_file_ioctl+0x3f7/0x560 [ 867.333713] DMA32 free:176320kB min:36272kB low:45340kB high:54408kB active_anon:1460104kB inactive_anon:98052kB active_file:1228kB inactive_file:1508kB unevictable:0kB writepending:44kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16416kB pagetables:33816kB bounce:0kB free_pcp:652kB local_pcp:316kB free_cma:0kB [ 867.336501] ? ion_alloc.cold+0x3d/0x3d [ 867.336516] do_vfs_ioctl+0x75a/0xfe0 [ 867.336530] ? selinux_file_mprotect+0x5c0/0x5c0 [ 867.336545] ? ioctl_preallocate+0x1a0/0x1a0 [ 867.346284] lowmem_reserve[]: [ 867.351699] ? security_file_ioctl+0x76/0xb0 [ 867.351709] ? security_file_ioctl+0x83/0xb0 [ 867.351724] SyS_ioctl+0x7f/0xb0 [ 867.351734] ? do_vfs_ioctl+0xfe0/0xfe0 [ 867.351750] do_syscall_64+0x1d5/0x640 [ 867.351769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 867.356324] 0 [ 867.362891] RIP: 0033:0x7fe47ef7c469 [ 867.362896] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.362906] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 867.362912] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 867.362918] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 867.362924] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 867.362929] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 867.685111] oom_reaper: reaped process 13181 (syz-executor.2), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB [ 867.752936] oom_reaper: reaped process 13178 (syz-executor.4), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB [ 867.806067] 0 0 0 0 [ 867.820600] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.851189] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 867.852267] lowmem_reserve[]: [ 867.864563] syz-executor.4 cpuset= [ 867.864587] 0 [ 867.870240] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 867.873457] 0 0 [ 867.885691] / mems_allowed=0-1 [ 867.891962] 0 0 [ 867.894565] CPU: 1 PID: 13178 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 867.895760] Node 0 [ 867.903627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.903631] Call Trace: [ 867.903649] dump_stack+0x13e/0x194 [ 867.903666] dump_header+0x178/0x6d4 [ 867.903678] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 867.903688] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 867.903698] ? ___ratelimit+0x50/0x519 [ 867.903711] oom_kill_process.cold+0x10/0xae3 [ 867.903723] ? lock_downgrade+0x6e0/0x6e0 [ 867.903737] out_of_memory+0x2d5/0x1110 [ 867.903747] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 867.903761] ? oom_killer_disable+0x1c0/0x1c0 [ 867.903773] ? mutex_trylock+0x152/0x1a0 [ 867.903786] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 867.903814] ? warn_alloc+0xf0/0xf0 [ 867.903839] __alloc_pages_nodemask+0x5d3/0x700 [ 867.913889] syz-executor.2 cpuset= [ 867.915396] ? lock_downgrade+0x6e0/0x6e0 [ 867.917990] / [ 867.921568] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 867.925251] mems_allowed=0-1 [ 867.930254] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 867.930271] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 867.930286] alloc_pages_current+0xe7/0x1e0 [ 867.935371] DMA: [ 867.939240] ion_page_pool_alloc+0x118/0x1b0 [ 867.939252] ion_system_heap_allocate+0x134/0x8d0 [ 867.939265] ? rcu_read_lock_sched_held+0x10a/0x130 [ 867.939273] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 867.939285] ? ion_system_heap_free+0x240/0x240 [ 867.946854] 83*4kB [ 867.947899] ion_alloc+0x1e9/0x7d0 [ 867.951841] (UME) [ 867.956767] ? ion_dma_buf_release+0x40/0x40 [ 867.976838] 63*8kB [ 867.978356] ? __might_fault+0x177/0x1b0 [ 867.981862] (UME) [ 867.986006] ion_ioctl+0xef/0x1f8 [ 867.996828] 9*16kB [ 868.000493] ? ion_alloc.cold+0x3d/0x3d [ 868.006085] (UM) [ 868.010391] ? selinux_file_ioctl+0x3f7/0x560 [ 868.010399] ? ion_alloc.cold+0x3d/0x3d [ 868.010411] do_vfs_ioctl+0x75a/0xfe0 [ 868.036834] 6*32kB [ 868.038319] ? selinux_file_mprotect+0x5c0/0x5c0 [ 868.041843] (UE) [ 868.043986] ? ioctl_preallocate+0x1a0/0x1a0 [ 868.056827] 3*64kB [ 868.060217] ? security_file_ioctl+0x76/0xb0 [ 868.062414] (UME) [ 868.066367] ? security_file_ioctl+0x83/0xb0 [ 868.076821] 2*128kB [ 868.080595] SyS_ioctl+0x7f/0xb0 [ 868.082812] (ME) [ 868.087570] ? do_vfs_ioctl+0xfe0/0xfe0 [ 868.087584] do_syscall_64+0x1d5/0x640 [ 868.087602] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 868.116831] 2*256kB [ 868.118793] RIP: 0033:0x7fd58e5e9469 [ 868.122657] (ME) [ 868.127819] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.127830] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 868.127836] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 868.127845] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 868.139549] 2*512kB [ 868.143654] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 868.166813] (ME) [ 868.167712] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 868.174970] 1*1024kB [ 868.181896] Mem-Info: [ 868.189475] active_anon:382145 inactive_anon:43714 isolated_anon:0 [ 868.189475] active_file:18068 inactive_file:3465 isolated_file:0 [ 868.189475] unevictable:0 dirty:0 writeback:36 unstable:0 [ 868.189475] slab_reclaimable:20165 slab_unreclaimable:123589 [ 868.189475] mapped:65668 shmem:18077 pagetables:9083 bounce:0 [ 868.189475] free:857551 free_pcp:83 free_cma:0 [ 868.197930] CPU: 0 PID: 13181 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 868.230097] Node 0 active_anon:1463880kB inactive_anon:98140kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250212kB dirty:4kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 868.231279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.231284] Call Trace: [ 868.231302] dump_stack+0x13e/0x194 [ 868.231319] warn_alloc.cold+0x96/0x1af [ 868.231332] ? zone_watermark_ok_safe+0x280/0x280 [ 868.261595] Node 0 [ 868.268508] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 868.268537] __alloc_pages_slowpath+0x2114/0x26c0 [ 868.268562] ? warn_alloc+0xf0/0xf0 [ 868.268585] __alloc_pages_nodemask+0x5d3/0x700 [ 868.268598] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 868.271589] DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.274821] ? wake_up_q+0x90/0xe0 [ 868.274838] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 868.281533] lowmem_reserve[]: [ 868.283622] alloc_pages_current+0xe7/0x1e0 [ 868.283638] ion_page_pool_alloc+0x118/0x1b0 [ 868.283651] ion_system_heap_allocate+0x134/0x8d0 [ 868.283665] ? rcu_read_lock_sched_held+0x10a/0x130 [ 868.285976] 0 [ 868.290986] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 868.290999] ? ion_system_heap_free+0x240/0x240 [ 868.291014] ion_alloc+0x1e9/0x7d0 [ 868.291030] ? ion_dma_buf_release+0x40/0x40 [ 868.291047] ? __might_fault+0x177/0x1b0 [ 868.291063] ion_ioctl+0xef/0x1f8 [ 868.291075] ? ion_alloc.cold+0x3d/0x3d [ 868.291091] ? selinux_file_ioctl+0x3f7/0x560 [ 868.291098] ? ion_alloc.cold+0x3d/0x3d [ 868.291108] do_vfs_ioctl+0x75a/0xfe0 [ 868.291120] ? selinux_file_mprotect+0x5c0/0x5c0 [ 868.300495] 2557 [ 868.304237] ? ioctl_preallocate+0x1a0/0x1a0 [ 868.304268] ? security_file_ioctl+0x76/0xb0 [ 868.304279] ? security_file_ioctl+0x83/0xb0 [ 868.310111] 2557 [ 868.335113] SyS_ioctl+0x7f/0xb0 [ 868.335126] ? do_vfs_ioctl+0xfe0/0xfe0 [ 868.335141] do_syscall_64+0x1d5/0x640 [ 868.335162] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 868.335172] RIP: 0033:0x7f5232e49469 [ 868.335177] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.335193] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 868.335198] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 868.335204] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 868.335210] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 868.335216] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 868.345235] (E) [ 868.350372] 2557 [ 868.351925] 1*2048kB (E) 1*4096kB (M) = 10324kB [ 868.351946] Node 0 DMA32: 369*4kB (UME) 391*8kB (UME) 21*16kB [ 868.356502] 2557 [ 868.386846] (UME) [ 868.393276] 476*32kB [ 868.397794] Node 0 [ 868.411383] (UE) [ 868.417565] DMA32 free:22836kB min:36272kB low:45340kB high:54408kB active_anon:1459464kB inactive_anon:98140kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33544kB bounce:0kB free_pcp:380kB local_pcp:212kB free_cma:0kB [ 868.426946] 8*64kB [ 868.430655] lowmem_reserve[]: [ 868.432168] (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20940kB [ 868.432206] Node 0 Normal: 0*4kB 0*8kB [ 868.435716] 0 [ 868.442031] 0*16kB [ 868.446998] 0 [ 868.454693] 0*32kB [ 868.460506] 0 [ 868.470788] 0*64kB [ 868.475158] 0 [ 868.488035] 0*128kB [ 868.489912] 0 [ 868.504455] 0*256kB [ 868.513018] 0*512kB [ 868.514201] Node 0 [ 868.515993] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 868.516014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.516021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.516029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.516036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.516040] 39630 total pagecache pages [ 868.516053] 0 pages in swap cache [ 868.518658] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.532710] Swap cache stats: add 0, delete 0, find 0/0 [ 868.551687] lowmem_reserve[]: [ 868.561490] Free swap = 0kB [ 868.564748] 0 [ 868.571462] Total swap = 0kB [ 868.573467] 0 [ 868.574574] 1965979 pages RAM [ 868.576919] 0 [ 868.585722] 0 pages HighMem/MovableOnly [ 868.587008] 0 [ 868.592676] 339053 pages reserved [ 868.593930] 0 [ 868.599332] 0 pages cma reserved [ 868.607359] Node 0 DMA: 83*4kB (UME) 63*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB [ 868.623502] warn_alloc_show_mem: 3 callbacks suppressed [ 868.623506] Mem-Info: [ 868.625096] (E) [ 868.643654] active_anon:382131 inactive_anon:43737 isolated_anon:0 [ 868.643654] active_file:18050 inactive_file:3476 isolated_file:0 [ 868.643654] unevictable:0 dirty:8 writeback:0 unstable:0 [ 868.643654] slab_reclaimable:20178 slab_unreclaimable:123656 [ 868.643654] mapped:65639 shmem:18100 pagetables:9030 bounce:0 [ 868.643654] free:857462 free_pcp:277 free_cma:0 [ 868.666079] 1*2048kB [ 868.682161] Node 0 active_anon:1463880kB inactive_anon:98140kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250212kB dirty:4kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 868.682536] (E) [ 868.684678] Node 1 active_anon:64644kB inactive_anon:76808kB active_file:72196kB inactive_file:13900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12344kB dirty:28kB writeback:0kB shmem:896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 868.687477] 1*4096kB (M) = 10324kB [ 868.687490] Node 0 DMA32: 369*4kB (UME) 660*8kB (UME) 32*16kB (UME) 476*32kB (UE) 8*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23268kB [ 868.687567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 868.687628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.687635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.687642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.687648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.687653] 39630 total pagecache pages [ 868.687665] 0 pages in swap cache [ 868.687671] Swap cache stats: add 0, delete 0, find 0/0 [ 868.687675] Free swap = 0kB [ 868.687679] Total swap = 0kB [ 868.687687] 1965979 pages RAM [ 868.687691] 0 pages HighMem/MovableOnly [ 868.687694] 339053 pages reserved [ 868.687698] 0 pages cma reserved [ 868.687705] Out of memory: Kill process 12957 (syz-executor.4) score 1010 or sacrifice child [ 868.687741] Killed process 12957 (syz-executor.4) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 868.697641] syz-executor.4: [ 868.719077] Node 0 [ 868.736398] page allocation failure: order:0 [ 868.775465] oom_reaper: reaped process 13175 (syz-executor.5), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB [ 868.790947] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 868.816088] DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.820956] 0 [ 868.820963] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 868.820986] CPU: 1 PID: 13178 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 868.820992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.820996] Call Trace: [ 868.821013] dump_stack+0x13e/0x194 [ 868.821028] warn_alloc.cold+0x96/0x1af [ 868.821038] ? zone_watermark_ok_safe+0x280/0x280 [ 868.821058] ? wait_for_completion+0x390/0x390 [ 868.821074] __alloc_pages_slowpath+0x2114/0x26c0 [ 868.821099] ? warn_alloc+0xf0/0xf0 [ 868.821124] __alloc_pages_nodemask+0x5d3/0x700 [ 868.821137] ? lock_downgrade+0x6e0/0x6e0 [ 868.821148] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 868.821158] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 868.821176] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 868.821191] alloc_pages_current+0xe7/0x1e0 [ 868.821205] ion_page_pool_alloc+0x118/0x1b0 [ 868.821226] ion_system_heap_allocate+0x134/0x8d0 [ 868.821240] ? rcu_read_lock_sched_held+0x10a/0x130 [ 868.821249] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 868.821260] ? ion_system_heap_free+0x240/0x240 [ 868.821275] ion_alloc+0x1e9/0x7d0 [ 868.821290] ? ion_dma_buf_release+0x40/0x40 [ 868.821305] ? __might_fault+0x177/0x1b0 [ 868.826809] syz-executor.5: [ 868.839058] ion_ioctl+0xef/0x1f8 [ 868.839069] ? ion_alloc.cold+0x3d/0x3d [ 868.839086] ? selinux_file_ioctl+0x3f7/0x560 [ 868.839095] ? ion_alloc.cold+0x3d/0x3d [ 868.839109] do_vfs_ioctl+0x75a/0xfe0 [ 868.839119] ? selinux_file_mprotect+0x5c0/0x5c0 [ 868.839132] ? ioctl_preallocate+0x1a0/0x1a0 [ 868.839154] ? security_file_ioctl+0x76/0xb0 [ 868.839163] ? security_file_ioctl+0x83/0xb0 [ 868.839175] SyS_ioctl+0x7f/0xb0 [ 868.864416] oom_reaper: reaped process 13182 (syz-executor.1), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB [ 868.867227] ? do_vfs_ioctl+0xfe0/0xfe0 [ 868.867243] do_syscall_64+0x1d5/0x640 [ 868.867260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 868.891832] lowmem_reserve[]: [ 868.892090] RIP: 0033:0x7fd58e5e9469 [ 868.899031] 0 [ 868.900426] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.900438] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 868.900446] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 868.904573] 2557 [ 868.906528] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 868.906535] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 868.906541] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 868.918196] page allocation failure: order:0 [ 868.938201] 2557 [ 868.960902] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 868.971585] 2557 [ 868.995895] syz-executor.4: [ 869.016911] 2557 [ 869.018027] page allocation failure: order:4 [ 869.030258] 0 [ 869.045346] Node 0 [ 869.048693] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 869.058854] DMA32 free:25552kB min:36272kB low:45340kB high:54408kB active_anon:1459464kB inactive_anon:93640kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33544kB bounce:0kB free_pcp:804kB local_pcp:96kB free_cma:0kB [ 869.062263] 0 [ 869.084296] lowmem_reserve[]: [ 869.086617] syz-executor.5 cpuset= [ 869.101829] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 869.104221] / [ 869.108742] 0 [ 869.111385] syz-executor.4 cpuset= [ 869.121395] 0 [ 869.123283] mems_allowed=0-1 [ 869.130389] 0 [ 869.131186] CPU: 1 PID: 13175 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 869.135887] 0 [ 869.140189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.140193] Call Trace: [ 869.140211] dump_stack+0x13e/0x194 [ 869.140226] warn_alloc.cold+0x96/0x1af [ 869.140236] ? zone_watermark_ok_safe+0x280/0x280 [ 869.140246] ? save_trace+0x290/0x290 [ 869.140256] ? rcu_read_lock_sched_held+0x10a/0x130 [ 869.140280] __alloc_pages_slowpath+0x2114/0x26c0 [ 869.140308] ? warn_alloc+0xf0/0xf0 [ 869.140335] __alloc_pages_nodemask+0x5d3/0x700 [ 869.140346] ? lock_downgrade+0x6e0/0x6e0 [ 869.153048] , order=0, oom_score_adj=1000 [ 869.162626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 869.162641] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 869.162656] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 869.162669] alloc_pages_current+0xe7/0x1e0 [ 869.162683] ion_page_pool_alloc+0x118/0x1b0 [ 869.171071] 0 [ 869.175782] ion_system_heap_allocate+0x134/0x8d0 [ 869.175799] ? rcu_read_lock_sched_held+0x10a/0x130 [ 869.179218] 0 [ 869.182588] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 869.192042] ? ion_system_heap_free+0x240/0x240 [ 869.192057] ion_alloc+0x1e9/0x7d0 [ 869.192071] ? ion_dma_buf_release+0x40/0x40 [ 869.192088] ? __might_fault+0x177/0x1b0 [ 869.192102] ion_ioctl+0xef/0x1f8 [ 869.192113] ? ion_alloc.cold+0x3d/0x3d [ 869.203783] syz-executor.1 cpuset= [ 869.206627] ? selinux_file_ioctl+0x3f7/0x560 [ 869.209732] / [ 869.215927] ? ion_alloc.cold+0x3d/0x3d [ 869.223225] mems_allowed=0-1 [ 869.230445] do_vfs_ioctl+0x75a/0xfe0 [ 869.230462] ? selinux_file_mprotect+0x5c0/0x5c0 [ 869.234852] Node 0 [ 869.236883] ? ioctl_preallocate+0x1a0/0x1a0 [ 869.236904] ? security_file_ioctl+0x76/0xb0 [ 869.236913] ? security_file_ioctl+0x83/0xb0 [ 869.236925] SyS_ioctl+0x7f/0xb0 [ 869.236935] ? do_vfs_ioctl+0xfe0/0xfe0 [ 869.248344] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.249057] do_syscall_64+0x1d5/0x640 [ 869.251091] lowmem_reserve[]: [ 869.255488] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 869.266737] 0 [ 869.294908] RIP: 0033:0x7fe47ef7c469 [ 869.294914] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.294924] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 869.294932] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 869.326713] 0 [ 869.327227] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 869.327236] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 869.335118] 0 [ 869.336898] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 869.337916] / [ 869.356836] CPU: 0 PID: 13182 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 869.361508] mems_allowed=0-1 [ 869.365072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.365077] Call Trace: [ 869.365095] dump_stack+0x13e/0x194 [ 869.365112] dump_header+0x178/0x6d4 [ 869.546732] 0 [ 869.548065] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 869.555742] 0 [ 869.563012] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 869.563022] ? ___ratelimit+0x50/0x519 [ 869.563043] oom_kill_process.cold+0x10/0xae3 [ 869.563055] ? lock_downgrade+0x6e0/0x6e0 [ 869.563071] out_of_memory+0x2d5/0x1110 [ 869.608381] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 869.627384] syz-executor.5: [ 869.627580] ? oom_killer_disable+0x1c0/0x1c0 [ 869.629350] page allocation failure: order:4 [ 869.634348] ? mutex_trylock+0x152/0x1a0 [ 869.636128] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 869.641221] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 869.641245] ? warn_alloc+0xf0/0xf0 [ 869.641269] __alloc_pages_nodemask+0x5d3/0x700 [ 869.641281] ? lock_downgrade+0x6e0/0x6e0 [ 869.641291] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 869.641308] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 869.666726] Node 1 [ 869.670086] alloc_pages_current+0xe7/0x1e0 [ 869.674477] Normal free:3408340kB min:53612kB low:67012kB high:80412kB active_anon:64444kB inactive_anon:63208kB active_file:72196kB inactive_file:13900kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1152kB pagetables:2428kB bounce:0kB free_pcp:1360kB local_pcp:696kB free_cma:0kB [ 869.678522] ion_page_pool_alloc+0x118/0x1b0 [ 869.678536] ion_system_heap_allocate+0x134/0x8d0 [ 869.678549] ? rcu_read_lock_sched_held+0x10a/0x130 [ 869.678557] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 869.678568] ? ion_system_heap_free+0x240/0x240 [ 869.678584] ion_alloc+0x1e9/0x7d0 [ 869.685662] 0 [ 869.690487] ? ion_dma_buf_release+0x40/0x40 [ 869.690503] ? __might_fault+0x177/0x1b0 [ 869.690518] ion_ioctl+0xef/0x1f8 [ 869.690528] ? ion_alloc.cold+0x3d/0x3d [ 869.690544] ? selinux_file_ioctl+0x3f7/0x560 [ 869.690555] ? ion_alloc.cold+0x3d/0x3d [ 869.706742] syz-executor.5 cpuset= [ 869.707969] do_vfs_ioctl+0x75a/0xfe0 [ 869.713564] / [ 869.715795] ? selinux_file_mprotect+0x5c0/0x5c0 [ 869.727331] lowmem_reserve[]: [ 869.749302] ? ioctl_preallocate+0x1a0/0x1a0 [ 869.749326] ? security_file_ioctl+0x76/0xb0 [ 869.749335] ? security_file_ioctl+0x83/0xb0 [ 869.749347] SyS_ioctl+0x7f/0xb0 [ 869.749355] ? do_vfs_ioctl+0xfe0/0xfe0 [ 869.749369] do_syscall_64+0x1d5/0x640 [ 869.766745] mems_allowed=0-1 [ 869.768454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 869.806697] 0 [ 869.809808] RIP: 0033:0x7fce30cbc469 [ 869.811498] 0 [ 869.816224] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 869.846701] 0 [ 869.846729] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 869.851908] 0 [ 869.853688] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 869.884882] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 869.886684] 0 [ 869.892132] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 869.893911] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 869.909408] CPU: 1 PID: 13175 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 869.910364] Mem-Info: [ 869.917284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.917289] Call Trace: [ 869.917308] dump_stack+0x13e/0x194 [ 869.917323] warn_alloc.cold+0x96/0x1af [ 869.917334] ? zone_watermark_ok_safe+0x280/0x280 [ 869.917355] ? __alloc_pages_direct_compact+0xba/0x360 [ 869.917367] __alloc_pages_slowpath+0x2114/0x26c0 [ 869.917380] ? check_preemption_disabled+0x35/0x240 [ 869.917403] ? warn_alloc+0xf0/0xf0 [ 869.917431] __alloc_pages_nodemask+0x5d3/0x700 [ 869.917444] ? lock_downgrade+0x6e0/0x6e0 [ 869.917455] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 869.917464] ? SOFTIRQ_verbose+0x10/0x10 [ 869.917478] ? find_held_lock+0x2d/0x110 [ 869.917488] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 869.917502] alloc_pages_current+0xe7/0x1e0 [ 869.922701] active_anon:382081 inactive_anon:39212 isolated_anon:0 [ 869.922701] active_file:18050 inactive_file:3476 isolated_file:0 [ 869.922701] unevictable:0 dirty:8 writeback:0 unstable:0 [ 869.922701] slab_reclaimable:20153 slab_unreclaimable:124256 [ 869.922701] mapped:65564 shmem:18100 pagetables:8993 bounce:0 [ 869.922701] free:861128 free_pcp:234 free_cma:0 [ 869.929234] ion_page_pool_alloc+0x118/0x1b0 [ 869.929247] ion_system_heap_allocate+0x134/0x8d0 [ 869.929261] ? _ion_heap_freelist_drain+0x6e/0x410 [ 869.929271] ? ion_system_heap_free+0x240/0x240 [ 869.929286] ion_alloc+0x611/0x7d0 [ 869.929301] ? ion_dma_buf_release+0x40/0x40 [ 869.936693] Node 0 active_anon:1463880kB inactive_anon:93640kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250312kB dirty:4kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 869.939443] ? __might_fault+0x177/0x1b0 [ 869.944264] Node 0 [ 869.949530] ion_ioctl+0xef/0x1f8 [ 869.949541] ? ion_alloc.cold+0x3d/0x3d [ 869.949559] ? selinux_file_ioctl+0x3f7/0x560 [ 869.963434] DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 869.967663] ? ion_alloc.cold+0x3d/0x3d [ 869.967678] do_vfs_ioctl+0x75a/0xfe0 [ 869.967689] ? selinux_file_mprotect+0x5c0/0x5c0 [ 869.967701] ? ioctl_preallocate+0x1a0/0x1a0 [ 869.971836] lowmem_reserve[]: [ 869.976843] ? security_file_ioctl+0x76/0xb0 [ 869.976852] ? security_file_ioctl+0x83/0xb0 [ 869.976864] SyS_ioctl+0x7f/0xb0 [ 869.976872] ? do_vfs_ioctl+0xfe0/0xfe0 [ 869.976886] do_syscall_64+0x1d5/0x640 [ 869.984941] 0 [ 869.984998] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 869.991429] 2557 [ 869.994905] RIP: 0033:0x7fe47ef7c469 [ 870.028841] 2557 [ 870.033197] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 [ 870.038030] 2557 [ 870.042917] ORIG_RAX: 0000000000000010 [ 870.047574] 2557 [ 870.051076] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 870.083389] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 870.083395] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 870.083400] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 870.083405] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 870.087075] CPU: 1 PID: 13178 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 870.101696] Node 0 [ 870.127413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.127419] Call Trace: [ 870.127441] dump_stack+0x13e/0x194 [ 870.127456] warn_alloc.cold+0x96/0x1af [ 870.127465] ? zone_watermark_ok_safe+0x280/0x280 [ 870.127482] ? __alloc_pages_direct_compact+0xba/0x360 [ 870.127493] __alloc_pages_slowpath+0x2114/0x26c0 [ 870.127504] ? check_preemption_disabled+0x35/0x240 [ 870.127523] ? warn_alloc+0xf0/0xf0 [ 870.127546] __alloc_pages_nodemask+0x5d3/0x700 [ 870.127558] ? lock_downgrade+0x6e0/0x6e0 [ 870.127567] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 870.127576] ? SOFTIRQ_verbose+0x10/0x10 [ 870.127587] ? find_held_lock+0x2d/0x110 [ 870.127597] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 870.127617] alloc_pages_current+0xe7/0x1e0 [ 870.132604] Node 0 [ 870.135381] ion_page_pool_alloc+0x118/0x1b0 [ 870.146666] DMA: [ 870.147613] ion_system_heap_allocate+0x134/0x8d0 [ 870.151988] 83*4kB [ 870.156380] ? _ion_heap_freelist_drain+0x6e/0x410 [ 870.162974] DMA32 free:27920kB min:36272kB low:45340kB high:54408kB active_anon:1459456kB inactive_anon:93576kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33544kB bounce:0kB free_pcp:940kB local_pcp:316kB free_cma:0kB [ 870.163676] ? ion_system_heap_free+0x240/0x240 [ 870.167571] lowmem_reserve[]: [ 870.169327] ion_alloc+0x611/0x7d0 [ 870.174478] 0 [ 870.176547] ? ion_dma_buf_release+0x40/0x40 [ 870.182663] (UME) [ 870.187640] ? __might_fault+0x177/0x1b0 [ 870.187656] ion_ioctl+0xef/0x1f8 [ 870.187667] ? ion_alloc.cold+0x3d/0x3d [ 870.189709] 64*8kB [ 870.193667] ? selinux_file_ioctl+0x3f7/0x560 [ 870.195696] (UME) [ 870.202945] ? ion_alloc.cold+0x3d/0x3d [ 870.202957] do_vfs_ioctl+0x75a/0xfe0 [ 870.202966] ? selinux_file_mprotect+0x5c0/0x5c0 [ 870.202978] ? ioctl_preallocate+0x1a0/0x1a0 [ 870.203000] ? security_file_ioctl+0x76/0xb0 [ 870.214844] 0 [ 870.217501] ? security_file_ioctl+0x83/0xb0 [ 870.217515] SyS_ioctl+0x7f/0xb0 [ 870.217524] ? do_vfs_ioctl+0xfe0/0xfe0 [ 870.217537] do_syscall_64+0x1d5/0x640 [ 870.217554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 870.226644] 0 [ 870.232062] RIP: 0033:0x7fd58e5e9469 [ 870.242352] 9*16kB [ 870.251492] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 870.251503] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 870.251508] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 870.251513] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 870.251518] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 870.251524] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 870.255710] warn_alloc_show_mem: 2 callbacks suppressed [ 870.255714] Mem-Info: [ 870.266289] 0 [ 870.266554] active_anon:382075 inactive_anon:39173 isolated_anon:0 [ 870.266554] active_file:18067 inactive_file:3502 isolated_file:0 [ 870.266554] unevictable:0 dirty:13 writeback:0 unstable:0 [ 870.266554] slab_reclaimable:20109 slab_unreclaimable:124173 [ 870.266554] mapped:65562 shmem:18100 pagetables:8995 bounce:0 [ 870.266554] free:861246 free_pcp:540 free_cma:0 [ 870.273466] 0 [ 870.292449] Node 0 active_anon:1463872kB inactive_anon:93576kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250376kB dirty:4kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 870.299725] (UM) [ 870.315739] Node 1 active_anon:64428kB inactive_anon:63116kB active_file:72260kB inactive_file:14008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11872kB dirty:48kB writeback:0kB shmem:896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 870.326532] Node 0 [ 870.331395] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 870.350053] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 870.373355] 6*32kB [ 870.380994] lowmem_reserve[]: [ 870.386529] (UE) [ 870.387235] 0 2557 2557 2557 2557 [ 870.387256] Node 0 DMA32 free:18104kB min:36272kB low:45340kB high:54408kB active_anon:1459456kB inactive_anon:93576kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33544kB bounce:0kB free_pcp:480kB local_pcp:148kB free_cma:0kB [ 870.387278] lowmem_reserve[]: 0 0 0 0 0 [ 870.387297] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 870.387316] lowmem_reserve[]: [ 870.395535] 3*64kB [ 870.399031] syz-executor.5: [ 870.405344] lowmem_reserve[]: [ 870.405598] page allocation failure: order:0 [ 870.412015] 0 [ 870.416316] 0 [ 870.420500] (UME) [ 870.424984] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 870.436217] 0 [ 870.438975] 0 0 0 0 [ 870.438994] Node 1 Normal free:3406528kB min:53612kB low:67012kB high:80412kB active_anon:64428kB inactive_anon:63116kB active_file:72260kB inactive_file:14008kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1152kB pagetables:2436kB bounce:0kB free_pcp:1164kB local_pcp:604kB free_cma:0kB [ 870.439018] lowmem_reserve[]: 0 0 0 0 0 [ 870.439042] Node 0 DMA: 83*4kB (UME) 64*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) [ 870.445035] 2*128kB [ 870.448086] 2*256kB [ 870.457362] (ME) [ 870.457966] 0 [ 870.459934] 2*256kB [ 870.467933] (ME) [ 870.476926] 0 [ 870.482647] syz-executor.5 cpuset= [ 870.495535] (ME) [ 870.497242] 2*512kB [ 870.505116] 2*512kB [ 870.510524] / [ 870.517346] 0 [ 870.548635] (ME) [ 870.557725] (ME) [ 870.578177] 1*1024kB [ 870.586338] 1*1024kB [ 870.608181] mems_allowed=0-1 [ 870.616812] 0 [ 870.636186] CPU: 1 PID: 13175 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 870.667005] (E) 1*2048kB [ 870.669051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.672568] (E) [ 870.701610] Call Trace: [ 870.701630] dump_stack+0x13e/0x194 [ 870.701644] warn_alloc.cold+0x96/0x1af [ 870.701655] ? zone_watermark_ok_safe+0x280/0x280 [ 870.731004] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 870.731025] __alloc_pages_slowpath+0x2114/0x26c0 [ 870.731051] ? warn_alloc+0xf0/0xf0 [ 870.731076] __alloc_pages_nodemask+0x5d3/0x700 [ 870.731090] ? lock_downgrade+0x6e0/0x6e0 [ 870.739884] 1*4096kB [ 870.742531] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 870.746951] (M) [ 870.748700] ? SOFTIRQ_verbose+0x10/0x10 [ 870.750470] = 10332kB [ 870.752608] ? find_held_lock+0x2d/0x110 [ 870.759706] Node 0 [ 870.761461] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 870.763755] DMA: [ 870.793595] alloc_pages_current+0xe7/0x1e0 [ 870.793608] ion_page_pool_alloc+0x118/0x1b0 [ 870.793622] ion_system_heap_allocate+0x134/0x8d0 [ 870.793637] ? _ion_heap_freelist_drain+0x6e/0x410 [ 870.802580] Node 0 [ 870.806861] ? ion_system_heap_free+0x240/0x240 [ 870.806876] ion_alloc+0x611/0x7d0 [ 870.806892] ? ion_dma_buf_release+0x40/0x40 [ 870.806913] ? __might_fault+0x177/0x1b0 [ 870.811111] DMA32: [ 870.811527] ion_ioctl+0xef/0x1f8 [ 870.813557] 406*4kB [ 870.815253] ? ion_alloc.cold+0x3d/0x3d [ 870.819121] (ME) [ 870.819600] ? selinux_file_ioctl+0x3f7/0x560 [ 870.821369] 125*8kB [ 870.824887] ? ion_alloc.cold+0x3d/0x3d [ 870.826950] (UME) [ 870.829245] do_vfs_ioctl+0x75a/0xfe0 [ 870.831537] 9*16kB [ 870.833233] ? selinux_file_mprotect+0x5c0/0x5c0 [ 870.835002] (UME) [ 870.837044] ? ioctl_preallocate+0x1a0/0x1a0 [ 870.837067] ? security_file_ioctl+0x76/0xb0 [ 870.839110] 494*32kB [ 870.841510] ? security_file_ioctl+0x83/0xb0 [ 870.843888] (UE) [ 870.846978] SyS_ioctl+0x7f/0xb0 [ 870.846986] ? do_vfs_ioctl+0xfe0/0xfe0 [ 870.846998] do_syscall_64+0x1d5/0x640 [ 870.847015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 870.847025] RIP: 0033:0x7fe47ef7c469 [ 870.856595] 83*4kB [ 870.856658] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 [ 870.859394] (UME) [ 870.868729] ORIG_RAX: 0000000000000010 [ 870.868735] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 870.868741] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 870.868746] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 870.868751] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 870.868757] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 870.870533] (E) [ 870.874118] 0*64kB [ 870.877203] 1*2048kB (E) 1*4096kB (M) = 10332kB [ 870.877223] Node 0 DMA32: 406*4kB (ME) 139*8kB (UME) 10*16kB (UME) 494*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18704kB [ 870.877294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 870.877348] Node 1 Normal: 208*4kB (ME) 294*8kB (ME) 296*16kB (ME) 256*32kB (UME) 207*64kB (UME) 108*128kB (UM) 49*256kB (UME) 14*512kB (ME) 6*1024kB (ME) 3*2048kB (UM) 813*4096kB (M) = 3405232kB [ 870.877439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 870.877444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 870.877451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 870.877458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 870.877462] 39688 total pagecache pages [ 870.877474] 0 pages in swap cache [ 870.877480] Swap cache stats: add 0, delete 0, find 0/0 [ 870.877484] Free swap = 0kB [ 870.877488] Total swap = 0kB [ 870.877495] 1965979 pages RAM [ 870.877499] 0 pages HighMem/MovableOnly [ 870.877503] 339053 pages reserved [ 870.877506] 0 pages cma reserved [ 870.928106] syz-executor.4: [ 870.929445] 64*8kB [ 870.931484] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 870.937157] (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10332kB [ 870.937231] Node 0 DMA32: 406*4kB (ME) 79*8kB (ME) 9*16kB (UME) 494*32kB (UE) 0*64kB [ 870.945240] 0 [ 870.948960] 0*128kB [ 870.961881] syz-executor.4 cpuset= [ 870.964835] 0*256kB [ 870.970287] / [ 870.972787] 0*512kB [ 870.981620] mems_allowed=0-1 [ 870.982592] 0*128kB [ 870.984896] CPU: 1 PID: 13178 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 870.988941] 0*256kB [ 870.990897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.995363] 0*512kB [ 870.997679] Call Trace: [ 870.997700] dump_stack+0x13e/0x194 [ 870.997716] warn_alloc.cold+0x96/0x1af [ 871.001664] 0*1024kB [ 871.003798] ? zone_watermark_ok_safe+0x280/0x280 [ 871.007587] 0*2048kB [ 871.009876] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 871.014606] 0*4096kB [ 871.016748] __alloc_pages_slowpath+0x2114/0x26c0 [ 871.016774] ? warn_alloc+0xf0/0xf0 [ 871.021150] 0*1024kB [ 871.025552] __alloc_pages_nodemask+0x5d3/0x700 [ 871.027943] 0*2048kB [ 871.032315] ? lock_downgrade+0x6e0/0x6e0 [ 871.034345] 0*4096kB [ 871.037696] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 871.037705] ? SOFTIRQ_verbose+0x10/0x10 [ 871.037720] ? find_held_lock+0x2d/0x110 [ 871.041668] = 18208kB [ 871.045527] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 871.050903] Node 0 [ 871.054579] alloc_pages_current+0xe7/0x1e0 [ 871.056819] = 18576kB [ 871.062156] ion_page_pool_alloc+0x118/0x1b0 [ 871.064287] Node 0 [ 871.068246] ion_system_heap_allocate+0x134/0x8d0 [ 871.068260] ? _ion_heap_freelist_drain+0x6e/0x410 [ 871.068272] ? ion_system_heap_free+0x240/0x240 [ 871.075560] Normal: [ 871.082910] ion_alloc+0x611/0x7d0 [ 871.082929] ? ion_dma_buf_release+0x40/0x40 [ 871.090200] 0*4kB [ 871.097714] ? __might_fault+0x177/0x1b0 [ 871.097730] ion_ioctl+0xef/0x1f8 [ 871.104979] Normal: [ 871.106927] ? ion_alloc.cold+0x3d/0x3d [ 871.106942] ? selinux_file_ioctl+0x3f7/0x560 [ 871.106952] ? ion_alloc.cold+0x3d/0x3d [ 871.109174] 0*4kB [ 871.113822] do_vfs_ioctl+0x75a/0xfe0 [ 871.127263] 0*8kB [ 871.138589] ? selinux_file_mprotect+0x5c0/0x5c0 [ 871.138601] ? ioctl_preallocate+0x1a0/0x1a0 [ 871.138623] ? security_file_ioctl+0x76/0xb0 [ 871.156133] 0*8kB [ 871.164937] ? security_file_ioctl+0x83/0xb0 [ 871.164950] SyS_ioctl+0x7f/0xb0 [ 871.164960] ? do_vfs_ioctl+0xfe0/0xfe0 [ 871.173581] 0*16kB [ 871.182388] do_syscall_64+0x1d5/0x640 [ 871.182410] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.191000] 0*16kB [ 871.194925] RIP: 0033:0x7fd58e5e9469 [ 871.198386] 0*32kB [ 871.203698] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.206738] 0*32kB [ 871.209709] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 871.212786] 0*64kB [ 871.216733] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 871.216739] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 871.216744] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 871.216750] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 871.257547] 0*64kB [ 871.261046] 0*128kB [ 871.262006] 0*128kB [ 871.264306] 0*256kB 0*512kB [ 871.273710] 0*256kB [ 871.274225] 0*1024kB [ 871.278855] 0*512kB [ 871.279684] 0*2048kB [ 871.293026] 0*1024kB [ 871.299404] 0*4096kB = 0kB [ 871.299414] Node 1 Normal: 208*4kB (ME) 295*8kB (UME) 297*16kB (UME) 253*32kB (ME) 200*64kB (UME) 107*128kB (M) 48*256kB (ME) 15*512kB (UME) 6*1024kB (ME) 2*2048kB (M) 813*4096kB (M) = 3402792kB [ 871.299504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 871.299511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 871.299518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 871.299525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 871.299529] 39699 total pagecache pages [ 871.299541] 0 pages in swap cache [ 871.299546] Swap cache stats: add 0, delete 0, find 0/0 [ 871.299550] Free swap = 0kB [ 871.299554] Total swap = 0kB [ 871.299562] 1965979 pages RAM [ 871.299565] 0 pages HighMem/MovableOnly [ 871.299569] 339053 pages reserved [ 871.299573] 0 pages cma reserved [ 871.652463] 0*2048kB [ 871.655008] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 871.661858] 0*4096kB [ 871.669018] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 871.669041] CPU: 1 PID: 13181 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 871.669047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.669052] Call Trace: [ 871.669068] dump_stack+0x13e/0x194 [ 871.669085] warn_alloc.cold+0x96/0x1af [ 871.669096] ? zone_watermark_ok_safe+0x280/0x280 [ 871.669117] ? __alloc_pages_direct_compact+0xba/0x360 [ 871.669131] __alloc_pages_slowpath+0x2114/0x26c0 [ 871.669144] ? check_preemption_disabled+0x35/0x240 [ 871.669163] ? warn_alloc+0xf0/0xf0 [ 871.681042] = 0kB [ 871.684520] __alloc_pages_nodemask+0x5d3/0x700 [ 871.695047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 871.696404] ? lock_downgrade+0x6e0/0x6e0 [ 871.701503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 871.703960] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 871.709648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 871.714035] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 871.714053] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 871.720053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 871.723877] alloc_pages_current+0xe7/0x1e0 [ 871.728255] 39701 total pagecache pages [ 871.729537] ion_page_pool_alloc+0x118/0x1b0 [ 871.734360] 0 pages in swap cache [ 871.743183] ion_system_heap_allocate+0x134/0x8d0 [ 871.743197] ? _ion_heap_freelist_drain+0x6e/0x410 [ 871.743207] ? ion_system_heap_free+0x240/0x240 [ 871.743222] ion_alloc+0x611/0x7d0 [ 871.743238] ? ion_dma_buf_release+0x40/0x40 [ 871.751360] Swap cache stats: add 0, delete 0, find 0/0 [ 871.755941] ? __might_fault+0x177/0x1b0 [ 871.761411] Free swap = 0kB [ 871.769507] ion_ioctl+0xef/0x1f8 [ 871.769519] ? ion_alloc.cold+0x3d/0x3d [ 871.769534] ? selinux_file_ioctl+0x3f7/0x560 [ 871.769544] ? ion_alloc.cold+0x3d/0x3d [ 871.776327] Total swap = 0kB [ 871.780151] do_vfs_ioctl+0x75a/0xfe0 [ 871.780164] ? selinux_file_mprotect+0x5c0/0x5c0 [ 871.780176] ? ioctl_preallocate+0x1a0/0x1a0 [ 871.780198] ? security_file_ioctl+0x76/0xb0 [ 871.790541] 1965979 pages RAM [ 871.793057] ? security_file_ioctl+0x83/0xb0 [ 871.797764] 0 pages HighMem/MovableOnly [ 871.801398] SyS_ioctl+0x7f/0xb0 [ 871.804843] 339053 pages reserved [ 871.809662] ? do_vfs_ioctl+0xfe0/0xfe0 [ 871.809675] do_syscall_64+0x1d5/0x640 [ 871.809693] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.809701] RIP: 0033:0x7f5232e49469 [ 871.809709] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 [ 871.816494] 0 pages cma reserved [ 871.819258] ORIG_RAX: 0000000000000010 [ 871.822777] Out of memory: Kill process 12977 (syz-executor.4) score 1010 or sacrifice child [ 871.827167] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 871.827172] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 871.827177] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 871.827183] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 871.827188] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 871.828505] warn_alloc_show_mem: 3 callbacks suppressed [ 871.828509] Mem-Info: [ 871.842437] Killed process 12977 (syz-executor.4) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 871.843217] active_anon:382076 inactive_anon:39173 isolated_anon:0 [ 871.843217] active_file:18067 inactive_file:3532 isolated_file:0 [ 871.843217] unevictable:0 dirty:3 writeback:0 unstable:0 [ 871.843217] slab_reclaimable:20080 slab_unreclaimable:124992 [ 871.843217] mapped:65597 shmem:18100 pagetables:8995 bounce:0 [ 871.843217] free:895378 free_pcp:46 free_cma:0 [ 871.848390] syz-executor.1: [ 871.856698] Node 0 active_anon:1463872kB inactive_anon:91476kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250460kB dirty:12kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 871.865003] page allocation failure: order:0 [ 871.883370] oom_reaper: reaped process 12977 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 871.890168] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 871.891016] Node 1 active_anon:64432kB inactive_anon:48116kB active_file:72260kB inactive_file:14128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11928kB dirty:0kB writeback:0kB shmem:896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 871.894428] 0 [ 871.898599] Node 0 [ 871.905120] syz-executor.1 cpuset= [ 871.910593] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 871.941461] / [ 871.947760] lowmem_reserve[]: [ 872.051495] mems_allowed=0-1 [ 872.054648] 0 [ 872.063723] CPU: 0 PID: 13182 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 872.068288] 2557 [ 872.075039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.102881] 2557 [ 872.104478] Call Trace: [ 872.106725] 2557 [ 872.110222] dump_stack+0x13e/0x194 [ 872.136165] 2557 [ 872.137779] warn_alloc.cold+0x96/0x1af [ 872.137793] ? zone_watermark_ok_safe+0x280/0x280 [ 872.143962] ? wait_for_completion+0x390/0x390 [ 872.145725] Node 0 [ 872.153605] __alloc_pages_slowpath+0x2114/0x26c0 [ 872.153629] ? warn_alloc+0xf0/0xf0 [ 872.153654] __alloc_pages_nodemask+0x5d3/0x700 [ 872.153666] ? lock_downgrade+0x6e0/0x6e0 [ 872.153676] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 872.153696] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 872.155945] DMA32 free:160568kB min:36272kB low:45340kB high:54408kB active_anon:1459548kB inactive_anon:90336kB active_file:108kB inactive_file:1900kB unevictable:0kB writepending:12kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33396kB bounce:0kB free_pcp:1352kB local_pcp:644kB free_cma:0kB [ 872.165099] alloc_pages_current+0xe7/0x1e0 [ 872.165114] ion_page_pool_alloc+0x118/0x1b0 [ 872.165126] ion_system_heap_allocate+0x134/0x8d0 [ 872.165137] ? rcu_read_lock_sched_held+0x10a/0x130 [ 872.165146] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 872.165156] ? ion_system_heap_free+0x240/0x240 [ 872.165169] ion_alloc+0x1e9/0x7d0 [ 872.165184] ? ion_dma_buf_release+0x40/0x40 [ 872.165200] ? __might_fault+0x177/0x1b0 [ 872.167544] lowmem_reserve[]: [ 872.169846] ion_ioctl+0xef/0x1f8 [ 872.171869] 0 [ 872.175489] ? ion_alloc.cold+0x3d/0x3d [ 872.186513] 0 [ 872.190901] ? selinux_file_ioctl+0x3f7/0x560 [ 872.193107] 0 [ 872.197928] ? ion_alloc.cold+0x3d/0x3d [ 872.197941] do_vfs_ioctl+0x75a/0xfe0 [ 872.197952] ? selinux_file_mprotect+0x5c0/0x5c0 [ 872.197963] ? ioctl_preallocate+0x1a0/0x1a0 [ 872.197983] ? security_file_ioctl+0x76/0xb0 [ 872.197992] ? security_file_ioctl+0x83/0xb0 [ 872.198004] SyS_ioctl+0x7f/0xb0 [ 872.210745] 0 [ 872.210929] ? do_vfs_ioctl+0xfe0/0xfe0 [ 872.215917] 0 [ 872.221528] do_syscall_64+0x1d5/0x640 [ 872.221545] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 872.221553] RIP: 0033:0x7fce30cbc469 [ 872.221558] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.221568] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 872.221573] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 872.221581] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 872.255015] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 872.263620] Node 0 [ 872.264221] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 872.269320] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.433037] lowmem_reserve[]: 0 0 0 0 0 [ 872.438214] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 872.443079] Node 1 [ 872.449709] syz-executor.1 cpuset= [ 872.450240] Normal free:3428564kB min:53612kB low:67012kB high:80412kB active_anon:64352kB inactive_anon:48100kB active_file:72288kB inactive_file:14124kB unevictable:0kB writepending:96kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1056kB pagetables:2200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.451938] / [ 872.455462] lowmem_reserve[]: 0 0 0 0 0 [ 872.490931] mems_allowed=0-1 [ 872.491548] Node 0 DMA: 83*4kB (UME) 64*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) [ 872.494693] CPU: 0 PID: 13182 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 872.494700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.504804] 2*128kB [ 872.510693] Call Trace: [ 872.510710] dump_stack+0x13e/0x194 [ 872.510727] warn_alloc.cold+0x96/0x1af [ 872.510736] ? zone_watermark_ok_safe+0x280/0x280 [ 872.510755] ? __alloc_pages_direct_compact+0xba/0x360 [ 872.510768] __alloc_pages_slowpath+0x2114/0x26c0 [ 872.510781] ? check_preemption_disabled+0x35/0x240 [ 872.510801] ? warn_alloc+0xf0/0xf0 [ 872.523376] (ME) [ 872.525069] __alloc_pages_nodemask+0x5d3/0x700 [ 872.529446] 2*256kB [ 872.532714] ? lock_downgrade+0x6e0/0x6e0 [ 872.537604] (ME) [ 872.542783] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 872.547630] 2*512kB [ 872.552612] ? SOFTIRQ_verbose+0x10/0x10 [ 872.556213] (ME) [ 872.558263] ? find_held_lock+0x2d/0x110 [ 872.558273] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 872.558288] alloc_pages_current+0xe7/0x1e0 [ 872.558302] ion_page_pool_alloc+0x118/0x1b0 [ 872.558314] ion_system_heap_allocate+0x134/0x8d0 [ 872.558326] ? _ion_heap_freelist_drain+0x6e/0x410 [ 872.558336] ? ion_system_heap_free+0x240/0x240 [ 872.558353] ion_alloc+0x611/0x7d0 [ 872.563627] 1*1024kB [ 872.565316] ? ion_dma_buf_release+0x40/0x40 [ 872.576467] (E) [ 872.576495] ? __might_fault+0x177/0x1b0 [ 872.578790] 1*2048kB [ 872.582852] ion_ioctl+0xef/0x1f8 [ 872.584879] (E) [ 872.588918] ? ion_alloc.cold+0x3d/0x3d [ 872.588934] ? selinux_file_ioctl+0x3f7/0x560 [ 872.588942] ? ion_alloc.cold+0x3d/0x3d [ 872.588954] do_vfs_ioctl+0x75a/0xfe0 [ 872.588963] ? selinux_file_mprotect+0x5c0/0x5c0 [ 872.588974] ? ioctl_preallocate+0x1a0/0x1a0 [ 872.588997] ? security_file_ioctl+0x76/0xb0 [ 872.599086] 1*4096kB [ 872.603316] ? security_file_ioctl+0x83/0xb0 [ 872.608187] (M) [ 872.613044] SyS_ioctl+0x7f/0xb0 [ 872.617728] = 10332kB [ 872.621222] ? do_vfs_ioctl+0xfe0/0xfe0 [ 872.623605] Node 0 [ 872.628003] do_syscall_64+0x1d5/0x640 [ 872.628021] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 872.628029] RIP: 0033:0x7fce30cbc469 [ 872.628034] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.628045] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 872.628052] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 872.635700] DMA32: [ 872.636465] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 872.636470] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 872.636475] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 872.773585] 379*4kB (ME) 89*8kB (UME) 953*16kB (UME) 1294*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58884kB [ 872.791591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 872.802468] Node 1 Normal: 388*4kB (UME) 493*8kB (UME) 403*16kB (UME) 358*32kB (UME) 255*64kB (UME) 149*128kB (UM) 69*256kB (UME) 18*512kB (UME) 7*1024kB (ME) 4*2048kB (M) 813*4096kB (M) = 3431080kB [ 872.826147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.835783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 872.845063] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 872.854645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 872.864240] 39844 total pagecache pages [ 872.869158] 0 pages in swap cache [ 872.872618] Swap cache stats: add 0, delete 0, find 0/0 [ 872.879567] Free swap = 0kB [ 872.882592] Total swap = 0kB [ 872.885616] 1965979 pages RAM [ 872.891697] 0 pages HighMem/MovableOnly [ 872.895922] 339053 pages reserved [ 872.900878] 0 pages cma reserved [ 872.910075] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 872.932364] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 872.939964] CPU: 1 PID: 13181 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 872.947953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.957306] Call Trace: [ 872.959878] dump_stack+0x13e/0x194 [ 872.963488] dump_header+0x178/0x6d4 [ 872.967180] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 872.972174] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 872.977274] ? ___ratelimit+0x50/0x519 [ 872.981155] oom_kill_process.cold+0x10/0xae3 [ 872.985627] ? lock_acquire+0x170/0x3f0 [ 872.989595] ? lock_downgrade+0x6e0/0x6e0 [ 872.993736] out_of_memory+0x2d5/0x1110 [ 872.997688] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 873.002597] ? oom_killer_disable+0x1c0/0x1c0 [ 873.007071] ? mutex_trylock+0x152/0x1a0 [ 873.011126] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 873.015969] ? warn_alloc+0xf0/0xf0 [ 873.019586] __alloc_pages_nodemask+0x5d3/0x700 [ 873.024231] ? lock_downgrade+0x6e0/0x6e0 [ 873.028372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 873.033103] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 873.038099] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 873.043719] alloc_pages_current+0xe7/0x1e0 [ 873.048032] ion_page_pool_alloc+0x118/0x1b0 [ 873.052420] ion_system_heap_allocate+0x134/0x8d0 [ 873.057241] ? _ion_heap_freelist_drain+0x6e/0x410 [ 873.062147] ? ion_system_heap_free+0x240/0x240 [ 873.066796] ion_alloc+0x611/0x7d0 [ 873.070318] ? ion_dma_buf_release+0x40/0x40 [ 873.074706] ? __might_fault+0x177/0x1b0 [ 873.078747] ion_ioctl+0xef/0x1f8 [ 873.082178] ? ion_alloc.cold+0x3d/0x3d [ 873.086135] ? selinux_file_ioctl+0x3f7/0x560 [ 873.090621] ? ion_alloc.cold+0x3d/0x3d [ 873.094589] do_vfs_ioctl+0x75a/0xfe0 [ 873.098368] ? selinux_file_mprotect+0x5c0/0x5c0 [ 873.103449] ? ioctl_preallocate+0x1a0/0x1a0 [ 873.107841] ? security_file_ioctl+0x76/0xb0 [ 873.112226] ? security_file_ioctl+0x83/0xb0 [ 873.116613] SyS_ioctl+0x7f/0xb0 [ 873.119956] ? do_vfs_ioctl+0xfe0/0xfe0 [ 873.123908] do_syscall_64+0x1d5/0x640 [ 873.127776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 873.132944] RIP: 0033:0x7f5232e49469 [ 873.137174] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.144872] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 873.152147] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 873.159417] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 873.166703] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 873.173955] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 873.184079] Mem-Info: [ 873.211581] active_anon:382076 inactive_anon:34609 isolated_anon:0 [ 873.211581] active_file:18073 inactive_file:3538 isolated_file:0 [ 873.211581] unevictable:0 dirty:7 writeback:0 unstable:0 [ 873.211581] slab_reclaimable:20039 slab_unreclaimable:124688 [ 873.211581] mapped:65629 shmem:18100 pagetables:8901 bounce:0 [ 873.211581] free:864923 free_pcp:86 free_cma:0 [ 873.246209] Node 0 active_anon:1463948kB inactive_anon:90336kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250588kB dirty:4kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 873.249876] syz-executor.1: [ 873.275293] Node 0 DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.279523] page allocation failure: order:0 [ 873.307016] lowmem_reserve[]: [ 873.310918] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 873.311425] 0 [ 873.314519] 0 [ 873.324365] 2557 2557 2557 2557 [ 873.325995] syz-executor.1 cpuset= [ 873.329227] Node 0 DMA32 free:18052kB min:36272kB low:45340kB high:54408kB active_anon:1459532kB inactive_anon:90336kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33404kB bounce:0kB free_pcp:344kB local_pcp:184kB free_cma:0kB [ 873.332960] / [ 873.363102] lowmem_reserve[]: 0 0 0 0 0 [ 873.367542] mems_allowed=0-1 [ 873.370136] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.372508] CPU: 0 PID: 13182 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 873.398571] lowmem_reserve[]: [ 873.405268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.405276] 0 [ 873.408370] Call Trace: [ 873.408389] dump_stack+0x13e/0x194 [ 873.408403] warn_alloc.cold+0x96/0x1af [ 873.408413] ? zone_watermark_ok_safe+0x280/0x280 [ 873.408422] ? save_trace+0x290/0x290 [ 873.408432] ? rcu_read_lock_sched_held+0x10a/0x130 [ 873.408453] __alloc_pages_slowpath+0x2114/0x26c0 [ 873.408477] ? warn_alloc+0xf0/0xf0 [ 873.422225] 0 [ 873.425832] __alloc_pages_nodemask+0x5d3/0x700 [ 873.430648] 0 [ 873.434599] ? lock_downgrade+0x6e0/0x6e0 [ 873.438432] 0 [ 873.443369] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 873.448866] 0 [ 873.451795] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 873.458213] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 873.458228] alloc_pages_current+0xe7/0x1e0 [ 873.458255] ion_page_pool_alloc+0x118/0x1b0 [ 873.458269] ion_system_heap_allocate+0x134/0x8d0 [ 873.458282] ? _ion_heap_freelist_drain+0x6e/0x410 [ 873.458293] ? ion_system_heap_free+0x240/0x240 [ 873.460070] Node 0 [ 873.464231] ion_alloc+0x611/0x7d0 [ 873.466001] DMA: [ 873.471005] ? ion_dma_buf_release+0x40/0x40 [ 873.471020] ? __might_fault+0x177/0x1b0 [ 873.471035] ion_ioctl+0xef/0x1f8 [ 873.471046] ? ion_alloc.cold+0x3d/0x3d [ 873.471066] ? selinux_file_ioctl+0x3f7/0x560 [ 873.481523] 83*4kB [ 873.483311] ? ion_alloc.cold+0x3d/0x3d [ 873.487657] (UME) [ 873.492002] do_vfs_ioctl+0x75a/0xfe0 [ 873.496980] 64*8kB [ 873.501737] ? selinux_file_mprotect+0x5c0/0x5c0 [ 873.506426] (UME) [ 873.508624] ? ioctl_preallocate+0x1a0/0x1a0 [ 873.512150] 9*16kB [ 873.514206] ? security_file_ioctl+0x76/0xb0 [ 873.518623] (UM) [ 873.522618] ? security_file_ioctl+0x83/0xb0 [ 873.526039] 6*32kB [ 873.530011] SyS_ioctl+0x7f/0xb0 [ 873.530021] ? do_vfs_ioctl+0xfe0/0xfe0 [ 873.530035] do_syscall_64+0x1d5/0x640 [ 873.530051] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 873.530059] RIP: 0033:0x7fce30cbc469 [ 873.530064] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.535609] (UE) [ 873.537551] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 873.537557] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 873.537562] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 873.537567] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 873.537573] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 873.538863] warn_alloc_show_mem: 2 callbacks suppressed [ 873.538866] Mem-Info: [ 873.551884] 3*64kB [ 873.554962] active_anon:382076 inactive_anon:34609 isolated_anon:0 [ 873.554962] active_file:18073 inactive_file:3552 isolated_file:0 [ 873.554962] unevictable:0 dirty:7 writeback:0 unstable:0 [ 873.554962] slab_reclaimable:20039 slab_unreclaimable:125018 [ 873.554962] mapped:65651 shmem:18100 pagetables:8901 bounce:0 [ 873.554962] free:864593 free_pcp:127 free_cma:0 [ 873.556821] (UME) [ 873.562011] Node 0 active_anon:1463948kB inactive_anon:90336kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250588kB dirty:4kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 873.563424] 2*128kB [ 873.568054] Node 1 active_anon:64356kB inactive_anon:48100kB active_file:72288kB inactive_file:14204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12016kB dirty:24kB writeback:0kB shmem:896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 873.583580] (ME) [ 873.584307] Node 0 [ 873.593343] 2*256kB [ 873.597167] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.604699] (ME) [ 873.607006] lowmem_reserve[]: [ 873.620161] 2*512kB [ 873.621837] 0 [ 873.629804] (ME) [ 873.636191] 2557 [ 873.649446] 1*1024kB [ 873.651822] 2557 [ 873.653546] (E) [ 873.687871] 2557 [ 873.695742] 1*2048kB [ 873.718210] 2557 [ 873.725922] (E) [ 873.756021] 1*4096kB [ 873.781387] Node 0 [ 873.788409] (M) [ 873.789026] DMA32 free:18260kB min:36272kB low:45340kB high:54408kB active_anon:1459532kB inactive_anon:90336kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:33404kB bounce:0kB free_pcp:364kB local_pcp:160kB free_cma:0kB [ 873.790500] = 10332kB [ 873.792557] lowmem_reserve[]: 0 [ 873.794616] Node 0 [ 873.797297] 0 [ 873.803829] DMA32: [ 873.805654] 0 [ 873.811813] 415*4kB [ 873.812668] 0 [ 873.814356] (ME) [ 873.826481] 0 [ 873.847526] 154*8kB [ 873.854830] (UME) [ 873.857534] Node 0 [ 873.860690] 12*16kB [ 873.861615] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 873.863385] (UME) [ 873.865444] lowmem_reserve[]: [ 873.873035] 463*32kB [ 873.874119] 0 [ 873.877227] (UE) [ 873.902169] 0 [ 873.908752] 0*64kB [ 873.909507] 0 [ 873.910968] 4*128kB [ 873.913017] 0 [ 873.914794] (U) [ 873.919583] 0 [ 873.922351] 0*256kB [ 873.926030] 0*512kB [ 873.930954] Node 1 [ 873.931550] 0*1024kB [ 873.933397] Normal free:3429168kB min:53612kB low:67012kB high:80412kB active_anon:64356kB inactive_anon:48100kB active_file:72288kB inactive_file:14204kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1056kB pagetables:2200kB bounce:0kB free_pcp:228kB local_pcp:0kB free_cma:0kB [ 873.935605] 0*2048kB [ 873.939739] lowmem_reserve[]: [ 873.968907] 0*4096kB = 18412kB [ 873.974674] 0 [ 873.976137] Node 0 [ 873.976144] 0 [ 873.980426] Normal: [ 873.981249] 0 [ 873.982223] 0*4kB [ 873.984525] 0 [ 873.988024] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 873.993383] 0 [ 874.001145] Node 0 DMA: 83*4kB (UME) 64*8kB (UME) 9*16kB (UM) 6*32kB (UE) 3*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10332kB [ 874.001978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.021844] Node 0 DMA32: 415*4kB (ME) 174*8kB (UME) 12*16kB (UME) 463*32kB (UE) 0*64kB 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18572kB [ 874.026392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.044397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 874.050193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.063932] Node 1 Normal: 257*4kB (UME) 360*8kB (ME) 312*16kB (UME) 283*32kB (UME) 236*64kB (UME) 156*128kB (UM) 82*256kB (UME) 20*512kB (UME) 7*1024kB (ME) 4*2048kB (M) 813*4096kB (M) = 3429668kB [ 874.070561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.092263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.096361] 39729 total pagecache pages [ 874.105164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.109581] 0 pages in swap cache [ 874.121210] Swap cache stats: add 0, delete 0, find 0/0 [ 874.124210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.126694] Free swap = 0kB [ 874.136682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.138526] Total swap = 0kB [ 874.150126] 1965979 pages RAM [ 874.152832] 39729 total pagecache pages [ 874.153224] 0 pages HighMem/MovableOnly [ 874.159090] 0 pages in swap cache [ 874.161402] 339053 pages reserved [ 874.164827] Swap cache stats: add 0, delete 0, find 0/0 [ 874.164833] Free swap = 0kB [ 874.168382] 0 pages cma reserved [ 874.168392] Out of memory: Kill process 13022 (syz-executor.3) score 1010 or sacrifice child [ 874.168428] Killed process 13022 (syz-executor.3) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 874.176384] syz-executor.2: [ 874.184114] Total swap = 0kB [ 874.202157] oom_reaper: reaped process 13022 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 874.209480] 1965979 pages RAM [ 874.216221] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 874.226833] 0 pages HighMem/MovableOnly [ 874.234609] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 874.242674] CPU: 1 PID: 13181 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 874.244097] 339053 pages reserved [ 874.250557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.250561] Call Trace: [ 874.250580] dump_stack+0x13e/0x194 [ 874.250596] warn_alloc.cold+0x96/0x1af [ 874.250606] ? zone_watermark_ok_safe+0x280/0x280 [ 874.250625] ? wait_for_completion+0x390/0x390 [ 874.250639] __alloc_pages_slowpath+0x2114/0x26c0 [ 874.258800] 0 pages cma reserved [ 874.263623] ? warn_alloc+0xf0/0xf0 [ 874.295144] __alloc_pages_nodemask+0x5d3/0x700 [ 874.299821] ? lock_downgrade+0x6e0/0x6e0 [ 874.303974] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 874.308735] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 874.313740] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 874.319350] alloc_pages_current+0xe7/0x1e0 [ 874.323673] ion_page_pool_alloc+0x118/0x1b0 [ 874.328760] ion_system_heap_allocate+0x134/0x8d0 [ 874.333604] ? _ion_heap_freelist_drain+0x6e/0x410 [ 874.338537] ? ion_system_heap_free+0x240/0x240 [ 874.343199] ion_alloc+0x611/0x7d0 [ 874.346730] ? ion_dma_buf_release+0x40/0x40 [ 874.351130] ? __might_fault+0x177/0x1b0 [ 874.355186] ion_ioctl+0xef/0x1f8 [ 874.358622] ? ion_alloc.cold+0x3d/0x3d [ 874.362582] ? selinux_file_ioctl+0x3f7/0x560 [ 874.367074] ? ion_alloc.cold+0x3d/0x3d [ 874.371045] do_vfs_ioctl+0x75a/0xfe0 [ 874.374826] ? selinux_file_mprotect+0x5c0/0x5c0 [ 874.379563] ? ioctl_preallocate+0x1a0/0x1a0 [ 874.383963] ? security_file_ioctl+0x76/0xb0 [ 874.388367] ? security_file_ioctl+0x83/0xb0 [ 874.392772] SyS_ioctl+0x7f/0xb0 [ 874.396117] ? do_vfs_ioctl+0xfe0/0xfe0 [ 874.400085] do_syscall_64+0x1d5/0x640 [ 874.403971] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 874.409251] RIP: 0033:0x7f5232e49469 [ 874.412939] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.420713] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 21:46:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:44 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) stat(&(0x7f0000000280)='./file0/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 21:46:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 21:46:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 874.427963] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 874.435211] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 874.442472] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 874.449722] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 21:46:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 874.809281] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 874.823298] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 21:46:45 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) [ 874.859571] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 874.879880] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 874.915691] CPU: 1 PID: 13247 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 874.923616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.932977] Call Trace: [ 874.935575] dump_stack+0x13e/0x194 [ 874.939212] warn_alloc.cold+0x96/0x1af [ 874.943192] ? zone_watermark_ok_safe+0x280/0x280 [ 874.948047] ? __alloc_pages_direct_compact+0xba/0x360 [ 874.953338] __alloc_pages_slowpath+0x2114/0x26c0 [ 874.958214] ? check_preemption_disabled+0x35/0x240 [ 874.963257] ? warn_alloc+0xf0/0xf0 [ 874.966902] __alloc_pages_nodemask+0x5d3/0x700 [ 874.972368] ? lock_downgrade+0x6e0/0x6e0 [ 874.976541] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 874.981567] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 874.986434] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 874.992676] alloc_pages_current+0xe7/0x1e0 [ 874.997005] ion_page_pool_alloc+0x118/0x1b0 [ 875.001857] ion_system_heap_allocate+0x134/0x8d0 [ 875.006704] ? rcu_read_lock_sched_held+0x10a/0x130 [ 875.011726] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 875.016575] ? ion_system_heap_free+0x240/0x240 [ 875.021248] ? down_read+0x3e/0xa0 [ 875.024818] ion_alloc+0x1e9/0x7d0 [ 875.028371] ? ion_dma_buf_release+0x40/0x40 [ 875.032785] ? __might_fault+0x177/0x1b0 [ 875.037674] ion_ioctl+0xef/0x1f8 [ 875.041125] ? ion_alloc.cold+0x3d/0x3d [ 875.045103] ? selinux_file_ioctl+0x3f7/0x560 [ 875.049595] ? ion_alloc.cold+0x3d/0x3d [ 875.053588] do_vfs_ioctl+0x75a/0xfe0 [ 875.057388] ? selinux_file_mprotect+0x5c0/0x5c0 [ 875.062145] ? ioctl_preallocate+0x1a0/0x1a0 [ 875.066564] ? security_file_ioctl+0x76/0xb0 [ 875.070968] ? security_file_ioctl+0x83/0xb0 [ 875.075376] SyS_ioctl+0x7f/0xb0 [ 875.078756] ? do_vfs_ioctl+0xfe0/0xfe0 [ 875.082845] do_syscall_64+0x1d5/0x640 [ 875.086737] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 875.091941] RIP: 0033:0x7f5232e49469 [ 875.095648] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.103358] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 875.110623] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 875.117889] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 875.125155] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 875.132450] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 875.156330] CPU: 1 PID: 13244 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 875.164249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.173701] Call Trace: [ 875.176329] dump_stack+0x13e/0x194 [ 875.179988] warn_alloc.cold+0x96/0x1af [ 875.183969] ? zone_watermark_ok_safe+0x280/0x280 [ 875.188852] ? __alloc_pages_direct_compact+0xba/0x360 [ 875.194134] __alloc_pages_slowpath+0x2114/0x26c0 [ 875.198980] ? check_preemption_disabled+0x35/0x240 [ 875.204015] ? warn_alloc+0xf0/0xf0 [ 875.207667] __alloc_pages_nodemask+0x5d3/0x700 [ 875.212340] ? lock_downgrade+0x6e0/0x6e0 [ 875.216487] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 875.221246] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 875.226271] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 875.231909] alloc_pages_current+0xe7/0x1e0 [ 875.236238] ion_page_pool_alloc+0x118/0x1b0 [ 875.240658] ion_system_heap_allocate+0x134/0x8d0 [ 875.245506] ? rcu_read_lock_sched_held+0x10a/0x130 [ 875.250525] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 875.255375] ? ion_system_heap_free+0x240/0x240 [ 875.260055] ion_alloc+0x1e9/0x7d0 [ 875.263605] ? ion_dma_buf_release+0x40/0x40 [ 875.268024] ? __might_fault+0x177/0x1b0 [ 875.272093] ion_ioctl+0xef/0x1f8 [ 875.275553] ? ion_alloc.cold+0x3d/0x3d [ 875.279536] ? selinux_file_ioctl+0x3f7/0x560 [ 875.284039] ? ion_alloc.cold+0x3d/0x3d [ 875.288057] do_vfs_ioctl+0x75a/0xfe0 [ 875.291866] ? selinux_file_mprotect+0x5c0/0x5c0 [ 875.296635] ? ioctl_preallocate+0x1a0/0x1a0 [ 875.301060] ? security_file_ioctl+0x76/0xb0 [ 875.305563] ? security_file_ioctl+0x83/0xb0 [ 875.310073] SyS_ioctl+0x7f/0xb0 [ 875.313441] ? do_vfs_ioctl+0xfe0/0xfe0 [ 875.317421] do_syscall_64+0x1d5/0x640 [ 875.321319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 875.326509] RIP: 0033:0x7fce30cbc469 [ 875.330214] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.337930] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 875.345380] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 875.352655] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 875.359929] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 875.367465] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 875.432458] warn_alloc_show_mem: 1 callbacks