00000000004c4806 R15: 000000000075bf2c [ 458.779895] Mem-Info: [ 458.782536] active_anon:501423 inactive_anon:584 isolated_anon:0 [ 458.782536] active_file:3795 inactive_file:6718 isolated_file:0 [ 458.782536] unevictable:0 dirty:17 writeback:0 unstable:0 [ 458.782536] slab_reclaimable:22063 slab_unreclaimable:159796 [ 458.782536] mapped:58387 shmem:637 pagetables:92751 bounce:0 [ 458.782536] free:668751 free_pcp:81 free_cma:0 [ 458.816503] Node 0 active_anon:1625916kB inactive_anon:1008kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1421312kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 458.844280] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.871239] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 458.876944] Node 0 DMA32 free:18164kB min:36380kB low:45472kB high:54564kB active_anon:1621560kB inactive_anon:1004kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18688kB pagetables:43024kB bounce:0kB free_pcp:324kB local_pcp:120kB free_cma:0kB [ 458.908509] lowmem_reserve[]: 0 0 0 0 0 [ 458.912571] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.938899] lowmem_reserve[]: 0 0 0 0 0 [ 458.943104] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 458.959918] Node 0 DMA32: 281*4kB (M) 62*8kB (UM) 26*16kB (ME) 504*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 458.973255] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 458.984358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 458.993365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 459.003304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.012306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 459.021080] 11161 total pagecache pages [ 459.025429] 0 pages in swap cache [ 459.028926] Swap cache stats: add 0, delete 0, find 0/0 [ 459.034853] Free swap = 0kB [ 459.037862] Total swap = 0kB [ 459.041008] 1965979 pages RAM [ 459.044116] 0 pages HighMem/MovableOnly [ 459.048110] 335868 pages reserved [ 459.051988] 0 pages cma reserved [ 459.055437] Out of memory: Kill process 8459 (syz-executor.2) score 1007 or sacrifice child [ 459.064217] Killed process 8459 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 459.076787] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 459.088296] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 459.093742] CPU: 0 PID: 24784 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 459.101638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.111242] Call Trace: [ 459.113834] dump_stack+0x142/0x197 [ 459.117455] warn_alloc.cold+0x96/0x1af [ 459.124991] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 459.130003] ? wait_for_completion+0x420/0x420 [ 459.135745] __alloc_pages_slowpath+0x23c6/0x2930 [ 459.141479] ? warn_alloc+0xf0/0xf0 [ 459.146688] ? __might_sleep+0x93/0xb0 [ 459.151641] __alloc_pages_nodemask+0x62c/0x7a0 [ 459.156398] ? lock_downgrade+0x740/0x740 [ 459.160556] ? __alloc_pages_slowpath+0x2930/0x2930 [ 459.165592] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 459.171660] alloc_pages_current+0xec/0x1e0 [ 459.176335] ion_page_pool_alloc+0x11f/0x1c0 [ 459.180819] ion_system_heap_allocate+0x138/0x910 [ 459.185721] ? ion_system_heap_free+0x250/0x250 [ 459.190400] ion_alloc+0x68c/0x860 [ 459.193951] ? ion_dma_buf_release+0x50/0x50 [ 459.198456] ? kasan_check_write+0x14/0x20 [ 459.203585] ? _copy_from_user+0x99/0x110 [ 459.207734] ion_ioctl+0x105/0x217 [ 459.211272] ? ion_alloc.cold+0x40/0x40 [ 459.215388] ? ion_alloc.cold+0x40/0x40 [ 459.219370] do_vfs_ioctl+0x7ae/0x1060 [ 459.223258] ? selinux_file_mprotect+0x5d0/0x5d0 [ 459.228022] ? lock_downgrade+0x740/0x740 [ 459.232283] ? ioctl_preallocate+0x1c0/0x1c0 [ 459.236689] ? __fget+0x237/0x370 [ 459.240293] ? security_file_ioctl+0x89/0xb0 [ 459.244704] SyS_ioctl+0x8f/0xc0 [ 459.248077] ? do_vfs_ioctl+0x1060/0x1060 [ 459.252490] do_syscall_64+0x1e8/0x640 [ 459.256365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.261216] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 459.266493] RIP: 0033:0x45b349 [ 459.269671] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.277536] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 459.284814] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 459.292089] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 459.299454] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 459.307258] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 459.315461] warn_alloc_show_mem: 1 callbacks suppressed [ 459.315465] Mem-Info: [ 459.323333] active_anon:500363 inactive_anon:584 isolated_anon:0 [ 459.323333] active_file:3794 inactive_file:6740 isolated_file:0 [ 459.323333] unevictable:0 dirty:34 writeback:0 unstable:0 [ 459.323333] slab_reclaimable:22064 slab_unreclaimable:159790 [ 459.323333] mapped:58387 shmem:637 pagetables:92735 bounce:0 [ 459.323333] free:669779 free_pcp:241 free_cma:0 [ 459.357846] Node 0 active_anon:1621676kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1415168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 459.386023] Node 1 active_anon:379776kB inactive_anon:1328kB active_file:15164kB inactive_file:26960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:140kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 459.414338] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.442409] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 459.447442] Node 0 DMA32 free:22308kB min:36380kB low:45472kB high:54564kB active_anon:1617320kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18656kB pagetables:42960kB bounce:0kB free_pcp:580kB local_pcp:120kB free_cma:0kB [ 459.478614] lowmem_reserve[]: 0 0 0 0 0 [ 459.482664] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.509202] lowmem_reserve[]: 0 0 0 0 0 [ 459.513334] Node 1 Normal free:2646436kB min:53508kB low:66884kB high:80260kB active_anon:379776kB inactive_anon:1328kB active_file:15164kB