suppressed [ 875.432494] Mem-Info: [ 875.476236] active_anon:383307 inactive_anon:30046 isolated_anon:0 [ 875.476236] active_file:18121 inactive_file:3795 isolated_file:0 [ 875.476236] unevictable:0 dirty:47 writeback:0 unstable:0 [ 875.476236] slab_reclaimable:20046 slab_unreclaimable:125788 [ 875.476236] mapped:65896 shmem:18101 pagetables:8982 bounce:0 [ 875.476236] free:888829 free_pcp:281 free_cma:0 [ 875.518038] Node 0 active_anon:1468324kB inactive_anon:82928kB active_file:80kB inactive_file:1876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250684kB dirty:8kB writeback:0kB shmem:71504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1241088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 875.554644] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 21:46:45 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8bdda3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfafc72ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c7a59c4fbad5daac39cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31b76f4eb8af9edcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb07faf425f2b8c041ed6e416868a8f0e1baf4866becd3b98b477c2771364df5e5fc6c4dcd0f3"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) [ 875.572885] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 875.586741] CPU: 1 PID: 13240 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 875.589764] syz-executor.5: [ 875.594659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.594664] Call Trace: [ 875.594681] dump_stack+0x13e/0x194 [ 875.594696] warn_alloc.cold+0x96/0x1af [ 875.613384] page allocation failure: order:4 [ 875.617180] ? zone_watermark_ok_safe+0x280/0x280 [ 875.617204] ? __alloc_pages_direct_compact+0xba/0x360 [ 875.617217] __alloc_pages_slowpath+0x2114/0x26c0 [ 875.617230] ? check_preemption_disabled+0x35/0x240 [ 875.626213] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 875.626463] ? warn_alloc+0xf0/0xf0 [ 875.636181] 0 [ 875.636641] __alloc_pages_nodemask+0x5d3/0x700 [ 875.636655] ? lock_downgrade+0x6e0/0x6e0 [ 875.636667] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 875.641745] syz-executor.5 cpuset= [ 875.648743] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 875.648762] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 875.648777] alloc_pages_current+0xe7/0x1e0 [ 875.648791] ion_page_pool_alloc+0x118/0x1b0 [ 875.648804] ion_system_heap_allocate+0x134/0x8d0 [ 875.661823] / [ 875.662901] ? rcu_read_lock_sched_held+0x10a/0x130 [ 875.668892] Node 0 [ 875.671171] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 875.671186] ? ion_system_heap_free+0x240/0x240 [ 875.671201] ion_alloc+0x1e9/0x7d0 [ 875.683176] mems_allowed=0-1 [ 875.686144] ? ion_dma_buf_release+0x40/0x40 [ 875.686162] ? __might_fault+0x177/0x1b0 [ 875.686177] ion_ioctl+0xef/0x1f8 [ 875.686190] ? ion_alloc.cold+0x3d/0x3d [ 875.692908] DMA free:10480kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.695417] ? do_vfs_ioctl+0x76/0xfe0 [ 875.695430] ? ion_alloc.cold+0x3d/0x3d [ 875.695442] do_vfs_ioctl+0x75a/0xfe0 [ 875.706212] lowmem_reserve[]: [ 875.709208] ? selinux_file_mprotect+0x5c0/0x5c0 [ 875.709224] ? ioctl_preallocate+0x1a0/0x1a0 [ 875.709246] ? security_file_ioctl+0x76/0xb0 [ 875.719542] 0 [ 875.720510] ? security_file_ioctl+0x83/0xb0 [ 875.730497] 2557 [ 875.732369] SyS_ioctl+0x7f/0xb0 [ 875.732380] ? do_vfs_ioctl+0xfe0/0xfe0 [ 875.732393] do_syscall_64+0x1d5/0x640 [ 875.732410] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 875.743036] 2557 [ 875.762186] RIP: 0033:0x7fd58e5e9469 21:46:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) [ 875.762192] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.762204] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 875.762210] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 875.762215] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 875.762220] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 875.762225] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 875.881050] CPU: 0 PID: 13237 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 875.889066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.898428] Call Trace: [ 875.901018] dump_stack+0x13e/0x194 [ 875.904654] warn_alloc.cold+0x96/0x1af [ 875.908638] ? zone_watermark_ok_safe+0x280/0x280 [ 875.913499] ? __alloc_pages_direct_compact+0xba/0x360 [ 875.918787] __alloc_pages_slowpath+0x2114/0x26c0 [ 875.923638] ? check_preemption_disabled+0x35/0x240 [ 875.928677] ? warn_alloc+0xf0/0xf0 [ 875.932315] __alloc_pages_nodemask+0x5d3/0x700 [ 875.936971] ? lock_downgrade+0x6e0/0x6e0 [ 875.941118] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 875.946143] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 875.951757] alloc_pages_current+0xe7/0x1e0 [ 875.956078] ion_page_pool_alloc+0x118/0x1b0 [ 875.960489] ion_system_heap_allocate+0x134/0x8d0 [ 875.965327] ? rcu_read_lock_sched_held+0x10a/0x130 [ 875.970324] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 875.975146] ? ion_system_heap_free+0x240/0x240 [ 875.979800] ion_alloc+0x1e9/0x7d0 [ 875.983323] ? ion_dma_buf_release+0x40/0x40 [ 875.987717] ? __might_fault+0x177/0x1b0 [ 875.991763] ion_ioctl+0xef/0x1f8 [ 875.995196] ? ion_alloc.cold+0x3d/0x3d [ 875.999163] ? selinux_file_ioctl+0x3f7/0x560 [ 876.003639] ? ion_alloc.cold+0x3d/0x3d [ 876.007618] do_vfs_ioctl+0x75a/0xfe0 [ 876.011430] ? selinux_file_mprotect+0x5c0/0x5c0 [ 876.016167] ? ioctl_preallocate+0x1a0/0x1a0 [ 876.020564] ? security_file_ioctl+0x76/0xb0 [ 876.024954] ? security_file_ioctl+0x83/0xb0 [ 876.029343] SyS_ioctl+0x7f/0xb0 [ 876.032689] ? do_vfs_ioctl+0xfe0/0xfe0 [ 876.036647] do_syscall_64+0x1d5/0x640 [ 876.040522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 876.045691] RIP: 0033:0x7fe47ef7c469 [ 876.049383] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.057087] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 876.064337] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 876.071587] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 876.078854] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 876.086109] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 876.199145] 2557 2557 [ 876.202150] Node 0 DMA32 free:36028kB min:36272kB low:45340kB high:54408kB active_anon:1464052kB inactive_anon:82932kB active_file:176kB inactive_file:648kB unevictable:0kB writepending:68kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16544kB pagetables:33708kB bounce:0kB free_pcp:72kB local_pcp:0kB free_cma:0kB 21:46:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8bdda3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfafc72ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c7a59c4fbad5daac39cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31b76f4eb8af9edcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb07faf425f2b8c041ed6e416868a8f0e1baf4866becd3b98b477c2771364df5e5fc6c4dcd0f3"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) [ 876.300572] oom_reaper: reaped process 13247 (syz-executor.2), now anon-rss:0kB, file-rss:44kB, shmem-rss:0kB [ 876.384450] oom_reaper: reaped process 13240 (syz-executor.4), now anon-rss:0kB, file-rss:32kB, shmem-rss:0kB [ 876.422274] lowmem_reserve[]: 0 0 0 0 0 [ 876.428570] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 876.440163] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 876.454961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.491251] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 876.491727] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 876.509758] CPU: 0 PID: 13240 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 876.517651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.526992] Call Trace: [ 876.529581] dump_stack+0x13e/0x194 [ 876.531827] lowmem_reserve[]: [ 876.533206] warn_alloc.cold+0x96/0x1af [ 876.533219] ? zone_watermark_ok_safe+0x280/0x280 [ 876.541917] 0 [ 876.545099] ? save_trace+0x290/0x290 [ 876.545109] ? rcu_read_lock_sched_held+0x10a/0x130 [ 876.545139] __alloc_pages_slowpath+0x2114/0x26c0 [ 876.555935] 0 [ 876.560507] ? warn_alloc+0xf0/0xf0 [ 876.560535] __alloc_pages_nodemask+0x5d3/0x700 [ 876.560547] ? lock_downgrade+0x6e0/0x6e0 [ 876.560557] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 876.560565] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 876.560582] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 876.572057] 0 [ 876.574768] alloc_pages_current+0xe7/0x1e0 [ 876.574782] ion_page_pool_alloc+0x118/0x1b0 [ 876.581826] warn_alloc_show_mem: 2 callbacks suppressed [ 876.581830] Mem-Info: [ 876.584527] ion_system_heap_allocate+0x134/0x8d0 [ 876.584543] ? rcu_read_lock_sched_held+0x10a/0x130 [ 876.600279] 0 [ 876.600631] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 876.600645] ? ion_system_heap_free+0x240/0x240 [ 876.612882] active_anon:382743 inactive_anon:30045 isolated_anon:0 [ 876.612882] active_file:18111 inactive_file:3825 isolated_file:0 [ 876.612882] unevictable:0 dirty:2 writeback:0 unstable:0 [ 876.612882] slab_reclaimable:20068 slab_unreclaimable:125360 [ 876.612882] mapped:65875 shmem:18100 pagetables:9081 bounce:0 [ 876.612882] free:869372 free_pcp:101 free_cma:0 [ 876.613205] ion_alloc+0x1e9/0x7d0 [ 876.621587] 0 [ 876.624901] ? ion_dma_buf_release+0x40/0x40 [ 876.624919] ? __might_fault+0x177/0x1b0 [ 876.637475] Node 0 active_anon:1466044kB inactive_anon:82932kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250764kB dirty:12kB writeback:0kB shmem:71508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1241088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 876.663487] ion_ioctl+0xef/0x1f8 [ 876.663500] ? ion_alloc.cold+0x3d/0x3d [ 876.663514] ? do_vfs_ioctl+0x76/0xfe0 [ 876.663524] ? ion_alloc.cold+0x3d/0x3d [ 876.663535] do_vfs_ioctl+0x75a/0xfe0 [ 876.663549] ? selinux_file_mprotect+0x5c0/0x5c0 [ 876.663560] ? ioctl_preallocate+0x1a0/0x1a0 [ 876.663581] ? security_file_ioctl+0x76/0xb0 [ 876.663590] ? security_file_ioctl+0x83/0xb0 [ 876.663602] SyS_ioctl+0x7f/0xb0 [ 876.663614] ? do_vfs_ioctl+0xfe0/0xfe0 [ 876.677357] do_syscall_64+0x1d5/0x640 [ 876.739009] Node 0 [ 876.742278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 876.742288] RIP: 0033:0x7fd58e5e9469 [ 876.753535] DMA free:10328kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.755691] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.755703] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 876.755712] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 876.762061] Node 0 [ 876.764567] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 876.764573] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 876.764579] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 876.825859] syz-executor.4: [ 876.839004] CPU: 1 PID: 13247 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 876.839012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.839016] Call Trace: [ 876.839034] dump_stack+0x13e/0x194 [ 876.839050] warn_alloc.cold+0x96/0x1af [ 876.839060] ? zone_watermark_ok_safe+0x280/0x280 [ 876.839070] ? save_trace+0x290/0x290 [ 876.839081] ? rcu_read_lock_sched_held+0x10a/0x130 [ 876.839109] __alloc_pages_slowpath+0x2114/0x26c0 [ 876.839137] ? warn_alloc+0xf0/0xf0 [ 876.839165] __alloc_pages_nodemask+0x5d3/0x700 [ 876.839176] ? lock_downgrade+0x6e0/0x6e0 [ 876.839187] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 876.839201] ? audit_add_tree_rule.cold+0x2f/0x2f [ 876.839212] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 876.839226] alloc_pages_current+0xe7/0x1e0 [ 876.839240] ion_page_pool_alloc+0x118/0x1b0 [ 876.839253] ion_system_heap_allocate+0x134/0x8d0 [ 876.839264] ? rcu_read_lock_sched_held+0x10a/0x130 [ 876.839273] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 876.839285] ? ion_system_heap_free+0x240/0x240 [ 876.839296] ? down_read+0x3e/0xa0 [ 876.839309] ion_alloc+0x1e9/0x7d0 [ 876.839326] ? ion_dma_buf_release+0x40/0x40 [ 876.839343] ? __might_fault+0x177/0x1b0 [ 876.839357] ion_ioctl+0xef/0x1f8 [ 876.839367] ? ion_alloc.cold+0x3d/0x3d [ 876.839383] ? selinux_file_ioctl+0x3f7/0x560 [ 876.839392] ? ion_alloc.cold+0x3d/0x3d [ 876.839405] do_vfs_ioctl+0x75a/0xfe0 [ 876.839415] ? selinux_file_mprotect+0x5c0/0x5c0 [ 876.839428] ? ioctl_preallocate+0x1a0/0x1a0 [ 876.839450] ? security_file_ioctl+0x76/0xb0 [ 876.839459] ? security_file_ioctl+0x83/0xb0 [ 876.839472] SyS_ioctl+0x7f/0xb0 [ 876.839480] ? do_vfs_ioctl+0xfe0/0xfe0 [ 876.839496] do_syscall_64+0x1d5/0x640 [ 877.008126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 877.013297] RIP: 0033:0x7f5232e49469 [ 877.016985] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.025209] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 877.032473] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 21:46:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) [ 877.039738] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 877.046988] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 877.054238] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 877.070944] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 877.081756] Node 0 DMA32 free:21460kB min:36272kB low:45340kB high:54408kB active_anon:1461516kB inactive_anon:82924kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33392kB bounce:0kB free_pcp:1224kB local_pcp:560kB free_cma:0kB [ 877.085261] page allocation failure: order:4 [ 877.120084] lowmem_reserve[]: [ 877.123753] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 877.124971] 0 [ 877.130166] 0 [ 877.139770] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 877.140576] 0 0 0 0 [ 877.145348] CPU: 0 PID: 13240 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 877.147749] Node 0 [ 877.155172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.155176] Call Trace: [ 877.155195] dump_stack+0x13e/0x194 [ 877.155210] warn_alloc.cold+0x96/0x1af [ 877.157934] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.166799] ? zone_watermark_ok_safe+0x280/0x280 [ 877.166818] ? __alloc_pages_direct_compact+0xba/0x360 [ 877.166831] __alloc_pages_slowpath+0x2114/0x26c0 [ 877.166844] ? check_preemption_disabled+0x35/0x240 [ 877.166864] ? warn_alloc+0xf0/0xf0 [ 877.166897] __alloc_pages_nodemask+0x5d3/0x700 [ 877.169763] DMA: [ 877.173082] ? lock_downgrade+0x6e0/0x6e0 [ 877.173093] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 877.173103] ? SOFTIRQ_verbose+0x10/0x10 [ 877.177512] 82*4kB [ 877.202235] ? find_held_lock+0x2d/0x110 [ 877.202247] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 877.202261] alloc_pages_current+0xe7/0x1e0 [ 877.202275] ion_page_pool_alloc+0x118/0x1b0 [ 877.202288] ion_system_heap_allocate+0x134/0x8d0 [ 877.202301] ? _ion_heap_freelist_drain+0x6e/0x410 [ 877.202310] ? ion_system_heap_free+0x240/0x240 [ 877.202324] ion_alloc+0x611/0x7d0 [ 877.202339] ? ion_dma_buf_release+0x40/0x40 [ 877.202356] ? __might_fault+0x177/0x1b0 [ 877.202369] ion_ioctl+0xef/0x1f8 [ 877.202378] ? ion_alloc.cold+0x3d/0x3d [ 877.202401] ? do_vfs_ioctl+0x76/0xfe0 [ 877.208951] lowmem_reserve[]: [ 877.212516] ? ion_alloc.cold+0x3d/0x3d [ 877.212530] do_vfs_ioctl+0x75a/0xfe0 [ 877.218341] 0 [ 877.222387] ? selinux_file_mprotect+0x5c0/0x5c0 [ 877.222410] ? ioctl_preallocate+0x1a0/0x1a0 [ 877.226475] 0 [ 877.230682] ? security_file_ioctl+0x76/0xb0 [ 877.230695] ? security_file_ioctl+0x83/0xb0 [ 877.232790] 0 [ 877.236868] SyS_ioctl+0x7f/0xb0 [ 877.236877] ? do_vfs_ioctl+0xfe0/0xfe0 [ 877.236889] do_syscall_64+0x1d5/0x640 [ 877.236907] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 877.236915] RIP: 0033:0x7fd58e5e9469 [ 877.236920] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.236930] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 877.236935] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 877.236940] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 877.236945] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 877.236950] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 877.290480] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 877.295195] (ME) [ 877.298007] 0 [ 877.305948] 62*8kB [ 877.309478] , order=0, oom_score_adj=1000 [ 877.312611] (UME) [ 877.318254] syz-executor.4 cpuset= [ 877.327164] 9*16kB [ 877.330552] / [ 877.333382] (UM) [ 877.340859] mems_allowed=0-1 [ 877.349284] 6*32kB [ 877.354109] CPU: 0 PID: 13240 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 877.356730] (UE) [ 877.360182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.360187] Call Trace: [ 877.360203] dump_stack+0x13e/0x194 [ 877.360219] dump_header+0x178/0x6d4 [ 877.368018] 5*64kB [ 877.375162] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 877.375174] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 877.375185] ? ___ratelimit+0x50/0x519 [ 877.382928] 0 [ 877.389725] oom_kill_process.cold+0x10/0xae3 [ 877.389740] ? lock_downgrade+0x6e0/0x6e0 [ 877.389756] out_of_memory+0x2d5/0x1110 [ 877.389766] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 877.389779] ? oom_killer_disable+0x1c0/0x1c0 [ 877.389790] ? mutex_trylock+0x152/0x1a0 [ 877.389802] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 877.389826] ? warn_alloc+0xf0/0xf0 [ 877.397607] (UME) [ 877.404347] __alloc_pages_nodemask+0x5d3/0x700 [ 877.404361] ? lock_downgrade+0x6e0/0x6e0 [ 877.415165] 0 [ 877.416872] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 877.416883] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 877.416901] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 877.416916] alloc_pages_current+0xe7/0x1e0 [ 877.416930] ion_page_pool_alloc+0x118/0x1b0 [ 877.416942] ion_system_heap_allocate+0x134/0x8d0 [ 877.416955] ? _ion_heap_freelist_drain+0x6e/0x410 [ 877.416966] ? ion_system_heap_free+0x240/0x240 [ 877.420885] ion_alloc+0x611/0x7d0 [ 877.420904] ? ion_dma_buf_release+0x40/0x40 [ 877.425153] Node 0 [ 877.427249] ? __might_fault+0x177/0x1b0 [ 877.427264] ion_ioctl+0xef/0x1f8 [ 877.427275] ? ion_alloc.cold+0x3d/0x3d [ 877.427289] ? do_vfs_ioctl+0x76/0xfe0 [ 877.427298] ? ion_alloc.cold+0x3d/0x3d [ 877.427309] do_vfs_ioctl+0x75a/0xfe0 [ 877.427321] ? selinux_file_mprotect+0x5c0/0x5c0 [ 877.427333] ? ioctl_preallocate+0x1a0/0x1a0 [ 877.432016] DMA: [ 877.433082] ? security_file_ioctl+0x76/0xb0 [ 877.433093] ? security_file_ioctl+0x83/0xb0 [ 877.434820] 2*128kB [ 877.436833] SyS_ioctl+0x7f/0xb0 [ 877.436842] ? do_vfs_ioctl+0xfe0/0xfe0 [ 877.436856] do_syscall_64+0x1d5/0x640 [ 877.436873] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 877.436883] RIP: 0033:0x7fd58e5e9469 [ 877.436888] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.436898] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 877.436903] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 877.436909] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 877.436914] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 877.436920] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 877.472921] Mem-Info: [ 877.476976] 83*4kB [ 877.480188] active_anon:382665 inactive_anon:30045 isolated_anon:0 [ 877.480188] active_file:18110 inactive_file:3600 isolated_file:0 [ 877.480188] unevictable:0 dirty:0 writeback:0 unstable:0 [ 877.480188] slab_reclaimable:20085 slab_unreclaimable:125881 [ 877.480188] mapped:65827 shmem:18100 pagetables:8961 bounce:0 [ 877.480188] free:869252 free_pcp:202 free_cma:0 [ 877.485884] (UME) [ 877.502707] Node 0 active_anon:1465932kB inactive_anon:82924kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250804kB dirty:12kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 877.513132] 57*8kB [ 877.539114] Node 0 [ 877.543080] (ME) [ 877.582615] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.590244] (UME) [ 877.598091] lowmem_reserve[]: [ 877.599259] 5*16kB [ 877.613925] 0 [ 877.616385] warn_alloc_show_mem: 2 callbacks suppressed [ 877.616388] Mem-Info: [ 877.632285] 2557 [ 877.633424] (UM) [ 877.655437] 2557 [ 877.661402] 6*32kB [ 877.678118] active_anon:382865 inactive_anon:30045 isolated_anon:0 [ 877.678118] active_file:18085 inactive_file:3475 isolated_file:0 [ 877.678118] unevictable:0 dirty:0 writeback:0 unstable:0 [ 877.678118] slab_reclaimable:20085 slab_unreclaimable:125801 [ 877.678118] mapped:65877 shmem:18100 pagetables:8961 bounce:0 [ 877.678118] free:869290 free_pcp:370 free_cma:0 [ 877.685193] (UE) [ 877.694213] 2*256kB [ 877.703436] 5*64kB [ 877.745552] 2557 [ 877.774140] Node 0 active_anon:1465932kB inactive_anon:82924kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250804kB dirty:12kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 877.807111] (ME) [ 877.810110] (UME) [ 877.815392] 2*512kB [ 877.817790] 2*128kB [ 877.825178] (ME) [ 877.830880] (ME) [ 877.875056] 2557 [ 877.901951] Node 1 active_anon:66028kB inactive_anon:37256kB active_file:73232kB inactive_file:13596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13504kB dirty:0kB writeback:0kB shmem:900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 877.903443] 1*1024kB [ 877.905790] Node 0 [ 877.910495] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.912302] (E) [ 877.940420] lowmem_reserve[]: [ 877.949215] Node 0 [ 877.975125] 0 [ 877.978195] 1*2048kB [ 877.978389] 2*256kB [ 877.980231] DMA32 free:18268kB min:36272kB low:45340kB high:54408kB active_anon:1461516kB inactive_anon:82924kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33392kB bounce:0kB free_pcp:848kB local_pcp:288kB free_cma:0kB [ 877.982608] 2557 [ 877.984962] (E) [ 878.013717] 2557 2557 2557 [ 878.020864] Node 0 DMA32 free:18268kB min:36272kB low:45340kB high:54408kB active_anon:1461516kB inactive_anon:82924kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33392kB bounce:0kB free_pcp:848kB local_pcp:560kB free_cma:0kB [ 878.025335] lowmem_reserve[]: [ 878.051246] lowmem_reserve[]: 0 0 0 0 0 [ 878.057889] (ME) [ 878.059703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.064357] 2*512kB [ 878.088973] lowmem_reserve[]: 0 0 0 0 0 [ 878.094575] 0 0 0 0 0 [ 878.095506] Node 1 Normal free:3443924kB min:53612kB low:67012kB high:80412kB active_anon:67100kB inactive_anon:37252kB active_file:73332kB inactive_file:14360kB unevictable:0kB writepending:104kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:1088kB pagetables:2508kB bounce:0kB free_pcp:396kB local_pcp:260kB free_cma:0kB [ 878.112653] (ME) [ 878.129682] 1*4096kB (M) = 10440kB [ 878.131929] lowmem_reserve[]: [ 878.135281] Node 0 DMA32: 429*4kB (UME) 171*8kB (UME) 20*16kB (ME) 406*32kB [ 878.138700] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.150321] 0 [ 878.172639] (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 18444kB [ 878.172680] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 878.172736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.172742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.172748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.172754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.172759] 40029 total pagecache pages [ 878.172770] 0 pages in swap cache [ 878.172775] Swap cache stats: add 0, delete 0, find 0/0 [ 878.172779] Free swap = 0kB [ 878.172783] Total swap = 0kB [ 878.172789] 1965979 pages RAM [ 878.172792] 0 pages HighMem/MovableOnly [ 878.172796] 339053 pages reserved [ 878.172800] 0 pages cma reserved [ 878.177179] 1*1024kB [ 878.198584] 0 [ 878.205591] (E) [ 878.220178] 0 [ 878.238265] lowmem_reserve[]: [ 878.247792] 0 [ 878.255941] 0 [ 878.262136] 0 [ 878.265402] 0 0 0 0 [ 878.265422] Node 0 DMA: [ 878.280048] 1*2048kB [ 878.284254] Node 0 [ 878.284906] (E) [ 878.290782] DMA: [ 878.293659] 83*4kB [ 878.294098] 83*4kB [ 878.296215] (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 5*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 878.296293] Node 0 DMA32: 563*4kB (UME) 175*8kB (UME) 26*16kB (UME) 413*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 19332kB [ 878.296365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 878.296427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.296434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.296440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.296446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.296451] 40029 total pagecache pages [ 878.296463] 0 pages in swap cache [ 878.296469] Swap cache stats: add 0, delete 0, find 0/0 [ 878.296473] Free swap = 0kB [ 878.296476] Total swap = 0kB [ 878.296484] 1965979 pages RAM [ 878.296488] 0 pages HighMem/MovableOnly [ 878.296492] 339053 pages reserved [ 878.296496] 0 pages cma reserved [ 878.296503] Out of memory: Kill process 12909 (syz-executor.5) score 1010 or sacrifice child [ 878.296540] Killed process 12909 (syz-executor.5) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 878.310659] (UME) [ 878.316009] 1*4096kB [ 878.342558] 57*8kB [ 878.351427] (M) [ 878.362860] syz-executor.4: [ 878.386111] = 10340kB [ 878.394222] (UME) [ 878.394858] Node 0 [ 878.398229] 5*16kB [ 878.411139] oom_reaper: reaped process 12909 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 878.423163] page allocation failure: order:0 [ 878.431833] DMA32: [ 878.433502] (UM) [ 878.435384] 718*4kB (UME) 400*8kB (UME) 53*16kB (UME) 413*32kB (UME) 0*64kB [ 878.441763] 6*32kB [ 878.446984] 0*128kB [ 878.447442] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 878.450719] 0*256kB [ 878.464215] (UE) [ 878.483931] oom_reaper: reaped process 13244 (syz-executor.1), now anon-rss:0kB, file-rss:36kB, shmem-rss:0kB [ 878.493399] 0 [ 878.503928] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 878.506818] 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 22184kB [ 878.514125] 5*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 878.515946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 878.525744] CPU: 1 PID: 13240 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 878.537057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.543832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.553649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.561982] Call Trace: [ 878.562001] dump_stack+0x13e/0x194 [ 878.562017] warn_alloc.cold+0x96/0x1af [ 878.562027] ? zone_watermark_ok_safe+0x280/0x280 [ 878.562047] ? wait_for_completion+0x390/0x390 [ 878.572925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.573200] __alloc_pages_slowpath+0x2114/0x26c0 [ 878.577668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 878.580766] ? warn_alloc+0xf0/0xf0 [ 878.585584] 40029 total pagecache pages [ 878.590262] __alloc_pages_nodemask+0x5d3/0x700 [ 878.590276] ? lock_downgrade+0x6e0/0x6e0 [ 878.590286] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 878.590295] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 878.590312] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 878.602378] 0 pages in swap cache [ 878.604038] alloc_pages_current+0xe7/0x1e0 [ 878.613513] Swap cache stats: add 0, delete 0, find 0/0 [ 878.616201] ion_page_pool_alloc+0x118/0x1b0 [ 878.616216] ion_system_heap_allocate+0x134/0x8d0 [ 878.616230] ? _ion_heap_freelist_drain+0x6e/0x410 [ 878.616242] ? ion_system_heap_free+0x240/0x240 [ 878.622226] Free swap = 0kB [ 878.625054] ion_alloc+0x611/0x7d0 [ 878.630091] Total swap = 0kB [ 878.633937] ? ion_dma_buf_release+0x40/0x40 [ 878.639783] 1965979 pages RAM [ 878.644558] ? __might_fault+0x177/0x1b0 [ 878.648866] 0 pages HighMem/MovableOnly [ 878.652302] ion_ioctl+0xef/0x1f8 [ 878.659696] 339053 pages reserved [ 878.662209] ? ion_alloc.cold+0x3d/0x3d [ 878.667926] 0 pages cma reserved [ 878.671944] ? do_vfs_ioctl+0x76/0xfe0 [ 878.691307] oom_reaper: reaped process 13237 (syz-executor.5), now anon-rss:0kB, file-rss:28kB, shmem-rss:0kB [ 878.693639] ? ion_alloc.cold+0x3d/0x3d [ 878.698799] Node 0 [ 878.701659] do_vfs_ioctl+0x75a/0xfe0 [ 878.705082] DMA32: [ 878.708516] ? selinux_file_mprotect+0x5c0/0x5c0 [ 878.708527] ? ioctl_preallocate+0x1a0/0x1a0 [ 878.708549] ? security_file_ioctl+0x76/0xb0 [ 878.708557] ? security_file_ioctl+0x83/0xb0 [ 878.708569] SyS_ioctl+0x7f/0xb0 [ 878.708578] ? do_vfs_ioctl+0xfe0/0xfe0 [ 878.708590] do_syscall_64+0x1d5/0x640 [ 878.708607] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 878.719195] 504*4kB [ 878.719770] RIP: 0033:0x7fd58e5e9469 [ 878.729836] (UME) [ 878.733756] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 [ 878.736003] 139*8kB [ 878.740026] ORIG_RAX: 0000000000000010 [ 878.742239] (ME) [ 878.746968] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 878.746974] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 878.746979] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 878.746985] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 878.746990] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 878.760094] Mem-Info: [ 878.760813] syz-executor.5: [ 878.763660] active_anon:382102 inactive_anon:25519 isolated_anon:0 [ 878.763660] active_file:18335 inactive_file:3591 isolated_file:0 [ 878.763660] unevictable:0 dirty:3 writeback:0 unstable:0 [ 878.763660] slab_reclaimable:20082 slab_unreclaimable:126733 [ 878.763660] mapped:65726 shmem:18100 pagetables:8901 bounce:0 [ 878.763660] free:871887 free_pcp:246 free_cma:0 [ 878.771770] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 878.782431] Node 0 active_anon:1463808kB inactive_anon:79524kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250872kB dirty:8kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1239040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 878.783424] page allocation failure: order:0 [ 878.785829] Node 1 active_anon:64600kB inactive_anon:22552kB active_file:73332kB inactive_file:14360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12032kB dirty:4kB writeback:0kB shmem:900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 878.791108] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 878.793091] Node 0 [ 878.797119] 0, order=0, oom_score_adj=1000 [ 878.797131] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 878.797153] CPU: 0 PID: 13244 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 878.797158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.797162] Call Trace: [ 878.797178] dump_stack+0x13e/0x194 [ 878.797194] dump_header+0x178/0x6d4 [ 878.797207] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 878.807586] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.813766] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 878.823227] lowmem_reserve[]: [ 878.828295] ? ___ratelimit+0x50/0x519 [ 878.828313] oom_kill_process.cold+0x10/0xae3 [ 878.828328] ? lock_acquire+0x170/0x3f0 [ 878.828339] ? lock_downgrade+0x6e0/0x6e0 [ 878.828355] out_of_memory+0x2d5/0x1110 [ 878.828365] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 878.828378] ? oom_killer_disable+0x1c0/0x1c0 [ 878.828389] ? mutex_trylock+0x152/0x1a0 [ 878.828403] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 878.844591] 0 [ 878.875717] ? warn_alloc+0xf0/0xf0 [ 878.875742] __alloc_pages_nodemask+0x5d3/0x700 [ 878.875754] ? lock_downgrade+0x6e0/0x6e0 [ 878.875764] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 878.875773] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 878.875790] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 878.875804] alloc_pages_current+0xe7/0x1e0 [ 878.875817] ion_page_pool_alloc+0x118/0x1b0 [ 878.875830] ion_system_heap_allocate+0x134/0x8d0 [ 878.875844] ? rcu_read_lock_sched_held+0x10a/0x130 [ 878.875853] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 878.875864] ? ion_system_heap_free+0x240/0x240 [ 878.875878] ion_alloc+0x1e9/0x7d0 [ 878.875899] ? ion_dma_buf_release+0x40/0x40 [ 878.875915] ? __might_fault+0x177/0x1b0 [ 878.875930] ion_ioctl+0xef/0x1f8 [ 878.875940] ? ion_alloc.cold+0x3d/0x3d [ 878.875956] ? selinux_file_ioctl+0x3f7/0x560 [ 878.875964] ? ion_alloc.cold+0x3d/0x3d [ 878.875976] do_vfs_ioctl+0x75a/0xfe0 [ 878.875986] ? selinux_file_mprotect+0x5c0/0x5c0 [ 878.875997] ? ioctl_preallocate+0x1a0/0x1a0 [ 878.876020] ? security_file_ioctl+0x76/0xb0 [ 878.876030] ? security_file_ioctl+0x83/0xb0 [ 878.876043] SyS_ioctl+0x7f/0xb0 [ 878.876052] ? do_vfs_ioctl+0xfe0/0xfe0 [ 878.876064] do_syscall_64+0x1d5/0x640 [ 878.876084] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 878.876093] RIP: 0033:0x7fce30cbc469 [ 878.876098] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.876110] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 878.876116] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 878.876122] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 878.876127] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 878.876132] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 878.877297] 22*16kB [ 878.895953] 0 [ 878.918376] (ME) [ 878.934811] 2557 [ 878.947185] 329*32kB [ 878.957259] 2557 [ 878.961102] Mem-Info: [ 878.971535] syz-executor.5 cpuset= [ 878.974152] (UME) [ 878.984132] 2557 [ 878.986421] active_anon:382102 inactive_anon:25519 isolated_anon:0 [ 878.986421] active_file:18339 inactive_file:3591 isolated_file:0 [ 878.986421] unevictable:0 dirty:0 writeback:16 unstable:0 [ 878.986421] slab_reclaimable:20082 slab_unreclaimable:126899 [ 878.986421] mapped:65741 shmem:18100 pagetables:8901 bounce:0 [ 878.986421] free:871734 free_pcp:55 free_cma:0 [ 878.994014] 2557 [ 878.998922] 0*64kB [ 879.031697] / [ 879.034915] Node 0 active_anon:1463764kB inactive_anon:79432kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:250976kB dirty:4kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 879.038681] mems_allowed=0-1 [ 879.038708] CPU: 1 PID: 13237 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 879.038715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.038719] Call Trace: [ 879.038734] dump_stack+0x13e/0x194 [ 879.038750] warn_alloc.cold+0x96/0x1af [ 879.038761] ? zone_watermark_ok_safe+0x280/0x280 [ 879.038771] ? save_trace+0x290/0x290 [ 879.038782] ? rcu_read_lock_sched_held+0x10a/0x130 [ 879.038809] __alloc_pages_slowpath+0x2114/0x26c0 [ 879.038837] ? warn_alloc+0xf0/0xf0 [ 879.038865] __alloc_pages_nodemask+0x5d3/0x700 [ 879.038877] ? lock_downgrade+0x6e0/0x6e0 [ 879.038887] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 879.038905] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 879.038919] alloc_pages_current+0xe7/0x1e0 [ 879.038933] ion_page_pool_alloc+0x118/0x1b0 [ 879.038946] ion_system_heap_allocate+0x134/0x8d0 [ 879.038957] ? rcu_read_lock_sched_held+0x10a/0x130 [ 879.038966] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 879.038978] ? ion_system_heap_free+0x240/0x240 [ 879.038996] ion_alloc+0x1e9/0x7d0 [ 879.039013] ? ion_dma_buf_release+0x40/0x40 [ 879.039031] ? __might_fault+0x177/0x1b0 [ 879.039047] ion_ioctl+0xef/0x1f8 [ 879.039057] ? ion_alloc.cold+0x3d/0x3d [ 879.039076] ? selinux_file_ioctl+0x3f7/0x560 [ 879.039085] ? ion_alloc.cold+0x3d/0x3d [ 879.039098] do_vfs_ioctl+0x75a/0xfe0 [ 879.039108] ? selinux_file_mprotect+0x5c0/0x5c0 [ 879.039121] ? ioctl_preallocate+0x1a0/0x1a0 [ 879.039144] ? security_file_ioctl+0x76/0xb0 [ 879.039154] ? security_file_ioctl+0x83/0xb0 [ 879.039167] SyS_ioctl+0x7f/0xb0 [ 879.039176] ? do_vfs_ioctl+0xfe0/0xfe0 [ 879.039189] do_syscall_64+0x1d5/0x640 [ 879.039207] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 879.039216] RIP: 0033:0x7fe47ef7c469 [ 879.039221] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.039233] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 879.039239] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 879.039245] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 879.039251] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 879.039257] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 879.044532] syz-executor.5: [ 879.060190] Node 0 [ 879.090068] page allocation failure: order:4 [ 879.092059] 0*128kB [ 879.095069] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 879.100269] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.110946] 0*256kB [ 879.121770] Node 0 [ 879.124649] lowmem_reserve[]: [ 879.129523] 0 [ 879.134393] 0*512kB [ 879.146183] DMA32 free:22584kB min:36272kB low:45340kB high:54408kB active_anon:1459348kB inactive_anon:79432kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33388kB bounce:0kB free_pcp:836kB local_pcp:628kB free_cma:0kB [ 879.147423] 0 [ 879.151052] lowmem_reserve[]: [ 879.154486] 2557 [ 879.165347] syz-executor.5 cpuset= [ 879.167310] 0*1024kB [ 879.171781] / [ 879.175605] 0*2048kB [ 879.191439] 0 [ 879.193047] 2557 [ 879.197278] mems_allowed=0-1 [ 879.200775] 2557 [ 879.205486] CPU: 1 PID: 13237 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 879.209422] 1*4096kB [ 879.216948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.216953] Call Trace: [ 879.216970] dump_stack+0x13e/0x194 [ 879.216987] warn_alloc.cold+0x96/0x1af [ 879.224248] 2557 [ 879.231511] ? zone_watermark_ok_safe+0x280/0x280 [ 879.231531] ? __alloc_pages_direct_compact+0xba/0x360 [ 879.231544] __alloc_pages_slowpath+0x2114/0x26c0 [ 879.231558] ? check_preemption_disabled+0x35/0x240 [ 879.239166] (M) [ 879.246073] ? warn_alloc+0xf0/0xf0 [ 879.246102] __alloc_pages_nodemask+0x5d3/0x700 [ 879.255684] ? lock_downgrade+0x6e0/0x6e0 [ 879.257933] Node 0 [ 879.259521] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 879.261574] DMA32 free:22584kB min:36272kB low:45340kB high:54408kB active_anon:1459348kB inactive_anon:79432kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33388kB bounce:0kB free_pcp:836kB local_pcp:208kB free_cma:0kB [ 879.263971] ? SOFTIRQ_verbose+0x10/0x10 [ 879.266040] = 18104kB [ 879.268401] ? find_held_lock+0x2d/0x110 [ 879.271909] Node 0 [ 879.274055] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 879.276349] lowmem_reserve[]: [ 879.310028] alloc_pages_current+0xe7/0x1e0 [ 879.310044] ion_page_pool_alloc+0x118/0x1b0 [ 879.310056] ion_system_heap_allocate+0x134/0x8d0 [ 879.310069] ? _ion_heap_freelist_drain+0x6e/0x410 [ 879.312133] Normal: [ 879.314334] ? ion_system_heap_free+0x240/0x240 [ 879.316350] 0*4kB [ 879.343884] ion_alloc+0x611/0x7d0 [ 879.343903] ? ion_dma_buf_release+0x40/0x40 [ 879.343924] ? __might_fault+0x177/0x1b0 [ 879.347053] 0 [ 879.354901] ion_ioctl+0xef/0x1f8 [ 879.364575] 0*8kB [ 879.366814] ? ion_alloc.cold+0x3d/0x3d [ 879.366831] ? selinux_file_ioctl+0x3f7/0x560 [ 879.366841] ? ion_alloc.cold+0x3d/0x3d [ 879.370443] 0*16kB [ 879.374423] do_vfs_ioctl+0x75a/0xfe0 [ 879.379549] 0 [ 879.383024] ? selinux_file_mprotect+0x5c0/0x5c0 [ 879.388051] 0*32kB [ 879.392841] ? ioctl_preallocate+0x1a0/0x1a0 [ 879.396459] 0 [ 879.401110] ? security_file_ioctl+0x76/0xb0 [ 879.405222] 0 [ 879.410217] ? security_file_ioctl+0x83/0xb0 [ 879.410230] SyS_ioctl+0x7f/0xb0 [ 879.410240] ? do_vfs_ioctl+0xfe0/0xfe0 [ 879.416049] 0*64kB [ 879.420450] do_syscall_64+0x1d5/0x640 [ 879.424831] 0*128kB [ 879.429661] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 879.429670] RIP: 0033:0x7fe47ef7c469 [ 879.429674] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.429685] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 879.429690] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 879.429698] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 879.436754] 0*256kB [ 879.439559] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 879.444219] 0*512kB [ 879.447735] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 879.456499] 0 [ 879.465846] 0 [ 879.468542] 0 [ 879.476143] 0 0 [ 879.476154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.476174] lowmem_reserve[]: 0 0 0 0 0 [ 879.476228] Node 1 Normal free:3453196kB min:53612kB low:67012kB high:80412kB active_anon:64528kB inactive_anon:22492kB active_file:73392kB inactive_file:14424kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:992kB pagetables:2172kB bounce:0kB free_pcp:648kB local_pcp:108kB free_cma:0kB [ 879.503499] Node 0 [ 879.507257] lowmem_reserve[]: 0 0 0 0 0 [ 879.507283] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 5*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 879.507381] Node 0 DMA32: 536*4kB (UME) 815*8kB (UME) 133*16kB (UME) 379*32kB (UME) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB [ 879.512641] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 879.516374] (U) 0*4096kB = 25736kB [ 879.516386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 879.535831] 0*1024kB [ 879.538771] = 0kB [ 879.555828] lowmem_reserve[]: [ 879.561280] Node 1 [ 879.564273] 0 [ 879.566559] Normal: 346*4kB (M) 432*8kB (ME) 399*16kB (UME) 352*32kB (UM) 299*64kB (UM) 187*128kB (UME) 95*256kB (UM) 29*512kB (UME) 8*1024kB (ME) 4*2048kB (M) 813*4096kB (M) = 3451160kB [ 879.566648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.566655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 879.566662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.566668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 879.566672] 40063 total pagecache pages [ 879.566683] 0 pages in swap cache [ 879.566688] Swap cache stats: add 0, delete 0, find 0/0 [ 879.566692] Free swap = 0kB [ 879.566696] Total swap = 0kB [ 879.566703] 1965979 pages RAM [ 879.566706] 0 pages HighMem/MovableOnly [ 879.566710] 339053 pages reserved [ 879.566714] 0 pages cma reserved [ 879.643450] 0*2048kB [ 879.650625] 0 [ 879.652955] 0*4096kB [ 879.654689] 0 [ 879.658370] = 0kB [ 879.664953] 0 [ 879.668170] Node 1 [ 879.668915] 0 [ 879.670938] Normal: [ 879.680391] 347*4kB [ 879.685900] Node 0 [ 879.688703] (UM) [ 879.700867] DMA: [ 879.703188] 436*8kB [ 879.707324] 83*4kB [ 879.711347] (UME) [ 879.714223] (UME) [ 879.721357] 397*16kB [ 879.725829] 57*8kB [ 879.730525] (ME) [ 879.731376] (UME) [ 879.734981] 349*32kB [ 879.743297] 5*16kB [ 879.748643] (UM) [ 879.751225] (UM) [ 879.785124] syz-executor.5: [ 879.786339] 6*32kB [ 879.790378] page allocation failure: order:0 [ 879.792590] (UE) [ 879.804913] 297*64kB [ 879.805660] 5*64kB [ 879.810457] (UM) [ 879.816288] (UME) [ 879.820457] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 879.829308] 2*128kB [ 879.832989] 0 [ 879.839760] (ME) [ 879.841574] 186*128kB [ 879.843021] 2*256kB [ 879.847445] syz-executor.5 cpuset= [ 879.852738] (ME) [ 879.857534] (UME) [ 879.863494] 2*512kB [ 879.867550] 90*256kB [ 879.872850] / [ 879.874018] (UM) [ 879.878545] (ME) [ 879.881322] 29*512kB [ 879.882515] 1*1024kB [ 879.887137] (UME) [ 879.893085] mems_allowed=0-1 [ 879.893181] 8*1024kB [ 879.898924] CPU: 0 PID: 13237 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 879.901308] (ME) [ 879.902826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.908192] 4*2048kB [ 879.909949] Call Trace: [ 879.915133] (M) [ 879.918852] dump_stack+0x13e/0x194 [ 879.918868] warn_alloc.cold+0x96/0x1af [ 879.918879] ? zone_watermark_ok_safe+0x280/0x280 [ 879.918889] ? save_trace+0x290/0x290 [ 879.918898] ? rcu_read_lock_sched_held+0x10a/0x130 [ 879.918923] __alloc_pages_slowpath+0x2114/0x26c0 [ 879.918950] ? warn_alloc+0xf0/0xf0 [ 879.926686] 813*4096kB [ 879.933893] __alloc_pages_nodemask+0x5d3/0x700 [ 879.948712] (M) [ 879.950744] ? lock_downgrade+0x6e0/0x6e0 [ 879.958084] = 3449532kB [ 879.960315] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 879.967739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 879.969444] ? SOFTIRQ_verbose+0x10/0x10 [ 879.971237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 879.973022] ? find_held_lock+0x2d/0x110 [ 879.974969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 880.000372] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 880.000387] alloc_pages_current+0xe7/0x1e0 [ 880.000400] ion_page_pool_alloc+0x118/0x1b0 [ 880.000413] ion_system_heap_allocate+0x134/0x8d0 [ 880.000426] ? _ion_heap_freelist_drain+0x6e/0x410 [ 880.000437] ? ion_system_heap_free+0x240/0x240 [ 880.000453] ion_alloc+0x611/0x7d0 [ 880.000468] ? ion_dma_buf_release+0x40/0x40 [ 880.000485] ? __might_fault+0x177/0x1b0 [ 880.000498] ion_ioctl+0xef/0x1f8 [ 880.000508] ? ion_alloc.cold+0x3d/0x3d [ 880.000523] ? selinux_file_ioctl+0x3f7/0x560 [ 880.000531] ? ion_alloc.cold+0x3d/0x3d [ 880.000542] do_vfs_ioctl+0x75a/0xfe0 [ 880.000550] ? selinux_file_mprotect+0x5c0/0x5c0 [ 880.000561] ? ioctl_preallocate+0x1a0/0x1a0 [ 880.000583] ? security_file_ioctl+0x76/0xb0 [ 880.017826] (E) [ 880.034190] ? security_file_ioctl+0x83/0xb0 [ 880.034204] SyS_ioctl+0x7f/0xb0 [ 880.034214] ? do_vfs_ioctl+0xfe0/0xfe0 [ 880.034227] do_syscall_64+0x1d5/0x640 [ 880.034244] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 880.034255] RIP: 0033:0x7fe47ef7c469 [ 880.036567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 880.040438] RSP: 002b:00007fe47f66cdb8 EFLAGS: 00000246 [ 880.059645] 1*2048kB [ 880.069623] ORIG_RAX: 0000000000000010 [ 880.069630] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 880.069635] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 880.069640] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 880.069645] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 880.069650] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f66d5c0 [ 880.079535] warn_alloc_show_mem: 2 callbacks suppressed [ 880.079538] Mem-Info: [ 880.095057] 40078 total pagecache pages [ 880.103725] active_anon:382074 inactive_anon:25481 isolated_anon:0 [ 880.103725] active_file:18350 inactive_file:3623 isolated_file:0 [ 880.103725] unevictable:0 dirty:10 writeback:0 unstable:0 [ 880.103725] slab_reclaimable:20072 slab_unreclaimable:127487 [ 880.103725] mapped:65776 shmem:18100 pagetables:8890 bounce:0 [ 880.103725] free:869054 free_pcp:283 free_cma:0 [ 880.108892] 0 pages in swap cache [ 880.111893] Node 0 active_anon:1463764kB inactive_anon:79432kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251072kB dirty:4kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 880.113057] Swap cache stats: add 0, delete 0, find 0/0 [ 880.121481] Node 1 active_anon:64532kB inactive_anon:22492kB active_file:73392kB inactive_file:14492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12032kB dirty:36kB writeback:0kB shmem:900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 880.139451] Free swap = 0kB [ 880.152118] Node 0 [ 880.156245] Total swap = 0kB [ 880.165845] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.174165] 1965979 pages RAM [ 880.177915] (E) [ 880.185792] 0 pages HighMem/MovableOnly [ 880.189107] 1*4096kB [ 880.190362] 339053 pages reserved [ 880.193026] (M) [ 880.201561] 0 pages cma reserved [ 880.203624] lowmem_reserve[]: [ 880.266428] = 10340kB [ 880.267026] 0 [ 880.269159] Node 0 [ 880.273543] 2557 2557 [ 880.275590] DMA32: [ 880.277994] 2557 2557 [ 880.278004] Node 0 DMA32 free:24504kB min:36272kB low:45340kB high:54408kB active_anon:1459348kB inactive_anon:79432kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33388kB bounce:0kB free_pcp:980kB local_pcp:288kB free_cma:0kB [ 880.278026] lowmem_reserve[]: 0 0 0 0 0 [ 880.278047] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 880.278066] lowmem_reserve[]: 0 0 0 0 0 [ 880.278089] Node 1 Normal free:3444868kB min:53612kB low:67012kB high:80412kB active_anon:64532kB inactive_anon:22492kB active_file:73392kB inactive_file:14492kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:992kB pagetables:2172kB bounce:0kB free_pcp:720kB local_pcp:608kB free_cma:0kB [ 880.278109] lowmem_reserve[]: 0 0 [ 880.310261] 516*4kB [ 880.310668] 0 [ 880.312960] (UME) [ 880.315377] 0 [ 880.329994] 395*8kB [ 880.333291] 0 [ 880.333725] (UME) [ 880.370402] 1605*16kB [ 880.375227] Node 0 [ 880.389916] (UME) [ 880.393220] DMA: [ 880.394889] 14*32kB [ 880.401259] 83*4kB [ 880.423568] (UME) [ 880.428532] (UME) [ 880.459997] 53*64kB [ 880.465798] 57*8kB [ 880.468819] (UM) [ 880.473432] (UME) [ 880.495768] 34*128kB [ 880.502409] 5*16kB [ 880.504495] (U) [ 880.509292] (UM) [ 880.512269] 6*256kB [ 880.518456] 6*32kB [ 880.539727] (U) [ 880.545297] (UE) [ 880.555824] 3*512kB [ 880.567029] 5*64kB [ 880.585759] (U) [ 880.593829] (UME) [ 880.595789] 0*1024kB [ 880.603856] 2*128kB [ 880.616648] 0*2048kB [ 880.623906] (ME) [ 880.656918] syz-executor.2: [ 880.664832] 2*256kB [ 880.688633] page allocation failure: order:4 [ 880.699121] (ME) [ 880.721991] 0*4096kB [ 880.730552] 2*512kB [ 880.756405] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 880.756418] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 880.756440] CPU: 1 PID: 13247 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 880.756445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.756449] Call Trace: [ 880.756466] dump_stack+0x13e/0x194 [ 880.756481] warn_alloc.cold+0x96/0x1af [ 880.756491] ? zone_watermark_ok_safe+0x280/0x280 [ 880.756513] ? __alloc_pages_direct_compact+0xba/0x360 [ 880.756527] __alloc_pages_slowpath+0x2114/0x26c0 [ 880.756541] ? check_preemption_disabled+0x35/0x240 [ 880.756562] ? warn_alloc+0xf0/0xf0 [ 880.764097] (ME) [ 880.765611] __alloc_pages_nodemask+0x5d3/0x700 [ 880.775150] 1*1024kB [ 880.776737] ? lock_downgrade+0x6e0/0x6e0 [ 880.776748] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 880.776755] ? SOFTIRQ_verbose+0x10/0x10 [ 880.776767] ? find_held_lock+0x2d/0x110 [ 880.779855] (E) [ 880.782264] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 880.784039] 1*2048kB [ 880.787040] alloc_pages_current+0xe7/0x1e0 [ 880.787053] ion_page_pool_alloc+0x118/0x1b0 [ 880.787065] ion_system_heap_allocate+0x134/0x8d0 [ 880.787080] ? _ion_heap_freelist_drain+0x6e/0x410 [ 880.787093] ? ion_system_heap_free+0x240/0x240 [ 880.794192] (E) [ 880.794285] ? down_read+0x3e/0xa0 [ 880.824272] 1*4096kB [ 880.827289] ion_alloc+0x611/0x7d0 [ 880.827305] ? ion_dma_buf_release+0x40/0x40 [ 880.827321] ? __might_fault+0x177/0x1b0 [ 880.852732] (M) [ 880.856674] ion_ioctl+0xef/0x1f8 [ 880.856684] ? ion_alloc.cold+0x3d/0x3d [ 880.856700] ? selinux_file_ioctl+0x3f7/0x560 [ 880.856709] ? ion_alloc.cold+0x3d/0x3d [ 880.856723] do_vfs_ioctl+0x75a/0xfe0 [ 880.891228] = 10340kB [ 880.893192] ? selinux_file_mprotect+0x5c0/0x5c0 [ 880.894975] Node 0 [ 880.897109] ? ioctl_preallocate+0x1a0/0x1a0 [ 880.897129] ? security_file_ioctl+0x76/0xb0 [ 880.897138] ? security_file_ioctl+0x83/0xb0 [ 880.897150] SyS_ioctl+0x7f/0xb0 [ 880.897158] ? do_vfs_ioctl+0xfe0/0xfe0 [ 880.897170] do_syscall_64+0x1d5/0x640 [ 880.902286] DMA32: [ 880.903079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 880.905218] 3927*4kB [ 880.907696] RIP: 0033:0x7f5232e49469 [ 880.907701] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.907710] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 880.907716] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 880.907720] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 880.907725] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 880.907732] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 880.909115] = 42168kB [ 880.915297] (UME) [ 880.916860] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 880.916926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 880.916933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 880.916941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 880.916948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 880.916952] 40078 total pagecache pages [ 880.916964] 0 pages in swap cache [ 880.916969] Swap cache stats: add 0, delete 0, find 0/0 [ 880.916973] Free swap = 0kB [ 880.916976] Total swap = 0kB [ 880.916983] 1965979 pages RAM [ 880.916986] 0 pages HighMem/MovableOnly [ 880.916990] 339053 pages reserved [ 880.916993] 0 pages cma reserved [ 880.917000] Out of memory: Kill process 12960 (syz-executor.5) score 1010 or sacrifice child [ 880.917036] Killed process 12960 (syz-executor.5) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 880.931746] syz-executor.1: [ 880.973792] 5798*8kB [ 880.990288] page allocation failure: order:0 [ 881.026635] (UME) [ 881.030390] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 881.040976] 4474*16kB [ 881.046829] 0 [ 881.055237] (UME) [ 881.055996] syz-executor.1 cpuset= [ 881.059110] 897*32kB [ 881.062623] / [ 881.067533] (UME) [ 881.071821] mems_allowed=0-1 [ 881.081859] 0*64kB [ 881.083394] CPU: 1 PID: 13244 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 881.085699] 0*128kB [ 881.090026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.094407] 0*256kB [ 881.099236] Call Trace: [ 881.099258] dump_stack+0x13e/0x194 [ 881.099272] warn_alloc.cold+0x96/0x1af [ 881.099281] ? zone_watermark_ok_safe+0x280/0x280 [ 881.099303] ? wait_for_completion+0x390/0x390 [ 881.099318] __alloc_pages_slowpath+0x2114/0x26c0 [ 881.099343] ? warn_alloc+0xf0/0xf0 [ 881.099369] __alloc_pages_nodemask+0x5d3/0x700 [ 881.099382] ? lock_downgrade+0x6e0/0x6e0 [ 881.099393] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 881.099403] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 881.099420] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 881.099435] alloc_pages_current+0xe7/0x1e0 [ 881.099449] ion_page_pool_alloc+0x118/0x1b0 [ 881.099462] ion_system_heap_allocate+0x134/0x8d0 [ 881.099475] ? rcu_read_lock_sched_held+0x10a/0x130 [ 881.099485] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 881.099496] ? ion_system_heap_free+0x240/0x240 [ 881.099512] ion_alloc+0x1e9/0x7d0 [ 881.099527] ? ion_dma_buf_release+0x40/0x40 [ 881.099543] ? __might_fault+0x177/0x1b0 [ 881.099559] ion_ioctl+0xef/0x1f8 [ 881.099570] ? ion_alloc.cold+0x3d/0x3d [ 881.099587] ? selinux_file_ioctl+0x3f7/0x560 [ 881.099595] ? ion_alloc.cold+0x3d/0x3d [ 881.099608] do_vfs_ioctl+0x75a/0xfe0 [ 881.099618] ? selinux_file_mprotect+0x5c0/0x5c0 [ 881.099631] ? ioctl_preallocate+0x1a0/0x1a0 [ 881.099654] ? security_file_ioctl+0x76/0xb0 [ 881.099663] ? security_file_ioctl+0x83/0xb0 [ 881.099675] SyS_ioctl+0x7f/0xb0 [ 881.099683] ? do_vfs_ioctl+0xfe0/0xfe0 [ 881.099694] do_syscall_64+0x1d5/0x640 [ 881.099711] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 881.099719] RIP: 0033:0x7fce30cbc469 [ 881.099726] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 [ 881.104692] 0*512kB [ 881.109306] ORIG_RAX: 0000000000000010 [ 881.109312] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 881.109317] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 881.109322] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 881.109328] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 881.109333] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 881.109451] Mem-Info: [ 881.134146] 0*1024kB [ 881.140454] active_anon:382106 inactive_anon:20948 isolated_anon:0 [ 881.140454] active_file:18370 inactive_file:3878 isolated_file:0 [ 881.140454] unevictable:0 dirty:33 writeback:0 unstable:0 [ 881.140454] slab_reclaimable:20040 slab_unreclaimable:129048 [ 881.140454] mapped:65811 shmem:18100 pagetables:8838 bounce:0 [ 881.140454] free:908224 free_pcp:187 free_cma:0 [ 881.148394] 0*2048kB [ 881.151480] syz-executor.1: [ 881.153853] 0*4096kB [ 881.158864] Node 0 active_anon:1463892kB inactive_anon:73588kB active_file:84kB inactive_file:980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251156kB dirty:36kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 881.158882] Node 1 active_anon:64532kB inactive_anon:10204kB active_file:73396kB inactive_file:14532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12088kB dirty:96kB writeback:0kB shmem:900kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 881.158886] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.158909] lowmem_reserve[]: 0 2557 2557 2557 [ 881.168149] = 162380kB [ 881.170336] page allocation failure: order:4 [ 881.175319] Node 0 [ 881.178530] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 881.187731] Normal: [ 881.189401] 0 [ 881.194236] 0*4kB [ 881.196715] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 881.196737] CPU: 1 PID: 13244 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 881.196743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.196747] Call Trace: [ 881.196764] dump_stack+0x13e/0x194 [ 881.196780] warn_alloc.cold+0x96/0x1af [ 881.208310] 2557 [ 881.215442] ? zone_watermark_ok_safe+0x280/0x280 [ 881.222743] 0*8kB [ 881.229973] ? __alloc_pages_direct_compact+0xba/0x360 [ 881.229987] __alloc_pages_slowpath+0x2114/0x26c0 [ 881.244580] ? check_preemption_disabled+0x35/0x240 [ 881.249408] 0*16kB [ 881.259764] ? warn_alloc+0xf0/0xf0 [ 881.259790] __alloc_pages_nodemask+0x5d3/0x700 [ 881.268661] Node 0 [ 881.277192] ? lock_downgrade+0x6e0/0x6e0 [ 881.277202] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 881.277209] ? SOFTIRQ_verbose+0x10/0x10 [ 881.277224] ? find_held_lock+0x2d/0x110 [ 881.277233] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 881.277248] alloc_pages_current+0xe7/0x1e0 [ 881.289736] 0*32kB [ 881.294625] ion_page_pool_alloc+0x118/0x1b0 [ 881.299465] DMA32 free:163872kB min:36272kB low:45340kB high:54408kB active_anon:1459476kB inactive_anon:73588kB active_file:84kB inactive_file:980kB unevictable:0kB writepending:36kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33448kB bounce:0kB free_pcp:828kB local_pcp:692kB free_cma:0kB [ 881.302014] ion_system_heap_allocate+0x134/0x8d0 [ 881.307388] 0*64kB [ 881.310352] ? _ion_heap_freelist_drain+0x6e/0x410 [ 881.313354] 0*128kB 0*256kB [ 881.316482] ? ion_system_heap_free+0x240/0x240 [ 881.316497] ion_alloc+0x611/0x7d0 [ 881.316513] ? ion_dma_buf_release+0x40/0x40 [ 881.316530] ? __might_fault+0x177/0x1b0 [ 881.316544] ion_ioctl+0xef/0x1f8 [ 881.316554] ? ion_alloc.cold+0x3d/0x3d [ 881.316571] ? selinux_file_ioctl+0x3f7/0x560 [ 881.326474] lowmem_reserve[]: [ 881.327349] ? ion_alloc.cold+0x3d/0x3d [ 881.335945] 0*512kB [ 881.346641] do_vfs_ioctl+0x75a/0xfe0 [ 881.346657] ? selinux_file_mprotect+0x5c0/0x5c0 [ 881.349656] 0 [ 881.352041] ? ioctl_preallocate+0x1a0/0x1a0 [ 881.359105] 0 [ 881.365677] ? security_file_ioctl+0x76/0xb0 [ 881.365686] ? security_file_ioctl+0x83/0xb0 [ 881.365699] SyS_ioctl+0x7f/0xb0 [ 881.368653] 0*1024kB [ 881.370340] ? do_vfs_ioctl+0xfe0/0xfe0 [ 881.372459] 0*2048kB [ 881.375988] do_syscall_64+0x1d5/0x640 [ 881.376005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 881.376014] RIP: 0033:0x7fce30cbc469 [ 881.376019] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.376030] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 881.376038] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 881.383109] 0 [ 881.385358] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 881.388466] 0*4096kB [ 881.395456] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 881.397798] 0 [ 881.407093] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 881.480191] = 0kB [ 881.481337] 0 [ 881.499929] Node 1 [ 881.520168] Normal: [ 881.523652] Node 0 [ 881.540482] 398*4kB [ 881.542815] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.544628] (UM) [ 881.549492] lowmem_reserve[]: [ 881.559861] 435*8kB [ 881.562378] 0 [ 881.579865] (UME) [ 881.583843] 0 [ 881.619797] 388*16kB [ 881.649769] 0 [ 881.689115] (UME) [ 881.718401] 0 [ 881.793352] 330*32kB [ 881.797426] 0 [ 881.809713] (UM) [ 881.835762] 293*64kB [ 881.845664] Node 1 [ 881.848063] (UM) [ 881.849920] Normal free:3457216kB min:53612kB low:67012kB high:80412kB active_anon:64532kB inactive_anon:10204kB active_file:73396kB inactive_file:14532kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:928kB pagetables:1904kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 881.867019] 195*128kB [ 881.891963] lowmem_reserve[]: [ 881.929119] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 881.945827] 0 [ 881.948036] (UME) [ 881.951744] 0 [ 881.954050] 85*256kB [ 881.963954] 0 [ 881.964574] (UM) [ 881.969803] 0 [ 881.971500] 0 [ 881.984212] 0 [ 881.986777] 29*512kB [ 881.992684] (UME) [ 882.001580] Node 0 [ 882.002315] 15*1024kB [ 882.006595] DMA: [ 882.013413] , order=0, oom_score_adj=1000 [ 882.039402] 83*4kB [ 882.039624] (ME) [ 882.051448] (UME) [ 882.056708] 5*2048kB [ 882.059574] 57*8kB [ 882.059915] (M) [ 882.062145] (UME) [ 882.064447] 813*4096kB [ 882.072986] 5*16kB [ 882.094221] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 882.094247] CPU: 1 PID: 13244 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 882.094254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.094258] Call Trace: [ 882.094277] dump_stack+0x13e/0x194 [ 882.094293] dump_header+0x178/0x6d4 [ 882.094306] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 882.094316] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 882.094326] ? ___ratelimit+0x50/0x519 [ 882.094339] oom_kill_process.cold+0x10/0xae3 [ 882.094349] ? lock_acquire+0x170/0x3f0 [ 882.094359] ? lock_downgrade+0x6e0/0x6e0 [ 882.094375] out_of_memory+0x2d5/0x1110 [ 882.094385] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 882.094400] ? oom_killer_disable+0x1c0/0x1c0 [ 882.094411] ? mutex_trylock+0x152/0x1a0 [ 882.094425] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 882.094453] ? warn_alloc+0xf0/0xf0 [ 882.094480] __alloc_pages_nodemask+0x5d3/0x700 [ 882.094492] ? lock_downgrade+0x6e0/0x6e0 [ 882.094502] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 882.110260] (UM) [ 882.111862] ? ion_page_pool_alloc+0x9e/0x1b0 [ 882.113983] 6*32kB [ 882.115763] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 882.115777] alloc_pages_current+0xe7/0x1e0 [ 882.115789] ion_page_pool_alloc+0x118/0x1b0 [ 882.115801] ion_system_heap_allocate+0x134/0x8d0 [ 882.115814] ? _ion_heap_freelist_drain+0x6e/0x410 [ 882.115824] ? ion_system_heap_free+0x240/0x240 [ 882.115838] ion_alloc+0x611/0x7d0 [ 882.115854] ? ion_dma_buf_release+0x40/0x40 [ 882.118232] (UE) [ 882.120023] ? __might_fault+0x177/0x1b0 [ 882.122052] 5*64kB [ 882.124469] ion_ioctl+0xef/0x1f8 [ 882.134432] (UME) [ 882.157532] ? ion_alloc.cold+0x3d/0x3d [ 882.157549] ? selinux_file_ioctl+0x3f7/0x560 [ 882.157557] ? ion_alloc.cold+0x3d/0x3d [ 882.157571] do_vfs_ioctl+0x75a/0xfe0 [ 882.160053] 2*128kB [ 882.163142] ? selinux_file_mprotect+0x5c0/0x5c0 [ 882.163155] ? ioctl_preallocate+0x1a0/0x1a0 [ 882.177228] (ME) [ 882.177415] ? security_file_ioctl+0x76/0xb0 [ 882.179184] 2*256kB [ 882.181578] ? security_file_ioctl+0x83/0xb0 [ 882.183350] (ME) [ 882.185399] SyS_ioctl+0x7f/0xb0 [ 882.187233] 2*512kB [ 882.188900] ? do_vfs_ioctl+0xfe0/0xfe0 [ 882.190693] (ME) [ 882.193090] do_syscall_64+0x1d5/0x640 [ 882.195210] 1*1024kB [ 882.197461] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 882.197470] RIP: 0033:0x7fce30cbc469 [ 882.197477] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 [ 882.199948] (E) [ 882.201989] ORIG_RAX: 0000000000000010 [ 882.213648] 1*2048kB [ 882.215093] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 882.218443] (E) [ 882.219270] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 882.221394] 1*4096kB (M) [ 882.223963] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 882.226209] = 10340kB [ 882.231259] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 882.239219] Node 0 [ 882.248533] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 882.249799] (M) [ 882.256820] DMA32: [ 882.263030] Mem-Info: [ 882.263537] 769*4kB [ 882.269043] active_anon:382073 inactive_anon:20917 isolated_anon:0 [ 882.269043] active_file:18350 inactive_file:3639 isolated_file:0 [ 882.269043] unevictable:0 dirty:5 writeback:0 unstable:0 [ 882.269043] slab_reclaimable:19573 slab_unreclaimable:130962 [ 882.269043] mapped:65826 shmem:18100 pagetables:8826 bounce:0 [ 882.269043] free:870697 free_pcp:147 free_cma:0 [ 882.269062] Node 0 active_anon:1463848kB inactive_anon:73528kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251216kB dirty:4kB writeback:0kB shmem:71500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 882.269067] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.269088] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 882.269113] Node 0 DMA32 free:19524kB min:36272kB low:45340kB high:54408kB active_anon:1459432kB inactive_anon:73528kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33384kB bounce:0kB free_pcp:588kB local_pcp:0kB free_cma:0kB [ 882.269136] lowmem_reserve[]: [ 882.282891] (UME) [ 882.285806] = 3457808kB [ 882.285815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.285821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 882.285827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.285834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 882.285838] 40090 total pagecache pages [ 882.285850] 0 pages in swap cache [ 882.285856] Swap cache stats: add 0, delete 0, find 0/0 [ 882.285860] Free swap = 0kB [ 882.285864] Total swap = 0kB [ 882.285871] 1965979 pages RAM [ 882.285875] 0 pages HighMem/MovableOnly [ 882.285879] 339053 pages reserved [ 882.285883] 0 pages cma reserved [ 882.291432] 0 [ 882.295372] 242*8kB [ 882.299354] 0 0 0 0 [ 882.303576] Node 0 [ 882.316155] (UME) [ 882.316869] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 882.325028] 46*16kB [ 882.325926] lowmem_reserve[]: 0 0 0 0 0 [ 882.325950] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 5*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 882.326133] Node 0 DMA32: 769*4kB (UME) 242*8kB [ 882.332491] (UME) [ 882.332735] (UME) [ 882.334960] 413*32kB [ 882.340667] 46*16kB (UME) 413*32kB (UME) 2*64kB (UE) 4*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19604kB [ 882.340720] Node 0 [ 882.351992] (UME) [ 882.354396] Normal: [ 882.361761] 2*64kB [ 882.364026] 0*4kB [ 882.372060] (UE) [ 882.372292] 0*8kB [ 882.374320] 4*128kB (UE) [ 882.381682] 0*16kB [ 882.387153] 0*256kB [ 882.390528] 0*32kB [ 882.395132] 0*512kB [ 882.403514] 0*64kB [ 882.407448] 0*1024kB [ 882.410392] 0*128kB [ 882.415877] 0*2048kB [ 882.420986] 0*256kB [ 882.422401] 0*4096kB [ 882.423345] 0*512kB [ 882.428866] = 19604kB [ 882.430028] 0*1024kB [ 882.433389] Node 0 [ 882.439872] 0*2048kB [ 882.443675] Normal: [ 882.445843] 0*4096kB [ 882.449101] 0*4kB [ 882.453286] = 0kB [ 882.458513] 0*8kB [ 882.472704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.480172] 0*16kB [ 882.480258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 882.488834] 0*32kB [ 882.495203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 882.498951] 0*64kB [ 882.500289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 882.513004] 0*128kB [ 882.518109] 40090 total pagecache pages [ 882.519521] 0*256kB [ 882.521582] 0 pages in swap cache [ 882.523962] 0*512kB 0*1024kB [ 882.526491] Swap cache stats: add 0, delete 0, find 0/0 [ 882.570095] 0*2048kB [ 882.588628] Free swap = 0kB [ 882.620671] 0*4096kB [ 882.658728] Total swap = 0kB [ 882.671833] = 0kB [ 882.675101] 1965979 pages RAM [ 882.685833] Node 1 [ 882.692783] 0 pages HighMem/MovableOnly [ 882.697714] Normal: [ 882.704631] 339053 pages reserved [ 882.705624] 324*4kB [ 882.708591] 0 pages cma reserved [ 882.713294] (M) [ 882.714582] Out of memory: Kill process 13016 (syz-executor.5) score 1010 or sacrifice child [ 882.719766] 424*8kB [ 882.727170] Killed process 13016 (syz-executor.5) total-vm:80088kB, anon-rss:18292kB, file-rss:34560kB, shmem-rss:0kB [ 882.990261] (UME) 380*16kB (ME) 325*32kB (M) 292*64kB (M) 195*128kB (UME) 85*256kB (UM) 27*512kB (UME) 16*1024kB (UME) 5*2048kB (M) 811*4096kB (M) = 3448880kB [ 882.998226] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 883.021450] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 883.029283] CPU: 1 PID: 13244 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 [ 883.037192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.046549] Call Trace: [ 883.049146] dump_stack+0x13e/0x194 [ 883.052788] warn_alloc.cold+0x96/0x1af [ 