inactive_file:26960kB unevictable:0kB writepending:140kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:98624kB pagetables:327740kB bounce:0kB free_pcp:500kB local_pcp:228kB free_cma:0kB [ 459.544130] lowmem_reserve[]: 0 0 0 0 0 [ 459.548134] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 459.563721] Node 0 DMA32: 281*4kB (M) 64*8kB (UM) 26*16kB (ME) 505*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22308kB [ 459.577801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 459.588647] Node 1 Normal: 15*4kB (UM) 153*8kB (UM) 70*16kB (UM) 107*32kB (UM) 38*64kB (UME) 11*128kB (UM) 4*256kB (U) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 642*4096kB (M) = 2646468kB [ 459.606091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.614988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 459.623642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.632634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 459.641260] 11178 total pagecache pages [ 459.645589] 0 pages in swap cache [ 459.649129] Swap cache stats: add 0, delete 0, find 0/0 [ 459.655442] Free swap = 0kB [ 459.658643] Total swap = 0kB [ 459.661779] 1965979 pages RAM [ 459.664892] 0 pages HighMem/MovableOnly 22:03:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x4}) [ 459.669129] 335868 pages reserved [ 459.672668] 0 pages cma reserved [ 459.725170] audit: type=1804 audit(1580076213.516:1811): pid=24826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/545/file0" dev="sda1" ino=20169 res=1 22:03:33 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:33 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 460.055422] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 460.076981] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 460.096803] CPU: 1 PID: 24846 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 460.105124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.114510] Call Trace: [ 460.117232] dump_stack+0x142/0x197 [ 460.120877] warn_alloc.cold+0x96/0x1af [ 460.124873] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 460.129741] ? __alloc_pages_direct_compact+0xbc/0x380 [ 460.135040] __alloc_pages_slowpath+0x23c6/0x2930 [ 460.139902] ? save_trace+0x290/0x290 [ 460.143747] ? warn_alloc+0xf0/0xf0 [ 460.147416] ? __might_sleep+0x93/0xb0 [ 460.151327] __alloc_pages_nodemask+0x62c/0x7a0 [ 460.156008] ? lock_downgrade+0x740/0x740 [ 460.160336] ? __alloc_pages_slowpath+0x2930/0x2930 [ 460.165389] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 460.171032] alloc_pages_current+0xec/0x1e0 [ 460.175813] ion_page_pool_alloc+0x11f/0x1c0 [ 460.180337] ion_system_heap_allocate+0x138/0x910 [ 460.185378] ? ion_alloc+0x19b/0x860 [ 460.189100] ? rcu_read_lock_sched_held+0x110/0x130 [ 460.194569] ? ion_system_heap_free+0x250/0x250 [ 460.199254] ion_alloc+0x222/0x860 [ 460.203073] ? ion_dma_buf_release+0x50/0x50 [ 460.207601] ? kasan_check_write+0x14/0x20 [ 460.211850] ? _copy_from_user+0x99/0x110 [ 460.216015] ion_ioctl+0x105/0x217 [ 460.219658] ? ion_alloc.cold+0x40/0x40 [ 460.223656] ? ion_alloc.cold+0x40/0x40 [ 460.227644] do_vfs_ioctl+0x7ae/0x1060 [ 460.232377] ? selinux_file_mprotect+0x5d0/0x5d0 [ 460.237265] ? lock_downgrade+0x740/0x740 [ 460.241529] ? ioctl_preallocate+0x1c0/0x1c0 [ 460.246565] ? __fget+0x237/0x370 [ 460.250140] ? security_file_ioctl+0x89/0xb0 [ 460.251540] audit: type=1804 audit(1580076214.046:1812): pid=24859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/546/file0" dev="sda1" ino=20773 res=1 [ 460.255138] SyS_ioctl+0x8f/0xc0 [ 460.255148] ? do_vfs_ioctl+0x1060/0x1060 [ 460.255162] do_syscall_64+0x1e8/0x640 [ 460.255172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.255188] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 460.255200] RIP: 0033:0x45b349 22:03:34 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 460.311035] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.319979] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 460.327608] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 460.335008] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 460.342427] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 460.349960] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c 22:03:34 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 460.438558] Mem-Info: [ 460.441184] active_anon:500707 inactive_anon:585 isolated_anon:0 [ 460.441184] active_file:3818 inactive_file:6727 isolated_file:0 [ 460.441184] unevictable:0 dirty:133 writeback:0 unstable:0 [ 460.441184] slab_reclaimable:22065 slab_unreclaimable:159888 [ 460.441184] mapped:58402 shmem:637 pagetables:93051 bounce:0 [ 460.441184] free:672955 free_pcp:67 free_cma:0 [ 460.529416] Node 0 active_anon:1621676kB inactive_anon:1008kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1415168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 460.563685] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 22:03:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 460.668919] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 460.688345] Node 0 DMA32 free:38456kB min:36380kB low:45472kB high:54564kB active_anon:1617320kB inactive_anon:1004kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18656kB pagetables:42960kB bounce:0kB free_pcp:264kB local_pcp:116kB free_cma:0kB 22:03:34 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 461.035470] lowmem_reserve[]: 0 0 0 0 0 [ 461.054592] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.119979] audit: type=1804 audit(1580076214.916:1813): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/547/file0" dev="sda1" ino=20184 res=1 [ 461.208062] lowmem_reserve[]: 0 0 0 0 0 [ 461.245529] Node 0 DMA: 4*4kB (UME) 4*8kB (UE) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 461.355933] Node 0 DMA32: 1195*4kB (UM) 96*8kB (UM) 876*16kB (UME) 