883.054863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.056757] ? zone_watermark_ok_safe+0x280/0x280 [ 883.056779] ? wait_for_completion+0x390/0x390 [ 883.056794] __alloc_pages_slowpath+0x2114/0x26c0 [ 883.067277] oom_reaper: reaped process 13016 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 883.070471] ? warn_alloc+0xf0/0xf0 [ 883.075047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 883.079861] __alloc_pages_nodemask+0x5d3/0x700 [ 883.079873] ? lock_downgrade+0x6e0/0x6e0 [ 883.079883] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 883.079898] ? ion_page_pool_alloc+0x9e/0x1b0 [ 883.079907] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 883.079921] alloc_pages_current+0xe7/0x1e0 [ 883.098547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.102231] ion_page_pool_alloc+0x118/0x1b0 [ 883.106934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 883.111026] ion_system_heap_allocate+0x134/0x8d0 [ 883.117658] 40103 total pagecache pages [ 883.120498] ? _ion_heap_freelist_drain+0x6e/0x410 [ 883.126970] 0 pages in swap cache [ 883.130417] ? ion_system_heap_free+0x240/0x240 [ 883.140127] Swap cache stats: add 0, delete 0, find 0/0 [ 883.143644] ion_alloc+0x611/0x7d0 [ 883.153109] Free swap = 0kB [ 883.157058] ? ion_dma_buf_release+0x40/0x40 [ 883.157076] ? __might_fault+0x177/0x1b0 [ 883.157091] ion_ioctl+0xef/0x1f8 [ 883.157101] ? ion_alloc.cold+0x3d/0x3d [ 883.157117] ? selinux_file_ioctl+0x3f7/0x560 [ 883.163727] Total swap = 0kB [ 883.165989] ? ion_alloc.cold+0x3d/0x3d [ 883.166004] do_vfs_ioctl+0x75a/0xfe0 [ 883.166017] ? selinux_file_mprotect+0x5c0/0x5c0 [ 883.166028] ? ioctl_preallocate+0x1a0/0x1a0 [ 883.166049] ? security_file_ioctl+0x76/0xb0 [ 883.169484] 1965979 pages RAM [ 883.174137] ? security_file_ioctl+0x83/0xb0 [ 883.182644] 0 pages HighMem/MovableOnly [ 883.183008] SyS_ioctl+0x7f/0xb0 [ 883.186842] 339053 pages reserved [ 883.190396] ? do_vfs_ioctl+0xfe0/0xfe0 [ 883.194531] 0 pages cma reserved [ 883.197967] do_syscall_64+0x1d5/0x640 [ 883.197984] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 883.197992] RIP: 0033:0x7fce30cbc469 [ 883.197997] RSP: 002b:00007fce313acdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.198007] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fce30cbc469 [ 883.198015] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 883.291723] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 883.298989] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 883.306241] R13: 0000000000000366 R14: 000000000041832b R15: 00007fce313ad5c0 [ 883.314772] warn_alloc_show_mem: 2 callbacks suppressed [ 883.314776] Mem-Info: [ 883.322779] active_anon:382071 inactive_anon:16353 isolated_anon:0 [ 883.322779] active_file:18372 inactive_file:3890 isolated_file:0 [ 883.322779] unevictable:0 dirty:1 writeback:7 unstable:0 [ 883.322779] slab_reclaimable:19297 slab_unreclaimable:133070 [ 883.322779] mapped:65861 shmem:18100 pagetables:8755 bounce:0 [ 883.322779] free:872073 free_pcp:387 free_cma:0 [ 883.342504] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 883.356866] Node 0 active_anon:1463764kB inactive_anon:65340kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251316kB dirty:8kB writeback:8kB shmem:71496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 883.356884] Node 1 active_anon:64520kB inactive_anon:72kB active_file:73480kB inactive_file:15556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12128kB dirty:0kB writeback:20kB shmem:904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 883.373673] 0 [ 883.395168] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.395192] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 883.395216] Node 0 DMA32 free:18024kB min:36272kB low:45340kB high:54408kB active_anon:1459348kB inactive_anon:65340kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:16kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33248kB bounce:0kB free_pcp:784kB local_pcp:68kB free_cma:0kB [ 883.395236] lowmem_reserve[]: 0 0 0 0 0 [ 883.395255] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 883.395271] lowmem_reserve[]: 0 0 0 0 0 [ 883.395292] Node 1 Normal free:3452032kB min:53612kB low:67012kB high:80412kB active_anon:64520kB inactive_anon:72kB active_file:73480kB inactive_file:15556kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:896kB pagetables:1772kB bounce:0kB free_pcp:860kB local_pcp:240kB free_cma:0kB [ 883.395314] lowmem_reserve[]: 0 0 0 0 0 [ 883.395336] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 5*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) [ 883.435726] , order=0, oom_score_adj=1000 [ 883.452813] 1*1024kB [ 883.461451] syz-executor.2 cpuset= [ 883.486335] (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 883.486360] Node 0 DMA32: 967*4kB (UME) 306*8kB (UME) 96*16kB (UME) 23*32kB (ME) 68*64kB (UE) 32*128kB (UE) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 19340kB [ 883.486437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 883.486499] Node 1 Normal: 212*4kB (UM) 391*8kB (ME) 356*16kB (UME) 303*32kB (M) 270*64kB (M) 181*128kB (ME) 94*256kB (M) 38*512kB (UME) 18*1024kB (UME) 6*2048kB (UM) 810*4096kB (M) = 3451816kB [ 883.486588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.486595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 883.486601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 883.486607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 883.486611] 40363 total pagecache pages [ 883.486621] 0 pages in swap cache [ 883.486627] Swap cache stats: add 0, delete 0, find 0/0 [ 883.486630] Free swap = 0kB [ 883.486634] Total swap = 0kB [ 883.486640] 1965979 pages RAM [ 883.486644] 0 pages HighMem/MovableOnly [ 883.486648] 339053 pages reserved [ 883.486651] 0 pages cma reserved [ 883.692576] / mems_allowed=0-1 [ 883.695962] CPU: 1 PID: 13247 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 883.703839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.713200] Call Trace: [ 883.715777] dump_stack+0x13e/0x194 [ 883.719404] dump_header+0x178/0x6d4 [ 883.723114] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 883.728108] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 883.733277] ? ___ratelimit+0x50/0x519 [ 883.737147] oom_kill_process.cold+0x10/0xae3 [ 883.741620] ? lock_acquire+0x170/0x3f0 [ 883.745575] ? lock_downgrade+0x6e0/0x6e0 [ 883.749702] out_of_memory+0x2d5/0x1110 [ 883.753666] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 883.758575] ? oom_killer_disable+0x1c0/0x1c0 [ 883.763050] ? mutex_trylock+0x152/0x1a0 [ 883.767108] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 883.771952] ? warn_alloc+0xf0/0xf0 [ 883.775565] __alloc_pages_nodemask+0x5d3/0x700 [ 883.780228] ? lock_downgrade+0x6e0/0x6e0 [ 883.784353] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 883.789384] ? SOFTIRQ_verbose+0x10/0x10 [ 883.793598] ? find_held_lock+0x2d/0x110 [ 883.797645] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 883.803277] alloc_pages_current+0xe7/0x1e0 [ 883.807612] ion_page_pool_alloc+0x118/0x1b0 [ 883.812093] ion_system_heap_allocate+0x134/0x8d0 [ 883.816934] ? _ion_heap_freelist_drain+0x6e/0x410 [ 883.821850] ? ion_system_heap_free+0x240/0x240 [ 883.826499] ? down_read+0x3e/0xa0 [ 883.830033] ion_alloc+0x611/0x7d0 [ 883.833565] ? ion_dma_buf_release+0x40/0x40 [ 883.837956] ? __might_fault+0x177/0x1b0 [ 883.842017] ion_ioctl+0xef/0x1f8 [ 883.845451] ? ion_alloc.cold+0x3d/0x3d [ 883.849429] ? selinux_file_ioctl+0x3f7/0x560 [ 883.853899] ? ion_alloc.cold+0x3d/0x3d [ 883.857868] do_vfs_ioctl+0x75a/0xfe0 [ 883.861662] ? selinux_file_mprotect+0x5c0/0x5c0 [ 883.866402] ? ioctl_preallocate+0x1a0/0x1a0 [ 883.870794] ? security_file_ioctl+0x76/0xb0 [ 883.875179] ? security_file_ioctl+0x83/0xb0 [ 883.879653] SyS_ioctl+0x7f/0xb0 [ 883.883012] ? do_vfs_ioctl+0xfe0/0xfe0 [ 883.886967] do_syscall_64+0x1d5/0x640 [ 883.890853] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 883.896020] RIP: 0033:0x7f5232e49469 [ 883.899707] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.907398] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 883.915601] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 883.922862] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 883.930107] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 883.937353] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 883.946139] Mem-Info: [ 883.948577] active_anon:382071 inactive_anon:16353 isolated_anon:0 [ 883.948577] active_file:18372 inactive_file:3891 isolated_file:0 [ 883.948577] unevictable:0 dirty:9 writeback:0 unstable:0 [ 883.948577] slab_reclaimable:19181 slab_unreclaimable:133161 [ 883.948577] mapped:65865 shmem:18100 pagetables:8763 bounce:0 [ 883.948577] free:870207 free_pcp:218 free_cma:0 [ 883.982702] Node 0 active_anon:1463764kB inactive_anon:65340kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251356kB dirty:8kB writeback:0kB shmem:71496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 884.010759] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.037364] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 884.042402] Node 0 DMA32 free:20548kB min:36272kB low:45340kB high:54408kB active_anon:1459348kB inactive_anon:65340kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16352kB pagetables:33248kB bounce:0kB free_pcp:908kB local_pcp:180kB free_cma:0kB [ 884.071895] lowmem_reserve[]: 0 0 0 0 0 [ 884.076717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.102320] lowmem_reserve[]: 0 0 0 0 0 [ 884.106441] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 6*32kB (UE) 5*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10340kB [ 884.122362] Node 0 DMA32: 1097*4kB (UME) 376*8kB (UME) 102*16kB (UME) 24*32kB (UME) 68*64kB (UE) 32*128kB (UE) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 20548kB [ 884.138393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 884.149221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.158201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 884.166871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.175814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 884.184386] 40371 total pagecache pages [ 884.188441] 0 pages in swap cache [ 884.191883] Swap cache stats: add 0, delete 0, find 0/0 [ 884.197341] Free swap = 0kB [ 884.200349] Total swap = 0kB [ 884.203362] 1965979 pages RAM [ 884.207240] 0 pages HighMem/MovableOnly [ 884.211237] 339053 pages reserved [ 884.214665] 0 pages cma reserved [ 884.218117] Out of memory: Kill process 3410 (syz-executor.4) score 1009 or sacrifice child 21:46:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="02070009020000007faeb3a607523790a79574354cdddb4e667263a7192ff58bc66f88b9668b145e6313f35f2cee41e2f28204de844f29090b61976cae3a9a9e90785afd31885d23cd8f5f819b00000000ffffffff4aa6dac6acb5ded04e543506a3bfcb79eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f9565268f7ff158864d444d4bf66e8d85cc74a000059fa44ef02000000000000000000781f1a3ea4c057bfc89028e2b90e1d3dd7ac6e38d2d29b90a5adffffff7f0000822c74bdb860be48b6d264874e891fc9eedba6816bdaf0786933d140383619268a43b77e1ff8c9113861eee4a85d6b4adaa267b2d26046ff480c8f291660ea0ad5a352914a8f3d1518f2fdac839abe2a0260b28ae6aa110aab2ee016bf57fdb20794ee4e5cc766b32b3709f736134329ba6bc97d96403c2ad16bd2d2fea3dfa98c62186fa1cf801e2b5a3400a40ef90b230ab7f113d08395865023bed920df83dcd6a6702655dc2e1dd18cd28816e9afac96af92f25ce49074c74b78f21a115e2dd3ad427ae6781a01d7e377480d90d518981bcb3d64b21eb8ab37bc4b7d0c25b934417dda11584bef811ba75e5ba8bdda3b70d26d216d1f69a57c2fd83ee52417000000000057fe93f8246ea70e305cdcfafc72ca53a9c53d9386f411c5e15aba1c35c8d950d954fd7e69e67101f79080b3ede16b5506db5b68e8c737183b42bc3e7392b62155fc9b0000000091cb0c0a7a6eae311c970ffc18c9a3180b7b5aa753f9f97d1d45380ce8244fbe892489af250000000075ed36d83b55731ebe62e01b2b3d3e613112701bd59dfc0dcc3a1d80bbabd3c3dec9b439a53617e48558c1bae6f5ee70e82d83174d2e5128ca8528d2a42fc1238c9e033e7986ca78872ef6a0d1fc5d46b6fc952b9780eb3c7a59c4fbad5daac39cf7ca1491ab64c6adb76d5651daab54c8a69b895609e104d0e928afc3ca5e815e1d01e7e3d5ce0e9d5d36e2f7af50f8bd0e666743429d610655f95bbc2262816f8f1e6c6fa6b0e5df1beebf1d83491b406f024ccdf1145ab72c997d28ce9ec8a69dd1ceed8de51e80add576dbb7f34ae72ae188db4df1d8a37e41d798043c0af54a2205d4eed36e21000000000000000000c446b43e71263d4d31b76f4eb8af9edcd5024067bd504c7156d52315aba23f810ef54e30a3f678f9abec85f9d63f2eccb07faf425f2b8c041ed6e416868a8f0e1baf4866becd3b98b477c2771364df5e5fc6c4dcd0f3"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 21:46:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 21:46:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000240)) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 884.226765] Killed process 3410 (syz-executor.4) total-vm:80484kB, anon-rss:16632kB, file-rss:34820kB, shmem-rss:0kB [ 884.239329] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 884.250868] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 884.259880] CPU: 1 PID: 13247 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 [ 884.267774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.277470] Call Trace: [ 884.280066] dump_stack+0x13e/0x194 [ 884.283710] warn_alloc.cold+0x96/0x1af [ 884.287690] ? zone_watermark_ok_safe+0x280/0x280 [ 884.292551] ? wait_for_completion+0x390/0x390 [ 884.297144] __alloc_pages_slowpath+0x2114/0x26c0 [ 884.301834] oom_reaper: reaped process 3410 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 884.301996] ? warn_alloc+0xf0/0xf0 [ 884.315525] __alloc_pages_nodemask+0x5d3/0x700 [ 884.320204] ? lock_downgrade+0x6e0/0x6e0 [ 884.324366] ? __alloc_pages_slowpath+0x26c0/0x26c0 21:46:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) [ 884.329395] ? SOFTIRQ_verbose+0x10/0x10 [ 884.333491] ? find_held_lock+0x2d/0x110 [ 884.337555] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 884.343187] alloc_pages_current+0xe7/0x1e0 [ 884.347516] ion_page_pool_alloc+0x118/0x1b0 [ 884.351931] ion_system_heap_allocate+0x134/0x8d0 [ 884.356785] ? _ion_heap_freelist_drain+0x6e/0x410 [ 884.362501] ? ion_system_heap_free+0x240/0x240 [ 884.367261] ? down_read+0x3e/0xa0 [ 884.370906] ion_alloc+0x611/0x7d0 [ 884.375284] ? ion_dma_buf_release+0x40/0x40 [ 884.379704] ? __might_fault+0x177/0x1b0 [ 884.383772] ion_ioctl+0xef/0x1f8 [ 884.387226] ? ion_alloc.cold+0x3d/0x3d [ 884.391207] ? selinux_file_ioctl+0x3f7/0x560 [ 884.395700] ? ion_alloc.cold+0x3d/0x3d [ 884.399680] do_vfs_ioctl+0x75a/0xfe0 [ 884.403490] ? selinux_file_mprotect+0x5c0/0x5c0 [ 884.408255] ? ioctl_preallocate+0x1a0/0x1a0 [ 884.412689] ? security_file_ioctl+0x76/0xb0 [ 884.417104] ? security_file_ioctl+0x83/0xb0 [ 884.421920] SyS_ioctl+0x7f/0xb0 [ 884.425299] ? do_vfs_ioctl+0xfe0/0xfe0 [ 884.429284] do_syscall_64+0x1d5/0x640 [ 884.433187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 884.438465] RIP: 0033:0x7f5232e49469 [ 884.442196] RSP: 002b:00007f5233539db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.449908] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007f5232e49469 [ 884.457179] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 884.464451] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 884.471726] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 884.478999] R13: 0000000000000366 R14: 000000000041832b R15: 00007f523353a5c0 [ 884.602942] Mem-Info: [ 884.627375] active_anon:379068 inactive_anon:16353 isolated_anon:0 [ 884.627375] active_file:18398 inactive_file:3690 isolated_file:0 [ 884.627375] unevictable:0 dirty:62 writeback:0 unstable:0 [ 884.627375] slab_reclaimable:18428 slab_unreclaimable:134702 [ 884.627375] mapped:66021 shmem:18100 pagetables:8800 bounce:0 [ 884.627375] free:899069 free_pcp:572 free_cma:0 [ 884.742311] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 884.762014] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 884.773594] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 884.773619] CPU: 0 PID: 13324 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 884.773625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.773629] Call Trace: [ 884.773647] dump_stack+0x13e/0x194 [ 884.773662] warn_alloc.cold+0x96/0x1af [ 884.773673] ? zone_watermark_ok_safe+0x280/0x280 [ 884.773695] ? __alloc_pages_direct_compact+0x28a/0x360 [ 884.773708] __alloc_pages_slowpath+0x2114/0x26c0 [ 884.773723] ? check_preemption_disabled+0x35/0x240 [ 884.773747] ? warn_alloc+0xf0/0xf0 [ 884.773773] __alloc_pages_nodemask+0x5d3/0x700 [ 884.773786] ? lock_downgrade+0x6e0/0x6e0 [ 884.773797] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 884.773811] ? save_trace+0x290/0x290 [ 884.773822] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 884.773835] alloc_pages_current+0xe7/0x1e0 [ 884.779939] Node 0 active_anon:1452852kB inactive_anon:65340kB active_file:212kB inactive_file:900kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:251456kB dirty:8kB writeback:0kB shmem:71496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1236992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 884.786799] ion_page_pool_alloc+0x118/0x1b0 [ 884.786813] ion_system_heap_allocate+0x134/0x8d0 [ 884.786826] ? rcu_read_lock_sched_held+0x10a/0x130 [ 884.786834] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 884.786845] ? ion_system_heap_free+0x240/0x240 [ 884.786861] ion_alloc+0x1e9/0x7d0 [ 884.786876] ? ion_dma_buf_release+0x40/0x40 [ 884.786893] ? __might_fault+0x177/0x1b0 [ 884.796532] syz-executor.4 cpuset= [ 884.798911] ion_ioctl+0xef/0x1f8 [ 884.798923] ? ion_alloc.cold+0x3d/0x3d [ 884.798941] ? selinux_file_ioctl+0x3f7/0x560 [ 884.798951] ? ion_alloc.cold+0x3d/0x3d [ 884.802659] / [ 884.806514] do_vfs_ioctl+0x75a/0xfe0 [ 884.811519] Node 1 active_anon:64720kB inactive_anon:72kB active_file:72380kB inactive_file:14660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13528kB dirty:240kB writeback:0kB shmem:904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 884.816694] ? selinux_file_mprotect+0x5c0/0x5c0 [ 884.816709] ? ioctl_preallocate+0x1a0/0x1a0 [ 884.816731] ? security_file_ioctl+0x76/0xb0 [ 884.816740] ? security_file_ioctl+0x83/0xb0 [ 884.816752] SyS_ioctl+0x7f/0xb0 [ 884.816759] ? do_vfs_ioctl+0xfe0/0xfe0 [ 884.816772] do_syscall_64+0x1d5/0x640 [ 884.816790] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 884.821689] mems_allowed=0-1 [ 884.826621] RIP: 0033:0x7fe47ef7c469 [ 884.826627] RSP: 002b:00007fe47f64bdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.826639] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 884.826645] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 884.826650] RBP: 00000000006abfa0 R08: 0000000000000000 R09: 0000000000000000 [ 884.826656] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 884.826662] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f64c5c0 [ 884.990793] Node 0 [ 884.993574] CPU: 1 PID: 13330 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 885.005118] DMA free:10428kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.008094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.008098] Call Trace: [ 885.008118] dump_stack+0x13e/0x194 [ 885.008135] warn_alloc.cold+0x96/0x1af [ 885.008146] ? zone_watermark_ok_safe+0x280/0x280 [ 885.008157] ? check_preemption_disabled+0x35/0x240 [ 885.008167] ? retint_kernel+0x2d/0x2d [ 885.008187] __alloc_pages_slowpath+0x2114/0x26c0 [ 885.008198] ? check_preemption_disabled+0x35/0x240 [ 885.008222] ? warn_alloc+0xf0/0xf0 [ 885.008248] __alloc_pages_nodemask+0x5d3/0x700 [ 885.008266] ? lock_downgrade+0x6e0/0x6e0 [ 885.008277] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 885.008292] ? retint_kernel+0x2d/0x2d [ 885.008303] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 885.008318] alloc_pages_current+0xe7/0x1e0 [ 885.034022] lowmem_reserve[]: [ 885.039391] ion_page_pool_alloc+0x118/0x1b0 [ 885.039406] ion_system_heap_allocate+0x134/0x8d0 [ 885.039419] ? rcu_read_lock_sched_held+0x10a/0x130 [ 885.039428] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 885.039440] ? ion_system_heap_free+0x240/0x240 [ 885.063583] 0 [ 885.068544] ion_alloc+0x1e9/0x7d0 [ 885.068562] ? ion_dma_buf_release+0x40/0x40 [ 885.068657] ? _copy_from_user+0x94/0x100 [ 885.068670] ion_ioctl+0xef/0x1f8 [ 885.078528] 2557 [ 885.078860] ? ion_alloc.cold+0x3d/0x3d [ 885.229887] ? selinux_file_ioctl+0x3f7/0x560 [ 885.234372] ? ion_alloc.cold+0x3d/0x3d [ 885.238345] do_vfs_ioctl+0x75a/0xfe0 [ 885.242128] ? selinux_file_mprotect+0x5c0/0x5c0 [ 885.246885] ? ioctl_preallocate+0x1a0/0x1a0 [ 885.251285] ? security_file_ioctl+0x76/0xb0 [ 885.255689] ? security_file_ioctl+0x83/0xb0 [ 885.260097] SyS_ioctl+0x7f/0xb0 [ 885.263454] ? do_vfs_ioctl+0xfe0/0xfe0 [ 885.267410] do_syscall_64+0x1d5/0x640 [ 885.271296] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 885.276465] RIP: 0033:0x7fd58e5e9469 [ 885.280157] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.287845] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 885.295094] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 885.302349] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 885.309600] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 885.316870] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 885.355307] 2557 2557 2557 [ 885.367360] Node 0 DMA32 free:39752kB min:36272kB low:45340kB high:54408kB active_anon:1445168kB inactive_anon:65348kB active_file:104kB inactive_file:256kB unevictable:0kB writepending:60kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16384kB pagetables:33120kB bounce:0kB free_pcp:976kB local_pcp:652kB free_cma:0kB [ 885.397620] lowmem_reserve[]: 0 0 0 0 0 [ 885.407932] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 885.434823] lowmem_reserve[]: 0 0 0 0 0 [ 885.444861] Node 1 Normal free:3453400kB min:53612kB low:67012kB high:80412kB active_anon:64488kB inactive_anon:64kB active_file:72380kB inactive_file:13736kB unevictable:0kB writepending:248kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:928kB pagetables:1876kB bounce:0kB free_pcp:800kB local_pcp:612kB free_cma:0kB [ 885.475829] lowmem_reserve[]: 0 0 0 0 0 [ 885.486070] Node 0 DMA: 83*4kB (UME) 57*8kB (UME) 5*16kB (UM) 7*32kB (UE) 6*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10436kB [ 885.512836] Node 0 DMA32: 1384*4kB (UME) 382*8kB (UME) 489*16kB (UME) 546*32kB (UME) 1*64kB (E) 1*128kB (U) 1*256kB (E) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36384kB [ 885.533721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 885.545012] Node 1 Normal: 164*4kB (UM) 389*8kB (UME) 367*16kB (UME) 319*32kB (UM) 280*64kB (UM) 183*128kB (UME) 93*256kB (UM) 37*512kB (ME) 19*1024kB (UME) 7*2048kB (UM) 809*4096kB (M) = 3451400kB [ 885.563373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.572563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 885.581996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 885.596842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 885.609794] 39878 total pagecache pages 21:46:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:56 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) [ 885.613781] 0 pages in swap cache [ 885.618794] Swap cache stats: add 0, delete 0, find 0/0 [ 885.631591] Free swap = 0kB [ 885.634620] Total swap = 0kB [ 885.638608] 1965979 pages RAM [ 885.641719] 0 pages HighMem/MovableOnly [ 885.648886] 339053 pages reserved [ 885.652555] 0 pages cma reserved 21:46:56 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:56 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:56 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:56 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:46:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x403, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 21:46:56 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) [ 886.074973] oom_reaper: reaped process 13324 (syz-executor.5), now anon-rss:0kB, file-rss:20kB, shmem-rss:0kB [ 886.101654] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 [ 886.122560] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 [ 886.155890] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 886.174145] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 886.181052] CPU: 0 PID: 13324 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 886.189043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.198488] Call Trace: [ 886.201083] dump_stack+0x13e/0x194 [ 886.204843] dump_header+0x178/0x6d4 [ 886.208565] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 886.213589] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 886.218697] ? ___ratelimit+0x50/0x519 [ 886.222597] oom_kill_process.cold+0x10/0xae3 [ 886.227106] ? lock_downgrade+0x6e0/0x6e0 [ 886.231295] out_of_memory+0x2d5/0x1110 [ 886.235275] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 886.240316] ? oom_killer_disable+0x1c0/0x1c0 [ 886.244822] ? mutex_trylock+0x152/0x1a0 [ 886.248894] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 886.253771] ? warn_alloc+0xf0/0xf0 [ 886.257423] __alloc_pages_nodemask+0x5d3/0x700 [ 886.262106] ? lock_downgrade+0x6e0/0x6e0 [ 886.266265] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 886.271033] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 886.276087] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 886.281727] alloc_pages_current+0xe7/0x1e0 [ 886.286059] ion_page_pool_alloc+0x118/0x1b0 [ 886.290479] ion_system_heap_allocate+0x134/0x8d0 [ 886.295332] ? rcu_read_lock_sched_held+0x10a/0x130 [ 886.300358] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 886.305213] ? ion_system_heap_free+0x240/0x240 [ 886.309894] ion_alloc+0x1e9/0x7d0 [ 886.313452] ? ion_dma_buf_release+0x40/0x40 [ 886.317873] ? __might_fault+0x177/0x1b0 [ 886.321947] ion_ioctl+0xef/0x1f8 [ 886.325408] ? ion_alloc.cold+0x3d/0x3d [ 886.329393] ? selinux_file_ioctl+0x3f7/0x560 [ 886.333894] ? ion_alloc.cold+0x3d/0x3d [ 886.337878] do_vfs_ioctl+0x75a/0xfe0 [ 886.341682] ? selinux_file_mprotect+0x5c0/0x5c0 [ 886.346436] ? ioctl_preallocate+0x1a0/0x1a0 [ 886.350847] ? security_file_ioctl+0x76/0xb0 [ 886.355368] ? security_file_ioctl+0x83/0xb0 [ 886.359767] SyS_ioctl+0x7f/0xb0 [ 886.363135] ? do_vfs_ioctl+0xfe0/0xfe0 [ 886.367104] do_syscall_64+0x1d5/0x640 [ 886.371008] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 886.376194] RIP: 0033:0x7fe47ef7c469 [ 886.379903] RSP: 002b:00007fe47f64bdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.387742] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 886.395008] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 886.402369] RBP: 00000000006abfa0 R08: 0000000000000000 R09: 0000000000000000 [ 886.409628] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 886.416892] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f64c5c0 [ 886.425368] Mem-Info: [ 886.427874] active_anon:378540 inactive_anon:16353 isolated_anon:0 [ 886.427874] active_file:18161 inactive_file:4395 isolated_file:0 [ 886.427874] unevictable:0 dirty:14 writeback:12 unstable:0 [ 886.427874] slab_reclaimable:15653 slab_unreclaimable:137821 [ 886.427874] mapped:66056 shmem:18100 pagetables:8847 bounce:0 [ 886.427874] free:869939 free_pcp:194 free_cma:0 [ 886.462168] Node 0 active_anon:1449420kB inactive_anon:65336kB active_file:28kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251432kB dirty:16kB writeback:4kB shmem:71492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1222656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 886.490527] Node 0 DMA free:10412kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 886.517794] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 886.522835] Node 0 DMA32 free:22416kB min:36272kB low:45340kB high:54408kB active_anon:1445204kB inactive_anon:65336kB active_file:148kB inactive_file:316kB unevictable:0kB writepending:20kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16320kB pagetables:33352kB bounce:0kB free_pcp:776kB local_pcp:120kB free_cma:0kB [ 886.552478] lowmem_reserve[]: 0 0 0 0 0 [ 886.556569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 886.582182] lowmem_reserve[]: 0 0 0 0 0 [ 886.586252] Node 0 DMA: 83*4kB (UME) 58*8kB (UME) 5*16kB (UM) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10412kB [ 886.602156] Node 0 DMA32: 1706*4kB (UME) 773*8kB (UME) 182*16kB (UME) 61*32kB (UME) 37*64kB (UME) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22416kB [ 886.617152] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 886.628123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 886.637733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 886.646385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 886.655388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 886.663981] 40654 total pagecache pages [ 886.668038] 0 pages in swap cache [ 886.671500] Swap cache stats: add 0, delete 0, find 0/0 [ 886.676942] Free swap = 0kB [ 886.679973] Total swap = 0kB [ 886.682985] 1965979 pages RAM [ 886.686164] 0 pages HighMem/MovableOnly [ 886.690333] 339053 pages reserved [ 886.693782] 0 pages cma reserved [ 886.697232] Out of memory: Kill process 13457 (syz-executor.4) score 1009 or sacrifice child [ 886.706030] Killed process 13457 (syz-executor.4) total-vm:80352kB, anon-rss:16624kB, file-rss:34820kB, shmem-rss:0kB [ 886.725326] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 886.736832] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 886.736876] oom_reaper: reaped process 13457 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 886.741950] CPU: 0 PID: 13324 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 886.741956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.741961] Call Trace: [ 886.741979] dump_stack+0x13e/0x194 [ 886.741994] warn_alloc.cold+0x96/0x1af [ 886.779338] ? zone_watermark_ok_safe+0x280/0x280 [ 886.784204] ? wait_for_completion+0x390/0x390 [ 886.788806] __alloc_pages_slowpath+0x2114/0x26c0 [ 886.792823] oom_reaper: reaped process 13330 (syz-executor.4), now anon-rss:0kB, file-rss:36kB, shmem-rss:0kB [ 886.793668] ? warn_alloc+0xf0/0xf0 [ 886.793693] __alloc_pages_nodemask+0x5d3/0x700 [ 886.812735] ? lock_downgrade+0x6e0/0x6e0 [ 886.816900] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 886.821657] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 886.830102] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 886.835734] alloc_pages_current+0xe7/0x1e0 [ 886.840055] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 886.840065] ion_page_pool_alloc+0x118/0x1b0 [ 886.840078] ion_system_heap_allocate+0x134/0x8d0 [ 886.854145] 0 [ 886.854788] ? rcu_read_lock_sched_held+0x10a/0x130 [ 886.864795] , order=0, oom_score_adj=1000 [ 886.866325] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 886.866340] ? ion_system_heap_free+0x240/0x240 [ 886.866354] ion_alloc+0x1e9/0x7d0 [ 886.866370] ? ion_dma_buf_release+0x40/0x40 [ 886.866386] ? __might_fault+0x177/0x1b0 [ 886.866401] ion_ioctl+0xef/0x1f8 [ 886.866412] ? ion_alloc.cold+0x3d/0x3d [ 886.866428] ? selinux_file_ioctl+0x3f7/0x560 [ 886.866436] ? ion_alloc.cold+0x3d/0x3d [ 886.866448] do_vfs_ioctl+0x75a/0xfe0 [ 886.866457] ? selinux_file_mprotect+0x5c0/0x5c0 [ 886.866469] ? ioctl_preallocate+0x1a0/0x1a0 [ 886.874596] syz-executor.4 cpuset= [ 886.875546] ? security_file_ioctl+0x76/0xb0 [ 886.875556] ? security_file_ioctl+0x83/0xb0 [ 886.875569] SyS_ioctl+0x7f/0xb0 [ 886.875578] ? do_vfs_ioctl+0xfe0/0xfe0 [ 886.875591] do_syscall_64+0x1d5/0x640 [ 886.875609] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 886.875618] RIP: 0033:0x7fe47ef7c469 [ 886.875623] RSP: 002b:00007fe47f64bdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.875634] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 886.875641] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 886.875646] RBP: 00000000006abfa0 R08: 0000000000000000 R09: 0000000000000000 [ 886.875651] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 886.875657] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f64c5c0 [ 886.876537] warn_alloc_show_mem: 2 callbacks suppressed [ 886.876540] Mem-Info: [ 886.895424] / [ 886.897299] active_anon:373868 inactive_anon:16353 isolated_anon:0 [ 886.897299] active_file:18162 inactive_file:4401 isolated_file:0 [ 886.897299] unevictable:0 dirty:26 writeback:0 unstable:0 [ 886.897299] slab_reclaimable:15653 slab_unreclaimable:137383 [ 886.897299] mapped:66039 shmem:18100 pagetables:8715 bounce:0 [ 886.897299] free:869466 free_pcp:458 free_cma:0 [ 886.911153] mems_allowed=0-1 [ 886.913655] Node 0 active_anon:1430732kB inactive_anon:65336kB active_file:32kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251464kB dirty:20kB writeback:4kB shmem:71492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1222656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 886.921085] CPU: 1 PID: 13330 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 886.922877] Node 1 active_anon:64740kB inactive_anon:76kB active_file:72616kB inactive_file:17552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12692kB dirty:84kB writeback:0kB shmem:908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 886.926353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.926357] Call Trace: [ 886.926374] dump_stack+0x13e/0x194 [ 886.926391] dump_header+0x178/0x6d4 [ 886.926403] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 886.926414] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 886.926423] ? ___ratelimit+0x50/0x519 [ 886.926436] oom_kill_process.cold+0x10/0xae3 [ 886.930848] Node 0 [ 886.935211] ? lock_downgrade+0x6e0/0x6e0 [ 886.935227] out_of_memory+0x2d5/0x1110 [ 886.935237] ? __alloc_pages_slowpath+0xc1d/0x26c0 [ 886.935251] ? oom_killer_disable+0x1c0/0x1c0 [ 886.938632] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 