531*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36556kB [ 461.406614] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 461.422674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.433360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.445958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.456973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.468629] 11192 total pagecache pages [ 461.474717] 0 pages in swap cache [ 461.478582] Swap cache stats: add 0, delete 0, find 0/0 [ 461.487004] Free swap = 0kB [ 461.491452] Total swap = 0kB [ 461.494489] 1965979 pages RAM [ 461.497592] 0 pages HighMem/MovableOnly [ 461.504999] 335868 pages reserved [ 461.511149] 0 pages cma reserved [ 461.525408] oom_reaper: reaped process 24846 (syz-executor.0), now anon-rss:0kB, file-rss:16kB, shmem-rss:0kB [ 461.679083] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 461.692720] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 461.698470] CPU: 1 PID: 24846 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 461.706564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.716011] Call Trace: [ 461.718778] dump_stack+0x142/0x197 [ 461.722434] dump_header+0x177/0x6cd [ 461.726157] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 461.731278] ? ___ratelimit+0x55/0x537 [ 461.735173] oom_kill_process.cold+0x10/0xadd [ 461.739680] ? oom_unkillable_task+0x294/0x390 [ 461.744313] ? lock_downgrade+0x740/0x740 [ 461.748713] out_of_memory+0x2ee/0x1180 [ 461.752701] ? lock_acquire+0x16f/0x430 [ 461.756791] ? oom_killer_disable+0x1d0/0x1d0 [ 461.761291] ? __alloc_pages_slowpath+0xca4/0x2930 [ 461.766218] __alloc_pages_slowpath+0x2251/0x2930 [ 461.771119] ? warn_alloc+0xf0/0xf0 [ 461.774790] ? __might_sleep+0x93/0xb0 [ 461.778673] __alloc_pages_nodemask+0x62c/0x7a0 [ 461.783765] ? lock_downgrade+0x740/0x740 [ 461.787996] ? __alloc_pages_slowpath+0x2930/0x2930 [ 461.793033] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 461.798669] alloc_pages_current+0xec/0x1e0 [ 461.802996] ion_page_pool_alloc+0x11f/0x1c0 [ 461.807421] ion_system_heap_allocate+0x138/0x910 [ 461.812703] ? ion_alloc+0x19b/0x860 [ 461.816553] ? rcu_read_lock_sched_held+0x110/0x130 [ 461.821669] ? ion_system_heap_free+0x250/0x250 [ 461.826353] ion_alloc+0x222/0x860 [ 461.829887] ? ion_dma_buf_release+0x50/0x50 [ 461.834307] ? kasan_check_write+0x14/0x20 [ 461.838547] ? _copy_from_user+0x99/0x110 [ 461.842785] ion_ioctl+0x105/0x217 [ 461.846336] ? ion_alloc.cold+0x40/0x40 [ 461.850313] ? ion_alloc.cold+0x40/0x40 [ 461.854289] do_vfs_ioctl+0x7ae/0x1060 [ 461.858371] ? selinux_file_mprotect+0x5d0/0x5d0 [ 461.863240] ? lock_downgrade+0x740/0x740 [ 461.867393] ? ioctl_preallocate+0x1c0/0x1c0 [ 461.871810] ? __fget+0x237/0x370 [ 461.875268] ? security_file_ioctl+0x89/0xb0 [ 461.879712] SyS_ioctl+0x8f/0xc0 [ 461.884205] ? do_vfs_ioctl+0x1060/0x1060 [ 461.888356] do_syscall_64+0x1e8/0x640 [ 461.892251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.897106] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 461.902293] RIP: 0033:0x45b349 [ 461.905470] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.913359] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 461.920634] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 461.928321] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 461.935653] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 461.942918] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 461.952105] Mem-Info: [ 461.954557] active_anon:500946 inactive_anon:584 isolated_anon:0 [ 461.954557] active_file:3830 inactive_file:6730 isolated_file:0 [ 461.954557] unevictable:0 dirty:0 writeback:0 unstable:0 [ 461.954557] slab_reclaimable:22115 slab_unreclaimable:159864 [ 461.954557] mapped:58387 shmem:637 pagetables:93231 bounce:0 [ 461.954557] free:667907 free_pcp:60 free_cma:0 [ 461.993102] Node 0 active_anon:1621676kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1415168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 462.022273] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.051347] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 462.056675] Node 0 DMA32 free:18064kB min:36380kB low:45472kB high:54564kB active_anon:1617320kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18656kB pagetables:42960kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 462.086361] lowmem_reserve[]: 0 0 0 0 0 [ 462.091154] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.117682] lowmem_reserve[]: 0 0 0 0 0 [ 462.121816] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 462.139647] Node 0 DMA32: 308*4kB (ME) 67*8kB (UME) 43*16kB (ME) 488*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18072kB [ 462.156066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.168901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.178327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 462.187069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.198097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 462.207393] 11199 total pagecache pages [ 462.212125] 0 pages in swap cache [ 462.215779] Swap cache stats: add 0, delete 0, find 0/0 [ 462.221704] Free swap = 0kB [ 462.224903] Total swap = 0kB [ 462.228344] 1965979 pages RAM [ 462.232164] 0 pages HighMem/MovableOnly [ 462.236654] 335868 pages reserved [ 462.240945] 0 pages cma reserved [ 462.244414] Out of memory: Kill process 8713 (syz-executor.2) score 1007 or sacrifice child [ 462.253684] Killed process 8716 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34688kB, shmem-rss:0kB [ 462.265786] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 462.276228] oom_reaper: reaped process 8716 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 462.277287] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 462.292693] CPU: 1 PID: 24846 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 