886.942568] ? mutex_trylock+0x152/0x1a0 [ 886.942585] __alloc_pages_slowpath+0x1fbf/0x26c0 [ 886.946512] lowmem_reserve[]: [ 886.951673] ? warn_alloc+0xf0/0xf0 [ 886.955409] 0 [ 886.963088] __alloc_pages_nodemask+0x5d3/0x700 [ 886.970374] 2557 [ 886.977588] ? lock_downgrade+0x6e0/0x6e0 [ 886.977599] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 886.977608] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 886.977624] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 886.984907] 2557 [ 886.992139] alloc_pages_current+0xe7/0x1e0 [ 886.992154] ion_page_pool_alloc+0x118/0x1b0 [ 886.992166] ion_system_heap_allocate+0x134/0x8d0 [ 886.992179] ? rcu_read_lock_sched_held+0x10a/0x130 [ 886.999489] 2557 [ 887.004786] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 887.004798] ? ion_system_heap_free+0x240/0x240 [ 887.004814] ion_alloc+0x1e9/0x7d0 [ 887.008219] 2557 [ 887.009921] ? ion_dma_buf_release+0x40/0x40 [ 887.009946] ? _copy_from_user+0x94/0x100 [ 887.047018] ion_ioctl+0xef/0x1f8 [ 887.047030] ? ion_alloc.cold+0x3d/0x3d [ 887.047047] ? selinux_file_ioctl+0x3f7/0x560 [ 887.075180] Node 0 [ 887.082986] ? ion_alloc.cold+0x3d/0x3d [ 887.082998] do_vfs_ioctl+0x75a/0xfe0 [ 887.083011] ? selinux_file_mprotect+0x5c0/0x5c0 [ 887.110649] DMA32 free:18292kB min:36272kB low:45340kB high:54408kB active_anon:1426316kB inactive_anon:65336kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:24kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16288kB pagetables:32824kB bounce:0kB free_pcp:936kB local_pcp:236kB free_cma:0kB [ 887.119921] ? ioctl_preallocate+0x1a0/0x1a0 [ 887.119944] ? security_file_ioctl+0x76/0xb0 [ 887.119955] ? security_file_ioctl+0x83/0xb0 [ 887.122542] lowmem_reserve[]: [ 887.126128] SyS_ioctl+0x7f/0xb0 [ 887.126137] ? do_vfs_ioctl+0xfe0/0xfe0 [ 887.126151] do_syscall_64+0x1d5/0x640 [ 887.126169] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 887.129876] 0 [ 887.134863] RIP: 0033:0x7fd58e5e9469 [ 887.134869] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.134882] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 887.140007] 0 [ 887.143824] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 887.143830] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 887.143836] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 887.143841] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 887.191371] Mem-Info: [ 887.195454] 0 [ 887.199955] active_anon:373838 inactive_anon:16353 isolated_anon:0 [ 887.199955] active_file:18156 inactive_file:4388 isolated_file:0 [ 887.199955] unevictable:0 dirty:9 writeback:0 unstable:0 [ 887.199955] slab_reclaimable:15632 slab_unreclaimable:137640 [ 887.199955] mapped:66009 shmem:18100 pagetables:8720 bounce:0 [ 887.199955] free:869222 free_pcp:237 free_cma:0 [ 887.203812] 0 [ 887.207862] Node 0 active_anon:1430696kB inactive_anon:65336kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251484kB dirty:4kB writeback:0kB shmem:71492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1204224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 887.214795] 0 [ 887.220424] Node 0 [ 887.227599] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.234919] Node 0 [ 887.236161] lowmem_reserve[]: [ 887.241379] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.243298] 0 [ 887.251903] lowmem_reserve[]: [ 887.253986] 2557 [ 887.257403] 0 [ 887.263356] 2557 [ 887.264648] 0 [ 887.270372] 2557 [ 887.274209] 0 [ 887.279845] 2557 [ 887.288611] 0 [ 887.299585] 0 [ 887.301086] Node 0 [ 887.307741] DMA32 free:21544kB min:36272kB low:45340kB high:54408kB active_anon:1426280kB inactive_anon:65336kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16256kB pagetables:32840kB bounce:0kB free_pcp:904kB local_pcp:668kB free_cma:0kB [ 887.311448] Node 1 [ 887.316139] lowmem_reserve[]: [ 887.349060] Normal free:3444680kB min:53612kB low:67012kB high:80412kB active_anon:64656kB inactive_anon:76kB active_file:72620kB inactive_file:17552kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:928kB pagetables:2040kB bounce:0kB free_pcp:868kB local_pcp:212kB free_cma:0kB [ 887.354826] 0 [ 887.362681] lowmem_reserve[]: [ 887.365162] 0 [ 887.369071] 0 [ 887.373254] 0 [ 887.377665] 0 [ 887.380287] 0 [ 887.383214] 0 [ 887.391868] 0 [ 887.403004] 0 [ 887.415125] 0 [ 887.423909] Node 0 [ 887.470075] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.501903] Node 0 [ 887.528333] lowmem_reserve[]: [ 887.534798] DMA: [ 887.559068] 0 [ 887.565817] 83*4kB [ 887.567184] 0 [ 887.569223] (UME) [ 887.570965] 0 [ 887.573027] 56*8kB [ 887.574819] 0 [ 887.586887] (ME) [ 887.611587] 0 [ 887.619039] 1*16kB [ 887.645846] Node 0 DMA: 83*4kB (UME) 56*8kB (ME) 1*16kB (M) 6*32kB (UE) 6*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10332kB [ 887.645944] Node 0 DMA32: 1782*4kB (UME) 910*8kB (UME) 156*16kB (UME) 50*32kB (ME) 29*64kB (UME) 10*128kB [ 887.652429] (M) [ 887.652729] (UM) [ 887.654517] 6*32kB [ 887.656612] 0*256kB [ 887.662214] (UE) [ 887.663799] 0*512kB [ 887.670827] 6*64kB [ 887.695429] 0*1024kB [ 887.702289] (UME) [ 887.703894] 0*2048kB [ 887.707426] 2*128kB [ 887.708144] 0*4096kB [ 887.710334] (ME) [ 887.711972] = 21640kB [ 887.714197] 2*256kB [ 887.716174] Node 0 [ 887.724783] (ME) [ 887.738143] Normal: [ 887.759222] 2*512kB [ 887.761161] 0*4kB [ 887.763412] (ME) [ 887.765859] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 887.765909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.765916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.765923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.765930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.765934] 40647 total pagecache pages [ 887.765946] 0 pages in swap cache [ 887.765953] Swap cache stats: add 0, delete 0, find 0/0 [ 887.765957] Free swap = 0kB [ 887.765961] Total swap = 0kB [ 887.765968] 1965979 pages RAM [ 887.765972] 0 pages HighMem/MovableOnly [ 887.765976] 339053 pages reserved [ 887.765980] 0 pages cma reserved [ 887.765988] Out of memory: Kill process 13495 (syz-executor.4) score 1009 or sacrifice child [ 887.766025] Killed process 13495 (syz-executor.4) total-vm:80352kB, anon-rss:16624kB, file-rss:34820kB, shmem-rss:0kB [ 887.775510] syz-executor.4: [ 887.791026] 1*1024kB [ 887.794001] oom_reaper: reaped process 13495 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 887.795549] (E) [ 887.806422] page allocation failure: order:0 [ 887.819554] 1*2048kB [ 887.821995] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 887.837158] (E) [ 887.840074] 0 [ 887.843333] 1*4096kB [ 887.847218] syz-executor.4 cpuset= [ 887.858664] (M) [ 887.862192] / [ 887.866068] = 10332kB [ 887.870341] mems_allowed=0-1 [ 887.872515] Node 0 [ 887.881694] CPU: 1 PID: 13330 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 887.896406] DMA32: [ 887.897223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.907226] 1855*4kB [ 887.909120] Call Trace: [ 887.909139] dump_stack+0x13e/0x194 [ 887.909155] warn_alloc.cold+0x96/0x1af [ 887.913572] (UME) [ 887.915942] ? zone_watermark_ok_safe+0x280/0x280 [ 887.915964] ? wait_for_completion+0x390/0x390 [ 887.915979] __alloc_pages_slowpath+0x2114/0x26c0 [ 887.916006] ? warn_alloc+0xf0/0xf0 [ 887.923100] 1064*8kB [ 887.925061] __alloc_pages_nodemask+0x5d3/0x700 [ 887.925072] ? lock_downgrade+0x6e0/0x6e0 [ 887.925090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 887.926787] (UME) [ 887.929180] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 887.932692] 160*16kB [ 887.934655] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 887.936391] (UME) [ 887.938733] alloc_pages_current+0xe7/0x1e0 [ 887.938747] ion_page_pool_alloc+0x118/0x1b0 [ 887.941870] 53*32kB [ 887.944066] ion_system_heap_allocate+0x134/0x8d0 [ 887.944086] ? rcu_read_lock_sched_held+0x10a/0x130 [ 887.952002] (UME) [ 887.954262] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 887.954273] ? ion_system_heap_free+0x240/0x240 [ 887.954289] ion_alloc+0x1e9/0x7d0 [ 887.963660] 29*64kB [ 887.966015] ? ion_dma_buf_release+0x40/0x40 [ 887.966032] ? _copy_from_user+0x94/0x100 [ 887.966046] ion_ioctl+0xef/0x1f8 [ 887.968626] (UME) [ 887.972212] ? ion_alloc.cold+0x3d/0x3d [ 887.972231] ? selinux_file_ioctl+0x3f7/0x560 [ 887.976238] 10*128kB [ 887.978329] ? ion_alloc.cold+0x3d/0x3d [ 887.978342] do_vfs_ioctl+0x75a/0xfe0 [ 887.978353] ? selinux_file_mprotect+0x5c0/0x5c0 [ 887.983211] (UM) [ 887.987751] ? ioctl_preallocate+0x1a0/0x1a0 [ 887.987773] ? security_file_ioctl+0x76/0xb0 [ 887.987784] ? security_file_ioctl+0x83/0xb0 [ 887.992624] 0*256kB [ 887.996211] SyS_ioctl+0x7f/0xb0 [ 887.996221] ? do_vfs_ioctl+0xfe0/0xfe0 [ 887.996234] do_syscall_64+0x1d5/0x640 [ 887.996251] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 887.999007] 0*512kB [ 888.003630] RIP: 0033:0x7fd58e5e9469 [ 888.003635] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.003648] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 888.007821] 0*1024kB [ 888.012505] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 888.012511] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 888.012516] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 888.012525] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 888.037476] Mem-Info: [ 888.046353] 0*2048kB [ 888.047102] active_anon:369721 inactive_anon:16353 isolated_anon:0 [ 888.047102] active_file:18156 inactive_file:4388 isolated_file:0 [ 888.047102] unevictable:0 dirty:9 writeback:0 unstable:0 [ 888.047102] slab_reclaimable:15557 slab_unreclaimable:137902 [ 888.047102] mapped:66009 shmem:18100 pagetables:8683 bounce:0 [ 888.047102] free:873262 free_pcp:436 free_cma:0 [ 888.058363] 4*4096kB [ 888.059777] Node 0 active_anon:1414228kB inactive_anon:65336kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251484kB dirty:4kB writeback:0kB shmem:71492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1204224kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 888.063288] (M) [ 888.067744] Node 1 active_anon:64656kB inactive_anon:76kB active_file:72620kB inactive_file:17552kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12552kB dirty:32kB writeback:0kB shmem:908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 888.073508] = 39708kB [ 888.079637] Node 0 [ 888.081330] Node 0 [ 888.083303] DMA free:10332kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 888.087323] Normal: [ 888.093151] lowmem_reserve[]: [ 888.094466] 0*4kB [ 888.099394] 0 [ 888.106670] 0*8kB [ 888.108032] 2557 [ 888.109196] 0*16kB [ 888.113485] 2557 [ 888.122241] 0*32kB [ 888.124116] 2557 [ 888.124923] 0*64kB [ 888.129159] 2557 [ 888.132278] 0*128kB [ 888.146059] 0*256kB [ 888.148727] Node 0 [ 888.160405] 0*512kB [ 888.163888] DMA32 free:40012kB min:36272kB low:45340kB high:54408kB active_anon:1409812kB inactive_anon:65336kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16224kB pagetables:32692kB bounce:0kB free_pcp:952kB local_pcp:704kB free_cma:0kB [ 888.165561] 0*1024kB [ 888.173594] lowmem_reserve[]: [ 888.184474] 0*2048kB [ 888.188401] 0 [ 888.194730] 0*4096kB = 0kB [ 888.194739] Node 1 Normal: 198*4kB (UM) 351*8kB (UME) 346*16kB [ 888.198634] 0 [ 888.204530] (ME) [ 888.233975] 0 [ 888.242048] 293*32kB [ 888.264494] 0 [ 888.272577] (M) [ 888.295540] 0 [ 888.302692] 263*64kB [ 888.336029] (M) [ 888.337530] Node 0 [ 888.339626] 176*128kB (ME) 89*256kB (M) 38*512kB (UME) 18*1024kB (ME) 7*2048kB (UM) [ 888.341778] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 888.343943] 808*4096kB (M) = 3442448kB [ 888.343960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.343966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 888.343974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.346139] lowmem_reserve[]: 0 0 0 0 0 [ 888.346162] Node 1 Normal free:3442600kB min:53612kB low:67012kB high:80412kB active_anon:64656kB inactive_anon:76kB active_file:72620kB inactive_file:17552kB unevictable:0kB writepending:32kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:928kB pagetables:2040kB bounce:0kB free_pcp:816kB local_pcp:648kB free_cma:0kB [ 888.346181] lowmem_reserve[]: 0 0 0 0 0 [ 888.346203] Node 0 DMA: 83*4kB (UME) 56*8kB (ME) [ 888.356862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 888.357222] 1*16kB [ 888.360390] 40647 total pagecache pages [ 888.361673] (M) [ 888.363938] 0 pages in swap cache [ 888.363944] Swap cache stats: add 0, delete 0, find 0/0 [ 888.363948] Free swap = 0kB [ 888.363952] Total swap = 0kB [ 888.363960] 1965979 pages RAM [ 888.392967] 6*32kB [ 888.395688] 0 pages HighMem/MovableOnly [ 888.406657] (UE) [ 888.411925] 339053 pages reserved [ 888.413489] 6*64kB [ 888.418102] 0 pages cma reserved [ 888.422349] (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10332kB [ 888.600772] Node 0 DMA32: 5232*4kB (UME) 6081*8kB (UME) 4438*16kB (UME) 93*32kB (UME) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 144008kB [ 888.617023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 888.628467] Node 1 Normal: 198*4kB (UM) 351*8kB (UME) 346*16kB (ME) 293*32kB (M) 263*64kB (M) 176*128kB (ME) 89*256kB (M) 38*512kB (UME) 18*1024kB (ME) 7*2048kB (UM) 808*4096kB (M) = 3442448kB [ 888.646547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.656353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 888.665755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.674867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 888.675345] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 888.684790] 40667 total pagecache pages [ 888.699496] 0 pages in swap cache [ 888.700178] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 888.702971] Swap cache stats: add 0, delete 0, find 0/0 [ 888.708526] CPU: 0 PID: 13324 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 [ 888.719458] Free swap = 0kB [ 888.721387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.724406] Total swap = 0kB [ 888.733752] Call Trace: [ 888.733769] dump_stack+0x13e/0x194 [ 888.733784] warn_alloc.cold+0x96/0x1af [ 888.733793] ? zone_watermark_ok_safe+0x280/0x280 [ 888.733812] ? __alloc_pages_direct_compact+0xba/0x360 [ 888.733824] __alloc_pages_slowpath+0x2114/0x26c0 [ 888.733837] ? check_preemption_disabled+0x35/0x240 [ 888.733858] ? warn_alloc+0xf0/0xf0 [ 888.745559] 1965979 pages RAM [ 888.747004] __alloc_pages_nodemask+0x5d3/0x700 [ 888.751807] 0 pages HighMem/MovableOnly [ 888.757064] ? lock_downgrade+0x6e0/0x6e0 [ 888.757073] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 888.757080] ? SOFTIRQ_verbose+0x10/0x10 [ 888.757092] ? find_held_lock+0x2d/0x110 [ 888.757102] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 888.757117] alloc_pages_current+0xe7/0x1e0 [ 888.757130] ion_page_pool_alloc+0x118/0x1b0 [ 888.757143] ion_system_heap_allocate+0x134/0x8d0 [ 888.757157] ? _ion_heap_freelist_drain+0x6e/0x410 [ 888.757167] ? ion_system_heap_free+0x240/0x240 [ 888.757183] ion_alloc+0x611/0x7d0 [ 888.768487] 339053 pages reserved [ 888.770619] ? ion_dma_buf_release+0x40/0x40 [ 888.773689] 0 pages cma reserved [ 888.778364] ? __might_fault+0x177/0x1b0 [ 888.778379] ion_ioctl+0xef/0x1f8 [ 888.778389] ? ion_alloc.cold+0x3d/0x3d [ 888.778404] ? selinux_file_ioctl+0x3f7/0x560 [ 888.778414] ? ion_alloc.cold+0x3d/0x3d [ 888.863225] do_vfs_ioctl+0x75a/0xfe0 [ 888.867032] ? selinux_file_mprotect+0x5c0/0x5c0 [ 888.871795] ? ioctl_preallocate+0x1a0/0x1a0 [ 888.876268] ? security_file_ioctl+0x76/0xb0 [ 888.880714] ? security_file_ioctl+0x83/0xb0 [ 888.885226] SyS_ioctl+0x7f/0xb0 [ 888.888598] ? do_vfs_ioctl+0xfe0/0xfe0 [ 888.892583] do_syscall_64+0x1d5/0x640 [ 888.896455] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 888.901622] RIP: 0033:0x7fe47ef7c469 [ 888.905317] RSP: 002b:00007fe47f64bdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.913017] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fe47ef7c469 [ 888.920282] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 888.927536] RBP: 00000000006abfa0 R08: 0000000000000000 R09: 0000000000000000 [ 888.934805] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 888.942054] R13: 0000000000000366 R14: 000000000041832b R15: 00007fe47f64c5c0 [ 888.955989] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 888.982774] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 888.989128] CPU: 1 PID: 13330 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 [ 888.997011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.006383] Call Trace: [ 889.008976] dump_stack+0x13e/0x194 [ 889.012605] warn_alloc.cold+0x96/0x1af [ 889.016594] ? zone_watermark_ok_safe+0x280/0x280 [ 889.021456] ? __alloc_pages_direct_compact+0xba/0x360 [ 889.026735] __alloc_pages_slowpath+0x2114/0x26c0 [ 889.031585] ? check_preemption_disabled+0x35/0x240 [ 889.036609] ? warn_alloc+0xf0/0xf0 [ 889.040276] __alloc_pages_nodemask+0x5d3/0x700 [ 889.045901] ? lock_downgrade+0x6e0/0x6e0 [ 889.050044] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 889.055052] ? SOFTIRQ_verbose+0x10/0x10 [ 889.059115] ? find_held_lock+0x2d/0x110 [ 889.063174] ? cpuset_nodemask_valid_mems_allowed+0xa/0x70 [ 889.068801] alloc_pages_current+0xe7/0x1e0 [ 889.073120] ion_page_pool_alloc+0x118/0x1b0 [ 889.077532] ion_system_heap_allocate+0x134/0x8d0 [ 889.082371] ? _ion_heap_freelist_drain+0x6e/0x410 [ 889.087296] ? ion_system_heap_free+0x240/0x240 [ 889.091991] ion_alloc+0x611/0x7d0 [ 889.095534] ? ion_dma_buf_release+0x40/0x40 [ 889.099943] ? _copy_from_user+0x94/0x100 [ 889.104090] ion_ioctl+0xef/0x1f8 [ 889.107539] ? ion_alloc.cold+0x3d/0x3d [ 889.111520] ? selinux_file_ioctl+0x3f7/0x560 [ 889.116008] ? ion_alloc.cold+0x3d/0x3d [ 889.119981] do_vfs_ioctl+0x75a/0xfe0 [ 889.123782] ? selinux_file_mprotect+0x5c0/0x5c0 [ 889.128562] ? ioctl_preallocate+0x1a0/0x1a0 [ 889.132975] ? security_file_ioctl+0x76/0xb0 [ 889.137386] ? security_file_ioctl+0x83/0xb0 [ 889.141802] SyS_ioctl+0x7f/0xb0 [ 889.145175] ? do_vfs_ioctl+0xfe0/0xfe0 [ 889.149148] do_syscall_64+0x1d5/0x640 [ 889.153036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 889.158214] RIP: 0033:0x7fd58e5e9469 [ 889.161924] RSP: 002b:00007fd58ecd9db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.169636] RAX: ffffffffffffffda RBX: 0000000000438aa0 RCX: 00007fd58e5e9469 [ 889.176889] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 889.184138] RBP: 00000000006abf00 R08: 0000000000000000 R09: 0000000000000000 [ 889.191386] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 889.198635] R13: 0000000000000366 R14: 000000000041832b R15: 00007fd58ecda5c0 [ 889.216112] warn_alloc_show_mem: 1 callbacks suppressed [ 889.216116] Mem-Info: [ 889.223909] active_anon:369705 inactive_anon:16353 isolated_anon:0 [ 889.223909] active_file:18157 inactive_file:4190 isolated_file:0 [ 889.223909] unevictable:0 dirty:45 writeback:0 unstable:0 [ 889.223909] slab_reclaimable:15519 slab_unreclaimable:138625 [ 889.223909] mapped:66049 shmem:18100 pagetables:8654 bounce:0 [ 889.223909] free:873867 free_pcp:234 free_cma:0 [ 889.262226] Node 0 active_anon:1414160kB inactive_anon:65336kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:251636kB dirty:20kB writeback:0kB shmem:71492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1187840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 889.291639] Node 1 active_anon:64660kB inactive_anon:76kB active_file:72624kB inactive_file:16744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12760kB dirty:160kB writeback:0kB shmem:908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 889.320267] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4416kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.348126] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 889.353448] Node 0 DMA32 free:42076kB min:36272kB low:45340kB high:54408kB active_anon:1409744kB inactive_anon:65336kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:20kB present:3129332kB managed:2621260kB mlocked:0kB kernel_stack:16224kB pagetables:32692kB bounce:0kB free_pcp:284kB local_pcp:120kB free_cma:0kB [ 889.383120] lowmem_reserve[]: 0 0 0 0 0 [ 889.387203] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:344kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.413040] lowmem_reserve[]: 0 0 0 0 0 [ 889.417142] Node 1 Normal free:3442468kB min:53612kB low:67012kB high:80412kB active_anon:64660kB inactive_anon:76kB active_file:72624kB inactive_file:17644kB unevictable:0kB writepending:160kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:896kB pagetables:1924kB bounce:0kB free_pcp:732kB local_pcp:112kB free_cma:0kB [ 889.446864] lowmem_reserve[]: 0 0 0 0 0 [ 889.450873] Node 0 DMA: 84*4kB (UME) 65*8kB (UME) 5*16kB (UM) 7*32kB (UE) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 10376kB [ 889.466930] Node 0 DMA32: 1581*4kB (UME) 660*8kB (UME) 108*16kB (UME) 959*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44020kB [ 889.481440] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 889.492277] Node 1 Normal: 173*4kB (UM) 357*8kB (UME) 347*16kB (UME) 295*32kB (UM) 264*64kB (UM) 177*128kB (UME) 89*256kB (M) 38*512kB (UME) 18*1024kB (ME) 7*2048kB (UM) 808*4096kB (M) = 3442668kB [ 889.510160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.519095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.527765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.536692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 889.545391] 40667 total pagecache pages [ 889.549371] 0 pages in swap cache [ 889.552860] Swap cache stats: add 0, delete 0, find 0/0 [ 889.558303] Free swap = 0kB [ 889.561332] Total swap = 0kB [ 889.564330] 1965979 pages RAM [ 889.567558] 0 pages HighMem/MovableOnly [ 889.571523] 339053 pages reserved [ 889.575062] 0 pages cma reserved 21:47:00 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) 21:47:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100060000003a4fd7d31d810b55cebfeea85e6401de1615956d2f3741f7b27a45c2179ac448e55d2e1c6cedaf04549c2125499a87a2f8bd1e62fc4f54ea2b0e106a1385a171"], 0x1c}}, 0x0) 21:47:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x403, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 21:47:00 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:47:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) 21:47:00 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/255, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) 21:47:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) 21:47:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100060000003a4fd7d31d810b55cebfeea85e6401de1615956d2f3741f7b27a45c2179ac448e55d2e1c6cedaf04549c2125499a87a2f8bd1e62fc4f54ea2b0e106a1385a171"], 0x1c}}, 0x0) 21:47:00 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) [ 889.822541] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 [ 889.847920] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 21:47:00 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000c80300002802000028020000000000003001000028020000f8020000f8020000f8020000f8020000f802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801300100000000000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000020000000000000000001e000000000030007372680000000000000000000000000000000000000000000000000000002c070004cbd460000100000000000000280000000000000000000000000000000400000000000000000000000000000028020000000000000000000000000000000000000000000100000000000000000000ffffac1e0101ffffff0000000000ffffff00fffffe00ff000000ffffffffff000000ffffffff76657468305f74795f627208a267650073797a5f74756e00000000000000000000000000000000000000000000000000000000000000000000000000000000003a0008040000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fbffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000182800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 21:47:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 889.920235] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 21:47:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100060000003a4fd7d31d810b55cebfeea85e6401de1615956d2f3741f7b27a45c2179ac448e55d2e1c6cedaf04549c2125499a87a2f8bd1e62fc4f54ea2b0e106a1385a171"], 0x1c}}, 0x0) 21:47:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) 21:47:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x403, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 21:47:00 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) [ 889.980802] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 21:47:00 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000c80300002802000028020000000000003001000028020000f8020000f8020000f8020000f8020000f802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801300100000000000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000020000000000000000001e000000000030007372680000000000000000000000000000000000000000000000000000002c070004cbd460000100000000000000280000000000000000000000000000000400000000000000000000000000000028020000000000000000000000000000000000000000000100000000000000000000ffffac1e0101ffffff0000000000ffffff00fffffe00ff000000ffffffffff000000ffffffff76657468305f74795f627208a267650073797a5f74756e00000000000000000000000000000000000000000000000000000000000000000000000000000000003a0008040000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fbffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000182800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 890.029830] xt_l2tp: unknown flags: 1e [ 890.065823] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 21:47:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000806010300000000000000000000000005000100060000003a4fd7d31d810b55cebfeea85e6401de1615956d2f3741f7b27a45c2179ac448e55d2e1c6cedaf04549c2125499a87a2f8bd1e62fc4f54ea2b0e106a1385a171"], 0x1c}}, 0x0) 21:47:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 21:47:00 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000c80300002802000028020000000000003001000028020000f8020000f8020000f8020000f8020000f802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801300100000000000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000020000000000000000001e000000000030007372680000000000000000000000000000000000000000000000000000002c070004cbd460000100000000000000280000000000000000000000000000000400000000000000000000000000000028020000000000000000000000000000000000000000000100000000000000000000ffffac1e0101ffffff0000000000ffffff00fffffe00ff000000ffffffffff000000ffffffff76657468305f74795f627208a267650073797a5f74756e00000000000000000000000000000000000000000000000000000000000000000000000000000000003a0008040000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fbffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000182800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 21:47:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x403, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 890.113804] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 [ 890.115121] xt_l2tp: unknown flags: 1e 21:47:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:00 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000c80300002802000028020000000000003001000028020000f8020000f8020000f8020000f8020000f802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801300100000000000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000020000000000000000001e000000000030007372680000000000000000000000000000000000000000000000000000002c070004cbd460000100000000000000280000000000000000000000000000000400000000000000000000000000000028020000000000000000000000000000000000000000000100000000000000000000ffffac1e0101ffffff0000000000ffffff00fffffe00ff000000ffffffffff000000ffffffff76657468305f74795f627208a267650073797a5f74756e00000000000000000000000000000000000000000000000000000000000000000000000000000000003a0008040000000000000000d000f8000000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fbffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000182800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 890.177063] xt_l2tp: unknown flags: 1e 21:47:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 890.228457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 890.259076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 890.267778] xt_l2tp: unknown flags: 1e 21:47:00 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x0, 0x0, 0xa01}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) [ 890.286546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:47:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 890.375509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 21:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x0, 0x0, 0xa01}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 21:47:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x0, 0x0, 0xa01}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) [ 890.575025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.606132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:47:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x0, 0x0, 0xa01}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) [ 890.703607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 890.762078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 21:47:01 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) [ 891.085845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 21:47:01 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 21:47:01 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000a100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 21:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 21:47:01 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) [ 891.345418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.410878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 891.487830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 891.504327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.774932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 21:47:02 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) [ 891.976957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:47:02 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) [ 892.026835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.051537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 892.070516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:47:02 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:02 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:02 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) [ 892.305227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 21:47:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 21:47:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') r3 = dup(r2) utimensat(r3, 0x0, 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 21:47:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 21:47:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 21:47:03 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 21:47:03 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 21:47:03 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) [ 892.854900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005c40)="0577e013e08dc6336913ea5508301d714e05836d9acfb68a910bd1677baa13ff7f82f94485013d3e929d7093fe54b0157ee22385a5eb8e5b3a35146038c87f4575953b1ccb5819d2e7dee5", 0x4b}, {&(0x7f0000000140)="7208da8359089b3d1b4d1c32d2c0ea05e028716dce440463d9d4f048fd141d01feb80afe7247d348686dff7a86c67e095668250e5d", 0x35}, {&(0x7f0000000180)="19ee2e7cbcafdb2d858a8146a28029494d1712f21057f95ea32ca6114c3179acef0ea27f5051d6b3f410e9bc34f40c75775ca88f15b4682b97387de97f2c53555ab91e", 0x43}, {&(0x7f0000000200)="901675334fdab404a707e6ed62771901ac2ee25e37aa8add4bfe76c8f0fc62b00bc4bb9f67f62af3d74b73a10d001ed502a8423537b26d80beb0d36fc29e6bb218aaf788af56c8c41f3536dffb903bc846ef1ee72e", 0x55}], 0x4}], 0x1, 0x0) 21:47:03 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:03 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:03 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:03 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) 21:47:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005c40)="0577e013e08dc6336913ea5508301d714e05836d9acfb68a910bd1677baa13ff7f82f94485013d3e929d7093fe54b0157ee22385a5eb8e5b3a35146038c87f4575953b1ccb5819d2e7dee5", 0x4b}, {&(0x7f0000000140)="7208da8359089b3d1b4d1c32d2c0ea05e028716dce440463d9d4f048fd141d01feb80afe7247d348686dff7a86c67e095668250e5d", 0x35}, {&(0x7f0000000180)="19ee2e7cbcafdb2d858a8146a28029494d1712f21057f95ea32ca6114c3179acef0ea27f5051d6b3f410e9bc34f40c75775ca88f15b4682b97387de97f2c53555ab91e", 0x43}, {&(0x7f0000000200)="901675334fdab404a707e6ed62771901ac2ee25e37aa8add4bfe76c8f0fc62b00bc4bb9f67f62af3d74b73a10d001ed502a8423537b26d80beb0d36fc29e6bb218aaf788af56c8c41f3536dffb903bc846ef1ee72e", 0x55}], 0x4}], 0x1, 0x0) 21:47:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005c40)="0577e013e08dc6336913ea5508301d714e05836d9acfb68a910bd1677baa13ff7f82f94485013d3e929d7093fe54b0157ee22385a5eb8e5b3a35146038c87f4575953b1ccb5819d2e7dee5", 0x4b}, {&(0x7f0000000140)="7208da8359089b3d1b4d1c32d2c0ea05e028716dce440463d9d4f048fd141d01feb80afe7247d348686dff7a86c67e095668250e5d", 0x35}, {&(0x7f0000000180)="19ee2e7cbcafdb2d858a8146a28029494d1712f21057f95ea32ca6114c3179acef0ea27f5051d6b3f410e9bc34f40c75775ca88f15b4682b97387de97f2c53555ab91e", 0x43}, {&(0x7f0000000200)="901675334fdab404a707e6ed62771901ac2ee25e37aa8add4bfe76c8f0fc62b00bc4bb9f67f62af3d74b73a10d001ed502a8423537b26d80beb0d36fc29e6bb218aaf788af56c8c41f3536dffb903bc846ef1ee72e", 0x55}], 0x4}], 0x1, 0x0) 21:47:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005c40)="0577e013e08dc6336913ea5508301d714e05836d9acfb68a910bd1677baa13ff7f82f94485013d3e929d7093fe54b0157ee22385a5eb8e5b3a35146038c87f4575953b1ccb5819d2e7dee5", 