462.300585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.310135] Call Trace: [ 462.312740] dump_stack+0x142/0x197 [ 462.316369] warn_alloc.cold+0x96/0x1af [ 462.320343] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 462.325199] ? wait_for_completion+0x420/0x420 [ 462.329783] __alloc_pages_slowpath+0x23c6/0x2930 [ 462.334642] ? warn_alloc+0xf0/0xf0 [ 462.338273] ? __might_sleep+0x93/0xb0 [ 462.342162] __alloc_pages_nodemask+0x62c/0x7a0 [ 462.346953] ? lock_downgrade+0x740/0x740 [ 462.351230] ? __alloc_pages_slowpath+0x2930/0x2930 [ 462.356299] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 462.361941] alloc_pages_current+0xec/0x1e0 [ 462.366263] ion_page_pool_alloc+0x11f/0x1c0 [ 462.370684] ion_system_heap_allocate+0x138/0x910 [ 462.375538] ? ion_alloc+0x19b/0x860 [ 462.379409] ? rcu_read_lock_sched_held+0x110/0x130 [ 462.384431] ? ion_system_heap_free+0x250/0x250 [ 462.389243] ion_alloc+0x222/0x860 [ 462.392805] ? ion_dma_buf_release+0x50/0x50 [ 462.397291] ? kasan_check_write+0x14/0x20 [ 462.401541] ? _copy_from_user+0x99/0x110 [ 462.405754] ion_ioctl+0x105/0x217 [ 462.409288] ? ion_alloc.cold+0x40/0x40 [ 462.413268] ? ion_alloc.cold+0x40/0x40 [ 462.417271] do_vfs_ioctl+0x7ae/0x1060 [ 462.421179] ? selinux_file_mprotect+0x5d0/0x5d0 [ 462.425946] ? lock_downgrade+0x740/0x740 [ 462.430268] ? ioctl_preallocate+0x1c0/0x1c0 [ 462.434870] ? __fget+0x237/0x370 [ 462.438447] ? security_file_ioctl+0x89/0xb0 [ 462.442970] SyS_ioctl+0x8f/0xc0 [ 462.446335] ? do_vfs_ioctl+0x1060/0x1060 [ 462.450491] do_syscall_64+0x1e8/0x640 [ 462.454436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.459278] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 462.464461] RIP: 0033:0x45b349 [ 462.467646] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.475616] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 462.483009] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 462.490462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 462.497735] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 462.505211] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 462.513156] Mem-Info: [ 462.515614] active_anon:500420 inactive_anon:584 isolated_anon:0 [ 462.515614] active_file:3830 inactive_file:6730 isolated_file:0 [ 462.515614] unevictable:0 dirty:8 writeback:0 unstable:0 [ 462.515614] slab_reclaimable:22115 slab_unreclaimable:159864 [ 462.515614] mapped:58387 shmem:637 pagetables:93194 bounce:0 [ 462.515614] free:668421 free_pcp:215 free_cma:0 [ 462.549559] Node 0 active_anon:1619572kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1415168kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 462.577673] Node 1 active_anon:382108kB inactive_anon:1328kB active_file:15308kB inactive_file:26920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:24kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 462.605916] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.632912] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 462.638166] Node 0 DMA32 free:20120kB min:36380kB low:45472kB high:54564kB active_anon:1615216kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18624kB pagetables:42812kB bounce:0kB free_pcp:432kB local_pcp:120kB free_cma:0kB [ 462.667462] lowmem_reserve[]: 0 0 0 0 0 [ 462.671527] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.697280] lowmem_reserve[]: 0 0 0 0 0 [ 462.701361] Node 1 Normal free:2643192kB min:53508kB low:66884kB high:80260kB active_anon:382108kB inactive_anon:1328kB active_file:15308kB inactive_file:26920kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:99232kB pagetables:329724kB bounce:0kB free_pcp:536kB local_pcp:352kB free_cma:0kB [ 462.732229] lowmem_reserve[]: 0 0 0 0 0 [ 462.736286] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 462.752126] Node 0 DMA32: 308*4kB (ME) 107*8kB (UME) 44*16kB (UME) 489*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20488kB [ 462.766113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.776908] Node 1 Normal: 2*4kB (UM) 60*8kB (UME) 44*16kB (UM) 98*32kB (U) 45*64kB (UE) 15*128kB (U) 4*256kB (U) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 641*4096kB (M) = 2643880kB [ 462.793458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.802339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 462.810974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.820360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 462.828941] 11199 total pagecache pages [ 462.832983] 0 pages in swap cache [ 462.836440] Swap cache stats: add 0, delete 0, find 0/0 [ 462.841879] Free swap = 0kB [ 462.844991] Total swap = 0kB [ 462.848103] 1965979 pages RAM [ 462.851379] 0 pages HighMem/MovableOnly [ 462.855352] 335868 pages reserved [ 462.858796] 0 pages cma reserved [ 462.880325] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 462.891977] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 462.897362] CPU: 1 PID: 24846 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 462.905238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.914804] Call Trace: [ 462.917411] dump_stack+0x142/0x197 [ 462.921208] warn_alloc.cold+0x96/0x1af [ 462.925377] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 462.930234] ? __alloc_pages_direct_compact+0xbc/0x380 [ 462.935521] __alloc_pages_slowpath+0x23c6/0x2930 [ 462.940382] ? save_trace+0x290/0x290 [ 462.944197] ? warn_alloc+0xf0/0xf0 [ 462.947840] ? __might_sleep+0x93/0xb0 [ 462.951734] __alloc_pages_nodemask+0x62c/0x7a0 [ 462.956410] ? lock_downgrade+0x740/0x740 [ 462.960688] ? __alloc_pages_slowpath+0x2930/0x2930 [ 462.965818] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 462.971703] alloc_pages_current+0xec/0x1e0 [ 462.976117] ion_page_pool_alloc+0x11f/0x1c0 [ 462.980534] ion_system_heap_allocate+0x138/0x910 [ 462.985399] ? ion_system_heap_free+0x250/0x250 [ 462.990088] ion_alloc+0x68c/0x860 [ 462.993636] ? ion_dma_buf_release+0x50/0x50 [ 462.998248] ? kasan_check_write+0x14/0x20 [ 463.002496] ? _copy_from_user+0x99/0x110 [ 463.006645] ion_ioctl+0x105/0x217 [ 463.010185] ? ion_alloc.cold+0x40/0x40 [ 463.014171] ? ion_alloc.cold+0x40/0x40 [ 463.018136] do_vfs_ioctl+0x7ae/0x1060 [ 463.022021] ? selinux_file_mprotect+0x5d0/0x5d0 [ 463.026776] ? lock_downgrade+0x740/0x740 [ 463.031065] ? ioctl_preallocate+0x1c0/0x1c0 [ 463.035767] ? __fget+0x237/0x370 [ 463.039214] ? security_file_ioctl+0x89/0xb0 [ 463.043623] SyS_ioctl+0x8f/0xc0 [ 463.046991] ? do_vfs_ioctl+0x1060/0x1060 [ 463.051144] do_syscall_64+0x1e8/0x640 [ 463.055031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.059921] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 463.065129] RIP: 0033:0x45b349 [ 463.068317] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.076086] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 463.083620] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 463.090905] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 463.098196] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 463.105628] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 463.587852] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 463.601507] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 463.606913] CPU: 0 PID: 24846 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 463.614913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.624286] Call Trace: [ 463.626872] dump_stack+0x142/0x197 [ 463.630514] dump_header+0x177/0x6cd [ 463.634251] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 463.639357] ? ___ratelimit+0x55/0x537 [ 463.643404] oom_kill_process.cold+0x10/0xadd [ 463.647892] ? oom_unkillable_task+0x294/0x390 [ 463.652489] ? lock_downgrade+0x740/0x740 [ 463.656642] out_of_memory+0x2ee/0x1180 [ 463.660618] ? lock_acquire+0x16f/0x430 [ 463.664725] ? __lock_is_held+0xb6/0x140 [ 463.668954] ? oom_killer_disable+0x1d0/0x1d0 [ 463.673437] ? __alloc_pages_slowpath+0xca4/0x2930 [ 463.678379] __alloc_pages_slowpath+0x2251/0x2930 [ 463.683230] ? warn_alloc+0xf0/0xf0 [ 463.686866] ? __might_sleep+0x93/0xb0 [ 463.690870] __alloc_pages_nodemask+0x62c/0x7a0 [ 463.695555] ? lock_downgrade+0x740/0x740 [ 463.699834] ? __alloc_pages_slowpath+0x2930/0x2930 [ 463.704881] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 463.710626] alloc_pages_current+0xec/0x1e0 [ 463.714968] ion_page_pool_alloc+0x11f/0x1c0 [ 463.719389] ion_system_heap_allocate+0x138/0x910 [ 463.727112] ? ion_system_heap_free+0x250/0x250 [ 463.731787] ion_alloc+0x68c/0x860 [ 463.735408] ? ion_dma_buf_release+0x50/0x50 [ 463.740153] ? kasan_check_write+0x14/0x20 [ 463.744411] ? _copy_from_user+0x99/0x110 [ 463.748553] ion_ioctl+0x105/0x217 [ 463.752091] ? ion_alloc.cold+0x40/0x40 [ 463.756074] ? ion_alloc.cold+0x40/0x40 [ 463.760045] do_vfs_ioctl+0x7ae/0x1060 [ 463.763943] ? selinux_file_mprotect+0x5d0/0x5d0 [ 463.768697] ? lock_downgrade+0x740/0x740 [ 463.772849] ? ioctl_preallocate+0x1c0/0x1c0 [ 463.777389] ? __fget+0x237/0x370 [ 463.780865] ? security_file_ioctl+0x89/0xb0 [ 463.785299] SyS_ioctl+0x8f/0xc0 [ 463.788762] ? do_vfs_ioctl+0x1060/0x1060 [ 463.793013] do_syscall_64+0x1e8/0x640 [ 463.796962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.801803] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 463.807032] RIP: 0033:0x45b349 [ 463.810214] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.818061] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 463.825330] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 463.832603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 463.839885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 463.847282] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 463.855507] Mem-Info: [ 463.857954] active_anon:500415 inactive_anon:584 isolated_anon:0 [ 463.857954] active_file:3829 inactive_file:6746 isolated_file:0 [ 463.857954] unevictable:0 dirty:0 writeback:0 unstable:0 [ 463.857954] slab_reclaimable:22114 slab_unreclaimable:159629 [ 463.857954] mapped:58387 shmem:637 pagetables:93205 bounce:0 [ 463.857954] free:668072 free_pcp:78 free_cma:0 [ 463.891902] Node 0 active_anon:1619552kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1413120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 463.920080] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.947147] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 463.952235] Node 0 DMA32 free:18132kB min:36380kB low:45472kB high:54564kB active_anon:1615196kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18624kB pagetables:42856kB bounce:0kB free_pcp:308kB local_pcp:196kB free_cma:0kB [ 463.981889] lowmem_reserve[]: 0 0 0 0 0 [ 463.986021] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.011643] lowmem_reserve[]: 0 0 0 0 0 [ 464.015644] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 464.031630] Node 0 DMA32: 309*4kB (UME) 66*8kB (UME) 43*16kB (ME) 490*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18132kB [ 464.045367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 464.056196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.065368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 464.074031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.083518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 464.092338] 11217 total pagecache pages [ 464.096316] 0 pages in swap cache [ 464.099752] Swap cache stats: add 0, delete 0, find 0/0 [ 464.105159] Free swap = 0kB [ 464.108176] Total swap = 0kB [ 464.111893] 1965979 pages RAM [ 464.114996] 0 pages HighMem/MovableOnly [ 464.118999] 335868 pages reserved [ 464.122563] 0 pages cma reserved [ 464.126125] Out of memory: Kill process 8713 (syz-executor.2) score 1007 or sacrifice child [ 464.134864] Killed process 8713 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 