0x4b}, {&(0x7f0000000140)="7208da8359089b3d1b4d1c32d2c0ea05e028716dce440463d9d4f048fd141d01feb80afe7247d348686dff7a86c67e095668250e5d", 0x35}, {&(0x7f0000000180)="19ee2e7cbcafdb2d858a8146a28029494d1712f21057f95ea32ca6114c3179acef0ea27f5051d6b3f410e9bc34f40c75775ca88f15b4682b97387de97f2c53555ab91e", 0x43}, {&(0x7f0000000200)="901675334fdab404a707e6ed62771901ac2ee25e37aa8add4bfe76c8f0fc62b00bc4bb9f67f62af3d74b73a10d001ed502a8423537b26d80beb0d36fc29e6bb218aaf788af56c8c41f3536dffb903bc846ef1ee72e", 0x55}], 0x4}], 0x1, 0x0) 21:47:03 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 893.320738] new mount options do not match the existing superblock, will be ignored [ 893.469943] new mount options do not match the existing superblock, will be ignored 21:47:03 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:03 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001300)='./file0/file0\x00', 0x20443, 0x0) read$FUSE(r0, &(0x7f0000000300), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, 0x0, 0x0) [ 893.719253] new mount options do not match the existing superblock, will be ignored 21:47:04 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 893.991168] new mount options do not match the existing superblock, will be ignored 21:47:04 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.059661] new mount options do not match the existing superblock, will be ignored 21:47:04 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.105164] new mount options do not match the existing superblock, will be ignored [ 894.176359] new mount options do not match the existing superblock, will be ignored [ 894.198964] new mount options do not match the existing superblock, will be ignored 21:47:04 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.341623] new mount options do not match the existing superblock, will be ignored 21:47:04 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.415624] new mount options do not match the existing superblock, will be ignored [ 894.436954] new mount options do not match the existing superblock, will be ignored 21:47:04 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:04 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:05 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:05 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.637359] new mount options do not match the existing superblock, will be ignored [ 894.672800] new mount options do not match the existing superblock, will be ignored [ 894.709983] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.796723] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.840855] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x20f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:05 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 894.889903] new mount options do not match the existing superblock, will be ignored [ 894.915196] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 21:47:05 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 895.033699] ptrace attach of "/root/syz-executor.0"[13771] was attempted by "/root/syz-executor.0"[13773] [ 895.048716] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x20f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:05 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 21:47:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) [ 895.134200] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 21:47:05 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 21:47:05 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:05 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 895.262731] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:05 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 21:47:05 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 895.381856] new mount options do not match the existing superblock, will be ignored 21:47:05 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xeb}, 'port1\x00', 0x0, 0x30000, 0x4, 0x4, 0x9, 0xa91, 0x9, 0x0, 0x0, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) dup2(0xffffffffffffffff, r3) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5000002, 0x50, r2, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x258}], 0x1, 0xd) 21:47:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 895.488020] new mount options do not match the existing superblock, will be ignored [ 895.570111] new mount options do not match the existing superblock, will be ignored 21:47:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x20f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 21:47:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0xfffffffd, 0x3, 0x8, 0x0, 'syz1\x00'}, 0x4, 0x30, 0x1ff, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) 21:47:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)) 21:47:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0xfffffffd, 0x3, 0x8, 0x0, 'syz1\x00'}, 0x4, 0x30, 0x1ff, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) 21:47:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)) 21:47:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0xfffffffd, 0x3, 0x8, 0x0, 'syz1\x00'}, 0x4, 0x30, 0x1ff, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) 21:47:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)) 21:47:11 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x20f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0xfffffffd, 0x3, 0x8, 0x0, 'syz1\x00'}, 0x4, 0x30, 0x1ff, 0x0, 0x0, 0x4, 'syz1\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) 21:47:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)) 21:47:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 21:47:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:11 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/140, 0x200002cc}], 0x1, 0x5b) 21:47:11 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:14 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 21:47:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:14 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:14 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:14 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:14 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:14 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:14 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:47:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 21:47:15 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 21:47:15 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 21:47:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 21:47:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 21:47:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 21:47:15 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 21:47:15 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 21:47:15 executing program 2: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 21:47:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 21:47:15 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 21:47:15 executing program 2: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 21:47:15 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) 21:47:15 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) [ 905.421900] new mount options do not match the existing superblock, will be ignored [ 905.461292] option changes via remount are deprecated (pid=14014 comm=syz-executor.5) [ 905.507097] new mount options do not match the existing superblock, will be ignored [ 905.539419] option changes via remount are deprecated (pid=14014 comm=syz-executor.5) 21:47:16 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:16 executing program 2: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 21:47:16 executing program 4: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:16 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:16 executing program 2: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 21:47:16 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) 21:47:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) 21:47:16 executing program 4: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:16 executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:16 executing program 2: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) [ 906.270485] new mount options do not match the existing superblock, will be ignored [ 906.306143] option changes via remount are deprecated (pid=14056 comm=syz-executor.3) 21:47:16 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) [ 906.352413] new mount options do not match the existing superblock, will be ignored [ 906.391944] option changes via remount are deprecated (pid=14055 comm=syz-executor.5) 21:47:17 executing program 2: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) 21:47:17 executing program 4: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) [ 906.712295] new mount options do not match the existing superblock, will be ignored [ 906.776928] option changes via remount are deprecated (pid=14094 comm=syz-executor.3) [ 906.792890] new mount options do not match the existing superblock, will be ignored [ 906.832048] option changes via remount are deprecated (pid=14102 comm=syz-executor.5) 21:47:17 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) 21:47:17 executing program 2: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 4: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='cpuset\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x83403c, 0x0) [ 907.284653] new mount options do not match the existing superblock, will be ignored [ 907.320655] option changes via remount are deprecated (pid=14139 comm=syz-executor.3) 21:47:17 executing program 4: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 907.517694] new mount options do not match the existing superblock, will be ignored 21:47:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 21:47:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 21:47:18 executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:18 executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:18 executing program 4: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 21:47:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:18 executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/175, 0xaf}, {0x0}, {&(0x7f0000000980)=""/207, 0xcf}], 0x5, &(0x7f0000000180)=""/79, 0x4f}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a7) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) 21:47:18 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 21:47:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 21:47:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@dev}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac0400026f076004f44a982c8814aa00000012a199f8a888a92bf46e20a9b78003d91876c932b5895c305382e69c5ef923a781916392dd0308b3daf955906d6c220f70e197d806a8914ec6756451974dbca80cdffe2b0800000006414f9d0f140a0e15ec35ebf1092b450d49ce2e4190c5cf13096a3c67d74410c2553f14cecbc349043410e50c61d23827b25271251748a1363c2cdf2131074890fb1db349f2c66e22a09ebefefee4a7f810194f21fcaecbb800"/207], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:47:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x4745, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) 21:47:19 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xfc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5000000}, 0x1c) 21:47:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@dev}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac0400026f076004f44a982c8814aa00000012a199f8a888a92bf46e20a9b78003d91876c932b5895c305382e69c5ef923a781916392dd0308b3daf955906d6c220f70e197d806a8914ec6756451974dbca80cdffe2b0800000006414f9d0f140a0e15ec35ebf1092b450d49ce2e4190c5cf13096a3c67d74410c2553f14cecbc349043410e50c61d23827b25271251748a1363c2cdf2131074890fb1db349f2c66e22a09ebefefee4a7f810194f21fcaecbb800"/207], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:47:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:19 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:19 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) unshare(0x2e020000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2e020400) r1 = memfd_create(&(0x7f00000002c0)='\x06\xfa\x00\x00/\x88\xb2/3\x06\x00\x00\x00\xe4\xad\xb4gno0\x10\xecy\xe2\x00\xbdd\x00\xcb\x88\x00\x00\x00\x00\xff\xff\xff\xff\xdcW\xb7h\x8b\xee\x8c\x80\x9f\x88@tUq0|\x98\xe2P\x00\x89\x03\x00\x00\x00\x00\x00\x00\xf8\xe5\x8f\xcc\x15\xa4}*AGk\xf6U0\xd2\xf4\xdb\xf4-\f\x1a\x93+\'\xce\xbb\xbdm+T\xd79\bZ\x11\x93R{8V@\"9T\xa6\xe6Q\xb1C\x00\x00\x7f\xaa<\xd6m\x0eE\x86\x18]\x03\xa6\xa1\xd88u\xfc\xc8\\\\\xfc\xc2\xb8\x9a\xfe%\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x9c\x98\xcb\x94\xbb\xca\xf5\x95\x10y\xea5\x92A=\xb5\x11*q\xc5AW\x17\xe85a\xa3\x02\x14T\xe6\x02\r\x18\x0eLx\xef_2\xad\xb2\x92R\xe1}\xc0\xea\xeb\x98\x83jb\xad4\x1b\xc8\x9e\x9aKg\xe2\xdb!\"\x87\a\xb8\x19J\x95\xc9f\xcc\xc5\xe5`C\x92\xc2\x06\xb2-5\x89\x04\x17\x06\f2Z\x98\xaa-\xc4Z\x1b\xeeP\x98=\xf1I\x1516\boW\x14\x91\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) close(r0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000002, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00') 21:47:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@dev}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac0400026f076004f44a982c8814aa00000012a199f8a888a92bf46e20a9b78003d91876c932b5895c305382e69c5ef923a781916392dd0308b3daf955906d6c220f70e197d806a8914ec6756451974dbca80cdffe2b0800000006414f9d0f140a0e15ec35ebf1092b450d49ce2e4190c5cf13096a3c67d74410c2553f14cecbc349043410e50c61d23827b25271251748a1363c2cdf2131074890fb1db349f2c66e22a09ebefefee4a7f810194f21fcaecbb800"/207], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:47:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@dev}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac0400026f076004f44a982c8814aa00000012a199f8a888a92bf46e20a9b78003d91876c932b5895c305382e69c5ef923a781916392dd0308b3daf955906d6c220f70e197d806a8914ec6756451974dbca80cdffe2b0800000006414f9d0f140a0e15ec35ebf1092b450d49ce2e4190c5cf13096a3c67d74410c2553f14cecbc349043410e50c61d23827b25271251748a1363c2cdf2131074890fb1db349f2c66e22a09ebefefee4a7f810194f21fcaecbb800"/207], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2f) 21:47:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) 21:47:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 21:47:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) 21:47:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:19 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x210}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) 21:47:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x210}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) [ 909.639409] ptrace attach of "/root/syz-executor.0"[14345] was attempted by "/root/syz-executor.0"[14347] 21:47:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) 21:47:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="45e9aed12f060000000000000025d86800278dcff47d010000805acf7c47083852fb470234432479aed75d492b415bcee00a06dc9d8e99adaf81dc000000000000000068e9d3a60a6638d827e6b924fa38cb0ac9a54e37e9282b6849fb6717be60c823be54f0f62c726a997709e4f607e04587cc1e6ffdd38bac11ef386af3bf26b50e6bd9de49cc1e4dd07d2281651ca09b3d02db77ad04e6071c2475ca6179b4670c04d61e871f6cf95ff15fffc91eef67f195070fdc8bb1d3ee010000000000008adbea8e51e394e27bf9f9652a76ac38bf3848e65c3fcb6e19611bf98161b6b559cad39ca1fd434079e3e0d8b5556c68e48a808f58d414c236166debd826043ee898e05e9fa75b0bce05648fb3b02db4bfe7ee020000000000000000000000c016780047b45fdd399e2a04b65b9a42ab4033eb5305cd7f7252d2c5924ea9643dff0d1eacad4e8fae9df82057caa64e472fb13476905c491c979cff305fc6ecf4c72144e0a1471915038e7117abda618e925b265d4f56c40f7f2b4221c01e49d68c1c13a00d1ccbadd9dce3957862ffcfce105d759e37bbb5adb2ff8deaa2ff924a09525533e4e1a1267f1d8e3e9cdd1c77430fbef8c7732239076bfcd742559cb35c21ae635bee50ddba35484e83f3666a4cb081ab19ba7c87ff5fa0057292552ff5cfc312baa2aa93fb6a9e2f47ad779c61cb3b280ee422b00dd4a07f000e7dce7353ee7ddfcc02d89c2d27e0dc", 0x210}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 21:47:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="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", 0x210}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 912.923906] ptrace attach of "/root/syz-executor.0"[14407] was attempted by "/root/syz-executor.0"[14411] 21:47:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="aa4c826f35"], 0xda00) write$cgroup_int(r2, &(0x7f0000000200)=0xb9c30200, 0x43400) 21:47:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/176) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 913.530996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.557726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.604016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.653970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.661987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.685414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 913.736594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.775411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:24 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:24 executing program 2: perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 913.825993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.852529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21:47:26 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:26 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a8030000d0000000a001000000000000d000000000000000d8020000d8020000d8020000d8020000d8020000040000000000000000000000fe800000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000700000000000000000000000000000000000067656e6576653100000000000000000076657468315f6d6163767461700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000001fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d3000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000a800d000000000000000000000de0000000000000000000000000000280052454a4543540000000000000000000000000084000000000000000000000000000000000000000000000000000000005b000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100138010000000000000000000000000000000000000000000000006800697072616e6765000000000000000000000000000000000000000000000100000000000000000000ffffe0000002fe8000000000000000000000000000aaffffffff000000000000000000000000e000000200000000000000fcffffffffffffff000000000028004e465155455545000000000000000000000000000000000000000000000300004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21:47:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:47:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21:47:26 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a8030000d0000000a001000000000000d000000000000000d8020000d8020000d8020000d8020000d8020000040000000000000000000000fe800000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000700000000000000000000000000000000000067656e6576653100000000000000000076657468315f6d6163767461700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000001fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d3000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000a800d000000000000000000000de0000000000000000000000000000280052454a4543540000000000000000000000000084000000000000000000000000000000000000000000000000000000005b000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100138010000000000000000000000000000000000000000000000006800697072616e6765000000000000000000000000000000000000000000000100000000000000000000ffffe0000002fe8000000000000000000000000000aaffffffff000000000000000000000000e000000200000000000000fcffffffffffffff000000000028004e465155455545000000000000000000000000000000000000000000000300004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340), 0x4) 21:47:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21:47:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote}}, {{@in=@initdev}}}, &(0x7f0000000100)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80086603, 0x73a000) 21:47:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21:47:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80086603, 0x73a000) 21:47:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80086603, 0x73a000) 21:47:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x5452, &(0x7f0000000140)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21:47:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80086603, 0x73a000) 21:47:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote}}, {{@in=@initdev}}}, &(0x7f0000000100)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) 21:47:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 1: request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='[trusted/}em0vboxnet0ppp0:\'security\x00', 0x0) 21:47:27 executing program 1: request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='[trusted/}em0vboxnet0ppp0:\'security\x00', 0x0) 21:47:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 1: request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='[trusted/}em0vboxnet0ppp0:\'security\x00', 0x0) 21:47:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 1: request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='[trusted/}em0vboxnet0ppp0:\'security\x00', 0x0) 21:47:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote}}, {{@in=@initdev}}}, &(0x7f0000000100)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000003, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 21:47:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0x1000}], 0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote}}, {{@in=@initdev}}}, &(0x7f0000000100)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 21:47:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x50501, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes128\x00'}, [], [], 0x0, 0x400}, ["", ""]}, 0xe0}}, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x502, &(0x7f0000000100)=[{}]}) 21:47:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 21:47:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:29 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x50501, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes128\x00'}, [], [], 0x0, 0x400}, ["", ""]}, 0xe0}}, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x502, &(0x7f0000000100)=[{}]}) 21:47:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(0x0, 0x180800) 21:47:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 21:47:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:29 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(0x0, 0x180800) 21:47:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x50501, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes128\x00'}, [], [], 0x0, 0x400}, ["", ""]}, 0xe0}}, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x502, &(0x7f0000000100)=[{}]}) 21:47:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r0) 21:47:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2041, 0x0, 0x5, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') preadv(r5, &(0x7f0000000500), 0x37d, 0x0) dup(0xffffffffffffffff) 21:47:30 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 21:47:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x50501, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'drbg_nopr_ctr_aes128\x00'}, [], [], 0x0, 0x400}, ["", ""]}, 0xe0}}, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x502, &(0x7f0000000100)=[{}]}) 21:47:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(0x0, 0x180800) 21:47:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:30 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) 21:47:30 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:30 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) 21:47:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(0x0, 0x180800) 21:47:30 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000000100)=""/84, &(0x7f0000001ffc)=0x54) [ 920.081539] net_ratelimit: 66 callbacks suppressed [ 920.081545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:30 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) [ 920.129456] nbd_handle_cmd: 5 callbacks suppressed [ 920.129465] block nbd0: Attempted send on invalid socket [ 920.140081] print_req_error: I/O error, dev nbd0, sector 64 [ 920.147139] block nbd0: Attempted send on invalid socket [ 920.153136] print_req_error: I/O error, dev nbd0, sector 120 21:47:30 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000000100)=""/84, &(0x7f0000001ffc)=0x54) 21:47:30 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) 21:47:30 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000000100)=""/84, &(0x7f0000001ffc)=0x54) 21:47:30 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) [ 920.262457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:30 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) [ 920.316261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.358052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.399379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.424405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.440942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.457791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.474656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.492509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.664073] block nbd0: Attempted send on invalid socket [ 920.669583] print_req_error: I/O error, dev nbd0, sector 64 [ 920.692584] block nbd0: Attempted send on invalid socket [ 920.698221] print_req_error: I/O error, dev nbd0, sector 120 21:47:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:31 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) 21:47:31 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000000100)=""/84, &(0x7f0000001ffc)=0x54) 21:47:31 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) 21:47:31 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) 21:47:31 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:31 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) 21:47:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:31 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9cabbf0400cbb140419b80008100501d4305", 0x12}], 0x1}, 0x0) 21:47:31 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 920.953132] block nbd0: Attempted send on invalid socket [ 920.958663] print_req_error: I/O error, dev nbd0, sector 64 [ 920.969580] block nbd0: Attempted send on invalid socket [ 920.975430] print_req_error: I/O error, dev nbd0, sector 120 21:47:31 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 921.105106] block nbd0: Attempted send on invalid socket [ 921.110692] print_req_error: I/O error, dev nbd0, sector 64 [ 921.119093] block nbd0: Attempted send on invalid socket [ 921.124923] print_req_error: I/O error, dev nbd0, sector 120 [ 921.234523] block nbd4: Attempted send on invalid socket [ 921.240107] print_req_error: I/O error, dev nbd4, sector 64 [ 921.253191] block nbd4: Attempted send on invalid socket [ 921.258871] print_req_error: I/O error, dev nbd4, sector 120 21:47:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:32 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:32 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:32 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:32 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:32 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) 21:47:32 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40505412) 21:47:32 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:47:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) 21:47:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:32 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40505412) 21:47:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000100)) 21:47:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40505412) 21:47:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40505412) 21:47:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="84", 0x31200}], 0x1) 21:47:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="84", 0x31200}], 0x1) 21:47:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) 21:47:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) 21:47:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="84", 0x31200}], 0x1) 21:47:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) 21:47:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="84", 0x31200}], 0x1) 21:47:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) 21:47:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) 21:47:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 925.219643] net_ratelimit: 7157 callbacks suppressed [ 925.219671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.248493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000236fc8)=[{0x8004000, 0x0, 0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e42f2f0d6ded756ff9a501a7eab14f9c0865299a45c900ae25a64c93f16205fedb868957150752b0fa68db3db23a0390fd2b73ddf3e7c0a189b42875229263458b7dacbbcf3fb29c9971fedca42c2555627f81112d7b0ac28a5356a6760df55558ca4219d85b3a87e858b96181d5ff4d99773b6b1c21180600000000000000e55291609884e284a53b68006724b4a1f57e5280510f733132de2212f61ffe5286d09007be088d00679e5599dd8a137ee635df131ab110ae4c3171b7a8cdd821de1020482614b756b9755e1f139303395e5177b40f034607cbe010ff4c7beb1eb7ba"]}}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) [ 925.268287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.482574] audit: type=1804 audit(1588196855.809:46664): pid=15158 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir101234200/syzkaller.EMDdgj/1161/bus" dev="sda1" ino=16619 res=1 21:47:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:47:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 21:47:36 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4143, 0x0) 21:47:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="de4b51baf80c66b87654c68566efbafc0cb80070ef2ef226f081a6431e0100660f23f4b805008ed8baf80c66b8c6b0828766efbafc0cede8d417670f01d40f20d86635200000000f22d80f01f9", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 21:47:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) [ 926.209735] audit: type=1804 audit(1588196856.419:46665): pid=15172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir101234200/syzkaller.EMDdgj/1161/bus" dev="sda1" ino=16619 res=1 21:47:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="6766c7442400000000006766c74424022c0000006766c744240600000000670f011c240f060fc769ca0f0866b9800000c00f326635000100000f30670f01c20f224481746f0400da0b440f20c066350d000000440f22c0"}], 0x36, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:47:36 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4143, 0x0) [ 926.319413] audit: type=1804 audit(1588196856.539:46666): pid=15172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir101234200/syzkaller.EMDdgj/1161/bus" dev="sda1" ino=16619 res=1 21:47:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 21:47:36 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4143, 0x0) 21:47:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:47:36 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4143, 0x0) 21:47:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:47:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 21:47:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="de4b51baf80c66b87654c68566efbafc0cb80070ef2ef226f081a6431e0100660f23f4b805008ed8baf80c66b8c6b0828766efbafc0cede8d417670f01d40f20d86635200000000f22d80f01f9", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 21:47:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="6766c7442400000000006766c74424022c0000006766c744240600000000670f011c240f060fc769ca0f0866b9800000c00f326635000100000f30670f01c20f224481746f0400da0b440f20c066350d000000440f22c0"}], 0x36, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 926.661230] audit: type=1804 audit(1588196856.989:46667): pid=15228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir101234200/syzkaller.EMDdgj/1162/bus" dev="sda1" ino=16322 res=1 21:47:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="de4b51baf80c66b87654c68566efbafc0cb80070ef2ef226f081a6431e0100660f23f4b805008ed8baf80c66b8c6b0828766efbafc0cede8d417670f01d40f20d86635200000000f22d80f01f9", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) [ 927.159595] audit: type=1804 audit(1588196857.489:46668): pid=15239 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir115838635/syzkaller.M2zXii/1195/bus" dev="sda1" ino=16242 res=1 21:47:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="de4b51baf80c66b87654c68566efbafc0cb80070ef2ef226f081a6431e0100660f23f4b805008ed8baf80c66b8c6b0828766efbafc0cede8d417670f01d40f20d86635200000000f22d80f01f9", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 21:47:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="6766c7442400000000006766c74424022c0000006766c744240600000000670f011c240f060fc769ca0f0866b9800000c00f326635000100000f30670f01c20f224481746f0400da0b440f20c066350d000000440f22c0"}], 0x36, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 928.539856] audit: type=1804 audit(1588196857.949:46669): pid=15248 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir249529437/syzkaller.zyrffl/1196/bus" dev="sda1" ino=16635 res=1 21:47:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 929.706258] audit: type=1804 audit(1588196859.290:46670): pid=15276 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir239958451/syzkaller.adX8vi/1227/bus" dev="sda1" ino=16640 