464.147048] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 464.158569] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 464.164259] CPU: 0 PID: 24846 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 464.172332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.181766] Call Trace: [ 464.184364] dump_stack+0x142/0x197 [ 464.188248] warn_alloc.cold+0x96/0x1af [ 464.192233] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 464.197103] ? wait_for_completion+0x420/0x420 [ 464.201690] __alloc_pages_slowpath+0x23c6/0x2930 [ 464.206540] ? warn_alloc+0xf0/0xf0 [ 464.210185] ? __might_sleep+0x93/0xb0 [ 464.214145] __alloc_pages_nodemask+0x62c/0x7a0 [ 464.218997] ? lock_downgrade+0x740/0x740 [ 464.223174] ? __alloc_pages_slowpath+0x2930/0x2930 [ 464.228254] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 464.233924] alloc_pages_current+0xec/0x1e0 [ 464.238590] ion_page_pool_alloc+0x11f/0x1c0 [ 464.243001] ion_system_heap_allocate+0x138/0x910 [ 464.247936] ? ion_system_heap_free+0x250/0x250 [ 464.252870] ion_alloc+0x68c/0x860 [ 464.256424] ? ion_dma_buf_release+0x50/0x50 [ 464.260842] ? kasan_check_write+0x14/0x20 [ 464.265232] ? _copy_from_user+0x99/0x110 [ 464.269861] ion_ioctl+0x105/0x217 [ 464.273427] ? ion_alloc.cold+0x40/0x40 [ 464.277467] ? ion_alloc.cold+0x40/0x40 [ 464.281462] do_vfs_ioctl+0x7ae/0x1060 [ 464.285483] ? selinux_file_mprotect+0x5d0/0x5d0 [ 464.290255] ? lock_downgrade+0x740/0x740 [ 464.294493] ? ioctl_preallocate+0x1c0/0x1c0 [ 464.298910] ? __fget+0x237/0x370 [ 464.302365] ? security_file_ioctl+0x89/0xb0 [ 464.306767] SyS_ioctl+0x8f/0xc0 [ 464.310129] ? do_vfs_ioctl+0x1060/0x1060 [ 464.314290] do_syscall_64+0x1e8/0x640 [ 464.318189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.323150] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 464.328390] RIP: 0033:0x45b349 [ 464.331580] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.339301] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 464.346851] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 464.354116] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 464.361555] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 464.368975] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 464.377257] warn_alloc_show_mem: 1 callbacks suppressed [ 464.377261] Mem-Info: [ 464.385113] active_anon:499367 inactive_anon:584 isolated_anon:0 [ 464.385113] active_file:3830 inactive_file:6745 isolated_file:0 [ 464.385113] unevictable:0 dirty:11 writeback:0 unstable:0 [ 464.385113] slab_reclaimable:22115 slab_unreclaimable:159630 [ 464.385113] mapped:58387 shmem:637 pagetables:93168 bounce:0 [ 464.385113] free:669104 free_pcp:233 free_cma:0 [ 464.420174] Node 0 active_anon:1615360kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1413120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 464.451908] Node 1 active_anon:381608kB inactive_anon:1328kB active_file:15308kB inactive_file:26980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24744kB dirty:36kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 464.479833] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.507247] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 464.512621] Node 0 DMA32 free:22228kB min:36380kB low:45472kB high:54564kB active_anon:1611004kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18592kB pagetables:42708kB bounce:0kB free_pcp:572kB local_pcp:204kB free_cma:0kB [ 464.542260] lowmem_reserve[]: 0 0 0 0 0 [ 464.546271] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.571924] lowmem_reserve[]: 0 0 0 0 0 [ 464.575942] Node 1 Normal free:2643816kB min:53508kB low:66884kB high:80260kB active_anon:381608kB inactive_anon:1328kB active_file:15308kB inactive_file:26980kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:99168kB pagetables:329724kB bounce:0kB free_pcp:1268kB local_pcp:568kB free_cma:0kB [ 464.606736] lowmem_reserve[]: 0 0 0 0 0 [ 464.610803] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 464.626602] Node 0 DMA32: 309*4kB (UME) 66*8kB (UME) 43*16kB (ME) 491*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22260kB [ 464.641203] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 464.652030] Node 1 Normal: 2*4kB (UM) 60*8kB (UME) 38*16kB (UM) 101*32kB (U) 45*64kB (UE) 15*128kB (U) 4*256kB (U) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 641*4096kB (M) = 2643880kB [ 464.668672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.677581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:03:38 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:03:38 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:38 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 464.686594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.695512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 464.704131] 11217 total pagecache pages [ 464.708105] 0 pages in swap cache [ 464.711629] Swap cache stats: add 0, delete 0, find 0/0 [ 464.717127] Free swap = 0kB [ 464.720203] Total swap = 0kB [ 464.723218] 1965979 pages RAM [ 464.726314] 0 pages HighMem/MovableOnly [ 464.730337] 335868 pages reserved [ 464.733786] 0 pages cma reserved [ 464.799560] audit: type=1804 audit(1580076218.596:1814): pid=24924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/548/file0" dev="sda1" ino=20756 res=1 22:03:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:38 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:38 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 465.216266] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 465.245956] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 465.277662] CPU: 1 PID: 24939 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 465.285724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.295198] Call Trace: [ 465.297799] dump_stack+0x142/0x197 [ 465.301558] warn_alloc.cold+0x96/0x1af [ 465.305560] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 465.310427] ? __alloc_pages_direct_compact+0xbc/0x380 [ 465.315850] __alloc_pages_slowpath+0x23c6/0x2930 [ 465.320719] ? save_trace+0x290/0x290 [ 465.324648] ? warn_alloc+0xf0/0xf0 [ 465.328303] ? __might_sleep+0x93/0xb0 [ 465.332214] __alloc_pages_nodemask+0x62c/0x7a0 [ 465.336893] ? lock_downgrade+0x740/0x740 [ 465.341521] ? __alloc_pages_slowpath+0x2930/0x2930 [ 465.346557] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 465.352306] alloc_pages_current+0xec/0x1e0 [ 465.356649] ion_page_pool_alloc+0x11f/0x1c0 [ 465.361211] ion_system_heap_allocate+0x138/0x910 [ 465.366067] ? ion_alloc+0x19b/0x860 [ 465.369803] ? rcu_read_lock_sched_held+0x110/0x130 [ 465.374848] ? ion_system_heap_free+0x250/0x250 [ 465.379545] ion_alloc+0x222/0x860 [ 465.383118] ? ion_dma_buf_release+0x50/0x50 [ 465.387546] ? kasan_check_write+0x14/0x20 [ 465.391806] ? _copy_from_user+0x99/0x110 [ 465.395974] ion_ioctl+0x105/0x217 [ 465.399647] ? ion_alloc.cold+0x40/0x40 [ 465.403766] ? ion_alloc.cold+0x40/0x40 [ 465.407749] do_vfs_ioctl+0x7ae/0x1060 [ 465.411671] ? selinux_file_mprotect+0x5d0/0x5d0 [ 465.416445] ? lock_downgrade+0x740/0x740 [ 465.420609] ? ioctl_preallocate+0x1c0/0x1c0 [ 465.425044] ? __fget+0x237/0x370 [ 465.428529] ? security_file_ioctl+0x89/0xb0 [ 465.433096] SyS_ioctl+0x8f/0xc0 [ 465.436475] ? do_vfs_ioctl+0x1060/0x1060 [ 465.440644] do_syscall_64+0x1e8/0x640 [ 465.444547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.449429] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 465.454660] RIP: 0033:0x45b349 [ 465.457999] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.465722] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 465.473111] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 465.480740] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 465.488110] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 465.495401] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c 22:03:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 465.603578] audit: type=1804 audit(1580076219.406:1815): pid=24957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/549/file0" dev="sda1" ino=20853 res=1 [ 465.919080] Mem-Info: [ 465.922876] active_anon:499580 inactive_anon:581 isolated_anon:0 [ 465.922876] active_file:3850 inactive_file:6743 isolated_file:0 [ 465.922876] unevictable:0 dirty:70 writeback:0 unstable:0 [ 465.922876] slab_reclaimable:22147 slab_unreclaimable:159906 [ 465.922876] mapped:58427 shmem:637 pagetables:93431 bounce:0 [ 465.922876] free:671502 free_pcp:224 free_cma:0 [ 466.025259] Node 0 active_anon:1615324kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1409024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 466.057418] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.085952] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 466.092089] Node 0 DMA32 free:36556kB min:36380kB low:45472kB high:54564kB active_anon:1610968kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18592kB pagetables:42748kB bounce:0kB free_pcp:892kB local_pcp:236kB free_cma:0kB [ 466.122097] lowmem_reserve[]: 0 0 0 0 0 [ 466.126591] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.155563] lowmem_reserve[]: 0 0 0 0 0 [ 466.159593] Node 0 DMA: 4*4kB (UME) 4*8kB (UE) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 466.175674] Node 0 DMA32: 1243*4kB (UME) 78*8kB (UME) 899*16kB (UM) 518*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36556kB [ 466.190416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.201407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.210430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.219164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.228088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.236905] 11241 total pagecache pages [ 466.240940] 0 pages in swap cache [ 466.244500] Swap cache stats: add 0, delete 0, find 0/0 [ 466.249952] Free swap = 0kB [ 466.253040] Total swap = 0kB [ 466.256058] 1965979 pages RAM [ 466.259272] 0 pages HighMem/MovableOnly [ 466.263300] 335868 pages reserved [ 466.266755] 0 pages cma reserved [ 466.284038] oom_reaper: reaped process 24939 (syz-executor.0), now anon-rss:0kB, file-rss:16kB, shmem-rss:0kB [ 466.436747] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 466.450803] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 466.456206] CPU: 0 PID: 24939 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 466.464204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.473667] Call Trace: [ 466.476283] dump_stack+0x142/0x197 [ 466.479981] dump_header+0x177/0x6cd [ 466.483945] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 466.489057] ? ___ratelimit+0x55/0x537 [ 466.492948] oom_kill_process.cold+0x10/0xadd [ 466.497522] ? oom_unkillable_task+0x294/0x390 [ 466.502105] ? lock_downgrade+0x740/0x740 [ 466.506358] out_of_memory+0x2ee/0x1180 [ 466.510345] ? lock_acquire+0x16f/0x430 [ 466.514324] ? oom_killer_disable+0x1d0/0x1d0 [ 466.518827] ? __alloc_pages_slowpath+0xca4/0x2930 [ 466.523921] __alloc_pages_slowpath+0x2251/0x2930 [ 466.529298] ? warn_alloc+0xf0/0xf0 [ 466.532942] ? __might_sleep+0x93/0xb0 [ 466.536835] __alloc_pages_nodemask+0x62c/0x7a0 [ 466.541535] ? lock_downgrade+0x740/0x740 [ 466.545699] ? __alloc_pages_slowpath+0x2930/0x2930 [ 466.550732] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 466.556461] alloc_pages_current+0xec/0x1e0 [ 466.560797] ion_page_pool_alloc+0x11f/0x1c0 [ 466.565213] ion_system_heap_allocate+0x138/0x910 [ 466.570076] ? ion_alloc+0x19b/0x860 [ 466.573794] ? rcu_read_lock_sched_held+0x110/0x130 [ 466.578813] ? ion_system_heap_free+0x250/0x250 [ 466.583504] ion_alloc+0x222/0x860 [ 466.587140] ? ion_dma_buf_release+0x50/0x50 [ 466.591558] ? kasan_check_write+0x14/0x20 [ 466.595805] ? _copy_from_user+0x99/0x110 [ 