res=1 [ 929.745454] audit: type=1804 audit(1588196859.410:46671): pid=15279 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1173/bus" dev="sda1" ino=16643 res=1 21:47:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="6766c7442400000000006766c74424022c0000006766c744240600000000670f011c240f060fc769ca0f0866b9800000c00f326635000100000f30670f01c20f224481746f0400da0b440f20c066350d000000440f22c0"}], 0x36, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5f, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 930.089657] audit: type=1804 audit(1588196860.420:46672): pid=15291 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir239958451/syzkaller.adX8vi/1228/bus" dev="sda1" ino=16631 res=1 [ 930.345754] audit: type=1804 audit(1588196860.680:46673): pid=15292 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir101234200/syzkaller.EMDdgj/1163/bus" dev="sda1" ino=16305 res=1 21:47:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 931.755609] audit: type=1804 audit(1588196861.430:46674): pid=15305 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir249529437/syzkaller.zyrffl/1197/bus" dev="sda1" ino=16129 res=1 21:47:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 933.249073] audit: type=1804 audit(1588196862.920:46675): pid=15323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1174/bus" dev="sda1" ino=16650 res=1 21:47:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 933.443642] audit: type=1804 audit(1588196862.930:46676): pid=15324 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1221/bus" dev="sda1" ino=16651 res=1 [ 934.041369] audit: type=1804 audit(1588196864.070:46677): pid=15338 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir239958451/syzkaller.adX8vi/1229/bus" dev="sda1" ino=16652 res=1 21:47:44 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 934.478449] audit: type=1804 audit(1588196864.810:46678): pid=15348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1222/bus" dev="sda1" ino=16648 res=1 21:47:45 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') 21:47:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:47:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) [ 935.282258] audit: type=1804 audit(1588196865.020:46679): pid=15355 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1175/bus" dev="sda1" ino=16654 res=1 [ 935.653184] audit: type=1804 audit(1588196865.980:46680): pid=15371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir115838635/syzkaller.M2zXii/1196/bus" dev="sda1" ino=16129 res=1 21:47:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/217, 0xd9}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/87, 0x57}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 21:47:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) 21:47:46 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 21:47:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @random="e6c99ff0f0ae"}, 0x94, {0x2, 0x0, @remote}, 'ip6tnl0\x00'}) [ 936.319620] audit: type=1804 audit(1588196866.110:46681): pid=15375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1223/bus" dev="sda1" ino=16632 res=1 21:47:47 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:47 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') [ 936.519791] audit: type=1804 audit(1588196866.850:46682): pid=15386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir101234200/syzkaller.EMDdgj/1164/bus" dev="sda1" ino=16662 res=1 [ 936.795309] audit: type=1804 audit(1588196867.130:46683): pid=15390 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1176/bus" dev="sda1" ino=16663 res=1 [ 936.796149] audit: type=1804 audit(1588196867.130:46684): pid=15389 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1176/bus" dev="sda1" ino=16663 res=1 21:47:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) 21:47:47 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') [ 937.059891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.076818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.120587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.171277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.180064] audit: type=1804 audit(1588196867.510:46685): pid=15408 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1177/bus" dev="sda1" ino=16632 res=1 21:47:47 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') 21:47:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @random="e6c99ff0f0ae"}, 0x94, {0x2, 0x0, @remote}, 'ip6tnl0\x00'}) [ 937.516314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.779013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.787060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.796974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.806394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.813253] audit: type=1804 audit(1588196867.580:46686): pid=15416 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir115838635/syzkaller.M2zXii/1197/bus" dev="sda1" ino=16629 res=1 [ 937.814967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:47:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @random="e6c99ff0f0ae"}, 0x94, {0x2, 0x0, @remote}, 'ip6tnl0\x00'}) 21:47:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) [ 937.974889] audit: type=1804 audit(1588196867.950:46687): pid=15418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir958268567/syzkaller.m61GIn/1177/bus" dev="sda1" ino=16632 res=1 21:47:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @random="e6c99ff0f0ae"}, 0x94, {0x2, 0x0, @remote}, 'ip6tnl0\x00'}) 21:47:50 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) 21:47:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) 21:47:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:50 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:50 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:50 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:53 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:53 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) 21:47:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x39) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 21:47:53 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 942.938671] net_ratelimit: 122 callbacks suppressed [ 942.938698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.017226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.036668] audit: type=1804 audit(1588196873.371:46688): pid=15508 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1229/bus" dev="sda1" ino=16701 res=1 [ 943.088300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.113638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.121881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.129890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.138000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.148642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.157594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.165650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.188583] audit: type=1804 audit(1588196873.521:46689): pid=15519 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1229/bus" dev="sda1" ino=16701 res=1 21:47:53 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:53 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x20000, 0x0, {0x0, 0xea60}, {0x4, 0x2, 0x3, 0xf2, 0x38, 0x7, "e0a9c57d"}, 0x401, 0x1, @planes=&(0x7f0000000080)={0x0, 0x8, @mem_offset=0xff, 0x4}, 0x1, 0x0, r0}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x551}, 0x40) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x180) sendfile(r2, r3, 0x0, 0x8001) epoll_wait(r3, 0x0, 0x0, 0xe65f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xdf52, 0x728df551}) [ 943.543366] audit: type=1804 audit(1588196873.881:46690): pid=15528 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1230/bus" dev="sda1" ino=16701 res=1 [ 943.615978] audit: type=1804 audit(1588196873.951:46691): pid=15534 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir284430710/syzkaller.tBUNrk/1230/bus" dev="sda1" ino=16701 res=1 21:47:54 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:54 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:54 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:55 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:57 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:57 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') 21:47:57 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) 21:47:57 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:57 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) 21:47:57 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) 21:47:57 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') 21:47:57 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) 21:47:57 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1}) unlink(&(0x7f0000000080)='./file0/bus\x00') 21:47:57 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) 21:47:57 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:47:57 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 948.030126] net_ratelimit: 280 callbacks suppressed [ 948.030131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.043293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.480064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.164969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:48:00 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c00000007ffff0f00e18ab4b2"], 0xd) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 21:48:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:00 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) 21:48:00 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) sysfs$2(0x2, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 21:48:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 21:48:00 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c00000007ffff0f00e18ab4b2"], 0xd) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 21:48:00 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [], r2}, 0x18, 0x0) [ 949.859372] 9pnet: p9_errstr2errno: server reported unknown error ኴ² 21:48:00 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c00000007ffff0f00e18ab4b2"], 0xd) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 21:48:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 21:48:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) [ 949.984900] 9pnet: p9_errstr2errno: server reported unknown error ኴ² [ 950.106405] 9pnet: p9_errstr2errno: server reported unknown error ኴ² 21:48:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 21:48:00 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c00000007ffff0f00e18ab4b2"], 0xd) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 21:48:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) [ 950.337956] 9pnet: p9_errstr2errno: server reported unknown error ኴ² 21:48:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:00 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 950.457800] batadv0: Device is already in use. 21:48:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 21:48:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x400) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) 21:48:03 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 21:48:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) [ 953.351587] batadv0: Device is already in use. 21:48:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:03 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 21:48:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) 21:48:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 953.524071] batadv0: Device is already in use. 21:48:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:03 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) [ 953.561220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 953.573573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 21:48:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) [ 953.610840] batadv0: Device is already in use. 21:48:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) [ 953.681548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) 21:48:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 21:48:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x46a) 21:48:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) [ 953.845361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 21:48:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 21:48:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000040)}, 0x20) 21:48:04 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x46a) 21:48:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hfs\x00', 0x0, 0x0) 21:48:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 954.078371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:48:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) [ 954.135074] hfs: can't find a HFS filesystem on dev nullb0 21:48:04 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x46a) 21:48:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hfs\x00', 0x0, 0x0) 21:48:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cf2aecf58a04d89ce6c35ee60c116e351907f8022c3128d6c3867209fca9a5d9929c35189bdd88b4836842663709b16e0200ebec8410931c10a59b91f860d8cf431c025fe40e5e7e814dcf677a4e18", @ANYBLOB="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"], 0x0, 0x151}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 954.182557] hfs: can't find a HFS filesystem on dev nullb0 21:48:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) [ 954.312279] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000005 [ 954.334032] hfs: can't find a HFS filesystem on dev nullb0 [ 954.335858] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000086 [ 954.348340] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000046 21:48:04 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x46a) 21:48:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) 21:48:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hfs\x00', 0x0, 0x0) [ 954.364971] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000064 21:48:04 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000100), 0x0) [ 954.432552] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000068 [ 954.463885] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000000c 21:48:04 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x328, 0x328, 0xffffffff, 0x190, 0x190, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, 'macvtap0\x00', 'ipvlan0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@multicast1, [], @ipv6=@mcast2, [], @ipv4=@broadcast}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @remote, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vcan0\x00', 'tunl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "9f9d"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) [ 954.507053] hfs: can't find a HFS filesystem on dev nullb0 [ 954.519865] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000026 [ 954.551582] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000074 [ 954.577706] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000054 [ 954.602583] xt_connlimit: cannot load conntrack support for address family 2 [ 954.602872] kvm [15768]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000038 [ 954.639548] xt_connlimit: cannot load conntrack support for address family 2 [ 954.693986] kvm [15768]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0x475f89 [ 954.762380] audit: type=1400 audit(1588196885.042:46692): avc: denied { write } for pid=15795 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 954.806058] kvm_hv_set_msr: 50 callbacks suppressed [ 954.806067] kvm [15768]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000022 data 0x89173701 [ 954.856848] IPVS: ftp: loaded support on port[0] = 21 [ 954.901424] kvm [15768]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0x671172 [ 954.917138] kvm [15768]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000023 data 0x3b9aca01 21:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:48:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hfs\x00', 0x0, 0x0) 21:48:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) 21:48:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:05 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x328, 0x328, 0xffffffff, 0x190, 0x190, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, 'macvtap0\x00', 'ipvlan0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@multicast1, [], @ipv6=@mcast2, [], @ipv4=@broadcast}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @remote, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vcan0\x00', 'tunl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "9f9d"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 21:48:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 955.052333] hfs: can't find a HFS filesystem on dev nullb0 21:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 955.097677] xt_connlimit: cannot load conntrack support for address family 2 [ 955.115452] kvm [15834]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0xaa758 [ 955.143543] kvm [15834]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0xef0a2 [ 955.180842] kvm [15834]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000022 data 0x89173701 [ 955.211086] kvm [15852]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0x7e9f8 [ 955.224110] kvm [15834]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0x1b3bc3 [ 955.224687] kvm [15849]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0xa7acd [ 955.238834] kvm [15852]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0xc25fa [ 955.252135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 21:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 955.265221] kvm [15834]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0x218211 [ 955.287992] kvm [15852]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000020 data 0x13a64a [ 955.303565] kvm [15849]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000022 data 0x89173701 21:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 955.385715] kvm [15849]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000022 data 0x89173701 21:48:05 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:48:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 955.748635] kvm [15903]: vcpu0, guest rIP: 0x14c Hyper-V uhandled wrmsr: 0x40000022 data 0x89173701 21:48:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:48:08 executing program 3: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:08 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x328, 0x328, 0xffffffff, 0x190, 0x190, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, 'macvtap0\x00', 'ipvlan0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@multicast1, [], @ipv6=@mcast2, [], @ipv4=@broadcast}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @remote, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vcan0\x00', 'tunl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "9f9d"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:08 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) [ 958.073890] xt_connlimit: cannot load conntrack support for address family 2 [ 958.300471] IPVS: ftp: loaded support on port[0] = 21 21:48:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:09 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:09 executing program 3: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) [ 959.501663] IPVS: ftp: loaded support on port[0] = 21 21:48:10 executing program 2: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x10) 21:48:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x328, 0x328, 0xffffffff, 0x190, 0x190, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, 'macvtap0\x00', 'ipvlan0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @local, @port, @gre_key}}}}, {{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@multicast1, [], @ipv6=@mcast2, [], @ipv4=@broadcast}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @remote, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vcan0\x00', 'tunl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "9f9d"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 0: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:11 executing program 3: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:11 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:11 executing program 2: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:11 executing program 4: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) [ 961.154822] xt_connlimit: cannot load conntrack support for address family 2 21:48:14 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:14 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:14 executing program 0: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:48:38 executing program 1: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) 21:48:38 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) [ 991.525608] kvm_hv_get_msr: 535 callbacks suppressed [ 991.525617] kvm [16108]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000005 [ 991.575687] kvm [16108]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000086 [ 991.630707] kvm [16108]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000046 [ 991.659294] kvm [16108]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000064 [ 991.715641] kvm [16108]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000068 [ 1096.548354] INFO: rcu_bh detected stalls on CPUs/tasks: [ 1096.553773] (detected by 0, t=10502 jiffies, g=-217, c=-218, q=11) [ 1096.560182] All QSes seen, last rcu_bh kthread activity 10472 (4295046963-4295036491), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1096.571955] syz-executor.5 R running task 29280 16126 6368 0x00000008 [ 1096.579147] Call Trace: [ 1096.581715] [ 1096.583860] sched_show_task.cold+0x2e3/0x347 [ 1096.588415] rcu_check_callbacks.cold+0xd3f/0xdaa [ 1096.593267] update_process_times+0x29/0x60 [ 1096.597639] tick_sched_handle+0x7d/0x150 [ 1096.601780] tick_sched_timer+0x3e/0x120 [ 1096.605833] __hrtimer_run_queues+0x25c/0xbb0 [ 1096.610337] ? tick_sched_do_timer+0xe0/0xe0 [ 1096.614759] ? hrtimer_start_range_ns+0x1060/0x1060 [ 1096.619784] hrtimer_interrupt+0x1e6/0x5e0 [ 1096.624028] smp_apic_timer_interrupt+0x117/0x5e0 [ 1096.628864] apic_timer_interrupt+0x8f/0xa0 [ 1096.633178] RIP: 0010:memcmp+0x5e/0xb0 [ 1096.637073] RSP: 0018:ffff8880aea078a0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff10 [ 1096.644774] RAX: 0000000000000081 RBX: ffff8880aea0794b RCX: 0000000000000003 [ 1096.652033] RDX: 0000000000000000 RSI: ffff88808c616b2b RDI: ffff8880aea07938 [ 1096.659293] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000001 [ 1096.666572] R10: ffff8881fbf2ecf0 R11: ffff8881fbf2e440 R12: ffff8880aea07990 [ 1096.673849] R13: 000000000000000b R14: ffff8880aea07938 R15: ffff88808c616b00 [ 1096.681230] depot_save_stack+0x10d/0x401 [ 1096.685379] save_stack+0x89/0xa0 [ 1096.688823] ? save_stack+0x32/0xa0 [ 1096.692438] ? kasan_kmalloc+0xbf/0xe0 [ 1096.696311] ? __kmalloc_node_track_caller+0x4c/0x70 [ 1096.701461] ? __kmalloc_reserve.isra.0+0x35/0xd0 [ 1096.706296] ? __alloc_skb+0xca/0x4c0 [ 1096.710136] ? ndisc_alloc_skb+0x134/0x320 [ 1096.714360] ? ndisc_send_rs+0x2ea/0x630 [ 1096.718443] ? addrconf_rs_timer+0x289/0x5a0 [ 1096.722842] ? call_timer_fn+0x14a/0x650 [ 1096.726890] ? run_timer_softirq+0x52a/0x1390 [ 1096.731382] ? __do_softirq+0x254/0x9bf [ 1096.735409] ? irq_exit+0x15b/0x1a0 [ 1096.739029] ? smp_apic_timer_interrupt+0x141/0x5e0 [ 1096.744034] ? apic_timer_interrupt+0x8f/0xa0 [ 1096.748517] ? _raw_spin_unlock_irqrestore+0x91/0xe0 [ 1096.753609] ? try_to_wake_up+0x9a/0xef0 [ 1096.757664] ? wake_up_q+0x90/0xe0 [ 1096.761193] ? futex_wake+0x337/0x3d0 [ 1096.764981] ? do_futex+0x264/0x1850 [ 1096.768687] ? SyS_futex+0x1e8/0x2c0 [ 1096.772390] ? do_syscall_64+0x1d5/0x640 [ 1096.776440] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1096.781801] ? save_trace+0x290/0x290 [ 1096.785597] ? __lock_is_held+0xad/0x140 [ 1096.789657] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1096.795096] ? __kmalloc_node_track_caller+0x38/0x70 [ 1096.800189] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1096.805192] ? kmem_cache_alloc_node_trace+0x38c/0x7b0 [ 1096.810461] ? kasan_unpoison_shadow+0x30/0x40 [ 1096.815032] kasan_kmalloc+0xbf/0xe0 [ 1096.818741] __kmalloc_node_track_caller+0x4c/0x70 [ 1096.823664] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1096.828328] __alloc_skb+0xca/0x4c0 [ 1096.831947] ? skb_trim+0x160/0x160 [ 1096.835566] ? ipv6_get_ifaddr+0x302/0x520 [ 1096.839815] ? __local_bh_enable_ip+0x94/0x190 [ 1096.844390] ndisc_alloc_skb+0x134/0x320 [ 1096.848446] ndisc_send_rs+0x2ea/0x630 [ 1096.852327] addrconf_rs_timer+0x289/0x5a0 [ 1096.856554] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 1096.860784] call_timer_fn+0x14a/0x650 [ 1096.864661] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 1096.868922] ? __next_timer_interrupt+0x140/0x140 [ 1096.873757] ? _raw_spin_unlock_irq+0x24/0x80 [ 1096.878239] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 1096.882463] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 1096.886688] run_timer_softirq+0x52a/0x1390 [ 1096.891005] ? add_timer+0xa20/0xa20 [ 1096.894720] __do_softirq+0x254/0x9bf [ 1096.898518] ? check_preemption_disabled+0x35/0x240 [ 1096.903532] irq_exit+0x15b/0x1a0 [ 1096.906978] smp_apic_timer_interrupt+0x141/0x5e0 [ 1096.911811] apic_timer_interrupt+0x8f/0xa0 [ 1096.916118] [ 1096.918345] RIP: 0010:_raw_spin_unlock_irqrestore+0x91/0xe0 [ 1096.924039] RSP: 0018:ffff8881fdf4fa70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 1096.931741] RAX: 1ffffffff0fa2cd1 RBX: 0000000000000286 RCX: 0000000000000000 [ 1096.939003] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 1096.946289] RBP: ffff8880a4ce4bc8 R08: 0000000000000001 R09: 0000000000000000 [ 1096.953547] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a4ce4400 [ 1096.960826] R13: ffff8880a4ce4bc8 R14: 0000000000000001 R15: ffff8880aea2b558 [ 1096.968111] try_to_wake_up+0x9a/0xef0 [ 1096.972011] ? ___preempt_schedule+0x16/0x18 [ 1096.976424] ? migrate_swap_stop+0x920/0x920 [ 1096.980842] ? ___preempt_schedule+0x16/0x18 [ 1096.985244] wake_up_q+0x90/0xe0 [ 1096.988611] futex_wake+0x337/0x3d0 [ 1096.992234] ? get_futex_key+0x1160/0x1160 [ 1096.996470] ? lock_downgrade+0x6e0/0x6e0 [ 1097.000612] ? _raw_spin_unlock_irq+0x24/0x80 [ 1097.005100] do_futex+0x264/0x1850 [ 1097.008637] ? __schedule+0x7c0/0x1ca0 [ 1097.012519] ? futex_exit_release+0x60/0x60 [ 1097.016833] ? __sched_text_start+0x8/0x8 [ 1097.021069] ? __perf_event_init_context+0x210/0x210 [ 1097.028165] ? ___preempt_schedule+0x16/0x18 [ 1097.032563] ? preempt_schedule_common+0x4a/0xc0 [ 1097.037311] ? __perf_event_init_context+0x210/0x210 [ 1097.042409] ? ___preempt_schedule+0x16/0x18 [ 1097.046819] ? _raw_spin_unlock+0x3b/0x40 21:50:27 executing program 4: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x11, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2a9}, [{0x60000000}], "", [[], []]}, 0x278) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x210801) dup3(r3, 0xffffffffffffffff, 0x0) [ 1097.050965] SyS_futex+0x1e8/0x2c0 [ 1097.054502] ? selinux_file_fcntl+0xc4/0x120 [ 1097.058925] ? do_futex+0x1850/0x1850 [ 1097.062716] ? security_file_fcntl+0x83/0xb0 [ 1097.067178] ? fput+0xb/0x140 [ 1097.070279] ? do_syscall_64+0x4c/0x640 [ 1097.074262] ? do_futex+0x1850/0x1850 [ 1097.078076] do_syscall_64+0x1d5/0x640 [ 1097.081976] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1097.087170] RIP: 0033:0x7fe47ef7c469 [ 1097.090882] RSP: 002b:00007fe47f609e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1097.098602] RAX: ffffffffffffffda RBX: 00000000006ac0e8 RCX: 00007fe47ef7c469 [ 1097.105880] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00000000006ac0ec [ 1097.113157] RBP: 00000000006ac0e0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.120433] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ac0ec [ 1097.127707] R13: 00007ffef89b434f R14: 00007fe47f5ea000 R15: 0000000000000003 [ 1097.135006] rcu_bh kthread starved for 10472 jiffies! g18446744073709551399 c18446744073709551398 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 [ 1097.148031] rcu_bh R running task 30240 10 2 0x80000000 [ 1097.155240] Call Trace: [ 1097.157844] ? __schedule+0x7b8/0x1ca0 [ 1097.161747] ? __sched_text_start+0x8/0x8 [ 1097.165906] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 1097.171127] schedule+0x8d/0x1b0 [ 1097.174498] schedule_timeout+0x43c/0xe40 [ 1097.178656] ? usleep_range+0x130/0x130 [ 1097.182639] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1097.187727] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1097.192829] ? call_timer_fn+0x650/0x650 [ 1097.197152] rcu_gp_kthread+0xb8e/0x1ce0 [ 1097.201220] ? force_qs_rnp+0x4f0/0x4f0 [ 1097.205195] ? force_qs_rnp+0x4f0/0x4f0 [ 1097.209212] kthread+0x30d/0x420 [ 1097.212556] ? kthread_create_on_node+0xd0/0xd0 [ 1097.217219] ret_from_fork+0x24/0x30 [ 1097.221000] INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1097.227087] Tasks blocked on level-0 rcu_node (CPUs 0-1): P11959 [ 1097.233900] (detected by 0, t=10541 jiffies, g=35759, c=35758, q=736) [ 1097.240606] kworker/u4:13 R running task 26816 11959 2 0x80000000 [ 1097.247876] Workqueue: bat_events batadv_nc_worker [ 1097.252797] Call Trace: [ 1097.255388] ? __schedule+0x7b8/0x1ca0 [ 1097.259258] ? __sched_text_start+0x8/0x8 [ 1097.263398] ? mark_held_locks+0xa6/0xf0 [ 1097.267440] ? preempt_schedule_irq+0x88/0x140 [ 1097.272005] preempt_schedule_irq+0xb0/0x140 [ 1097.276396] retint_kernel+0x1b/0x2d [ 1097.280088] RIP: 0010:lock_acquire+0x1ec/0x3f0 [ 1097.284654] RSP: 0018:ffff88808eb0fc48 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 1097.292344] RAX: 1ffffffff0fa2cd1 RBX: ffff8880659861c0 RCX: 00000000a37ffd5b [ 1097.299867] RDX: dffffc0000000000 RSI: ffff888065986a98 RDI: 0000000000000286 [ 1097.307115] RBP: ffffffff87d84360 R08: 0000000000000000 R09: 0000000000020012 [ 1097.314382] R10: ffff888065986a98 R11: ffff8880659861c0 R12: 0000000000000000 [ 1097.321637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 1097.328933] batadv_nc_process_nc_paths.part.0+0xe3/0x350 [ 1097.334454] ? batadv_nc_process_nc_paths.part.0+0xa8/0x350 [ 1097.340159] ? batadv_nc_sniffed_purge+0x300/0x300 [ 1097.345085] batadv_nc_worker+0x4b3/0x6d0 [ 1097.349286] process_one_work+0x813/0x1540 [ 1097.353515] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1097.358176] ? worker_thread+0x15d/0x1070 [ 1097.362323] ? _raw_spin_unlock_irq+0x24/0x80 [ 1097.366821] worker_thread+0x5d1/0x1070 [ 1097.370789] ? process_one_work+0x1540/0x1540 [ 1097.375268] kthread+0x30d/0x420 [ 1097.378616] ? kthread_create_on_node+0xd0/0xd0 [ 1097.383266] ret_from_fork+0x24/0x30 [ 1097.386968] kworker/u4:13 R running task 26816 11959 2 0x80000000 [ 1097.394171] Workqueue: bat_events batadv_nc_worker [ 1097.399610] Call Trace: [ 1097.402182] ? __schedule+0x7b8/0x1ca0 [ 1097.406052] ? __sched_text_start+0x8/0x8 [ 1097.410176] ? mark_held_locks+0xa6/0xf0 [ 1097.414218] ? preempt_schedule_irq+0x88/0x140 [ 1097.418782] preempt_schedule_irq+0xb0/0x140 [ 1097.423167] retint_kernel+0x1b/0x2d [ 1097.426880] RIP: 0010:lock_acquire+0x1ec/0x3f0 [ 1097.431437] RSP: 0018:ffff88808eb0fc48 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 1097.439123] RAX: 1ffffffff0fa2cd1 RBX: ffff8880659861c0 RCX: 00000000a37ffd5b [ 1097.446369] RDX: dffffc0000000000 RSI: ffff888065986a98 RDI: 0000000000000286 [ 1097.453614] RBP: ffffffff87d84360 R08: 0000000000000000 R09: 0000000000020012 [ 1097.460870] R10: ffff888065986a98 R11: ffff8880659861c0 R12: 0000000000000000 [ 1097.468117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 1097.475391] batadv_nc_process_nc_paths.part.0+0xe3/0x350 [ 1097.480913] ? batadv_nc_process_nc_paths.part.0+0xa8/0x350 [ 1097.486599] ? batadv_nc_sniffed_purge+0x300/0x300 [ 1097.491512] batadv_nc_worker+0x4b3/0x6d0 [ 1097.495644] process_one_work+0x813/0x1540 [ 1097.499859] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1097.504503] ? worker_thread+0x15d/0x1070 [ 1097.508628] ? _raw_spin_unlock_irq+0x24/0x80 [ 1097.513119] worker_thread+0x5d1/0x1070 [ 1097.517094] ? process_one_work+0x1540/0x1540 [ 1097.521566] kthread+0x30d/0x420 [ 1097.524909] ? kthread_create_on_node+0xd0/0xd0 [ 1097.529555] ret_from_fork+0x24/0x30 [ 1097.533259] rcu_preempt kthread starved for 10539 jiffies! g35759 c35758 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=1 [ 1097.543905] rcu_preempt R running task 29488 8 2 0x80000000 [ 1097.551081] Call Trace: [ 1097.553648] ? __schedule+0x7b8/0x1ca0 [ 1097.557528] ? __sched_text_start+0x8/0x8 [ 1097.561655] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 1097.566749] schedule+0x8d/0x1b0 [ 1097.570104] schedule_timeout+0x43c/0xe40 [ 1097.574232] ? usleep_range+0x130/0x130 [ 1097.578184] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 1097.583179] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1097.588269] ? call_timer_fn+0x650/0x650 [ 1097.592317] rcu_gp_kthread+0xb8e/0x1ce0 [ 1097.596457] ? force_qs_rnp+0x4f0/0x4f0 2020/04/29 21:50:27 Manager.Poll call failed: connection is shut down [ 1097.600412] ? force_qs_rnp+0x4f0/0x4f0 [ 1097.604369] kthread+0x30d/0x420 [ 1097.607720] ? kthread_create_on_node+0xd0/0xd0 [ 1097.612454] ret_from_fork+0x24/0x30