466.599957] ion_ioctl+0x105/0x217 [ 466.603493] ? ion_alloc.cold+0x40/0x40 [ 466.607476] ? ion_alloc.cold+0x40/0x40 [ 466.611468] do_vfs_ioctl+0x7ae/0x1060 [ 466.615469] ? selinux_file_mprotect+0x5d0/0x5d0 [ 466.620223] ? lock_downgrade+0x740/0x740 [ 466.624400] ? ioctl_preallocate+0x1c0/0x1c0 [ 466.628818] ? __fget+0x237/0x370 [ 466.632290] ? security_file_ioctl+0x89/0xb0 [ 466.636923] SyS_ioctl+0x8f/0xc0 [ 466.640298] ? do_vfs_ioctl+0x1060/0x1060 [ 466.644455] do_syscall_64+0x1e8/0x640 [ 466.648340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.653201] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 466.658528] RIP: 0033:0x45b349 [ 466.661722] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.669441] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 466.676851] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 466.684129] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 466.691524] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 466.698842] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 466.708522] Mem-Info: [ 466.711063] active_anon:499540 inactive_anon:584 isolated_anon:0 [ 466.711063] active_file:3856 inactive_file:6749 isolated_file:0 [ 466.711063] unevictable:0 dirty:6 writeback:19 unstable:0 [ 466.711063] slab_reclaimable:22167 slab_unreclaimable:159859 [ 466.711063] mapped:58387 shmem:637 pagetables:93403 bounce:0 [ 466.711063] free:667360 free_pcp:30 free_cma:0 [ 466.745257] Node 0 active_anon:1615324kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:0kB writeback:16kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1409024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 466.773355] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.800642] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 466.805685] Node 0 DMA32 free:18216kB min:36380kB low:45472kB high:54564kB active_anon:1610968kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:16kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18592kB pagetables:42748kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 466.835633] lowmem_reserve[]: 0 0 0 0 0 [ 466.839635] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.865589] lowmem_reserve[]: 0 0 0 0 0 [ 466.869704] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 466.885291] Node 0 DMA32: 344*4kB (UME) 67*8kB (ME) 33*16kB (ME) 493*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18216kB [ 466.899014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 466.909952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.918980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.927792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 466.936703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 466.945404] 11247 total pagecache pages [ 466.949588] 0 pages in swap cache [ 466.953103] Swap cache stats: add 0, delete 0, find 0/0 [ 466.958474] Free swap = 0kB [ 466.962212] Total swap = 0kB [ 466.965241] 1965979 pages RAM [ 466.968775] 0 pages HighMem/MovableOnly [ 466.972808] 335868 pages reserved [ 466.976413] 0 pages cma reserved [ 466.979892] Out of memory: Kill process 8782 (syz-executor.2) score 1007 or sacrifice child [ 466.988672] Killed process 8782 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 467.001452] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 467.008453] oom_reaper: reaped process 8782 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 467.013172] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 467.029297] CPU: 0 PID: 24939 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 467.037170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.046611] Call Trace: [ 467.049486] dump_stack+0x142/0x197 [ 467.053170] warn_alloc.cold+0x96/0x1af [ 467.057150] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 467.062015] ? wait_for_completion+0x420/0x420 [ 467.066614] __alloc_pages_slowpath+0x23c6/0x2930 [ 467.071730] ? warn_alloc+0xf0/0xf0 [ 467.075400] ? __might_sleep+0x93/0xb0 [ 467.079285] __alloc_pages_nodemask+0x62c/0x7a0 [ 467.083982] ? lock_downgrade+0x740/0x740 [ 467.088131] ? __alloc_pages_slowpath+0x2930/0x2930 [ 467.093280] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 467.098937] alloc_pages_current+0xec/0x1e0 [ 467.103548] ion_page_pool_alloc+0x11f/0x1c0 [ 467.108339] ion_system_heap_allocate+0x138/0x910 [ 467.113389] ? ion_alloc+0x19b/0x860 [ 467.117104] ? rcu_read_lock_sched_held+0x110/0x130 [ 467.122210] ? ion_system_heap_free+0x250/0x250 [ 467.126889] ion_alloc+0x222/0x860 [ 467.131105] ? ion_dma_buf_release+0x50/0x50 [ 467.135634] ? kasan_check_write+0x14/0x20 [ 467.139859] ? _copy_from_user+0x99/0x110 [ 467.143998] ion_ioctl+0x105/0x217 [ 467.147551] ? ion_alloc.cold+0x40/0x40 [ 467.151580] ? ion_alloc.cold+0x40/0x40 [ 467.155550] do_vfs_ioctl+0x7ae/0x1060 [ 467.159528] ? selinux_file_mprotect+0x5d0/0x5d0 [ 467.164312] ? lock_downgrade+0x740/0x740 [ 467.168639] ? ioctl_preallocate+0x1c0/0x1c0 [ 467.173416] ? __fget+0x237/0x370 [ 467.176976] ? security_file_ioctl+0x89/0xb0 [ 467.183617] SyS_ioctl+0x8f/0xc0 [ 467.187167] ? do_vfs_ioctl+0x1060/0x1060 [ 467.191423] do_syscall_64+0x1e8/0x640 [ 467.195741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.200668] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 467.205854] RIP: 0033:0x45b349 [ 467.209159] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.216893] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 467.224289] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 467.231840] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 467.239108] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 467.246505] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 467.254578] Mem-Info: [ 467.257006] active_anon:499011 inactive_anon:584 isolated_anon:0 [ 467.257006] active_file:3855 inactive_file:6754 isolated_file:0 [ 467.257006] unevictable:0 dirty:14 writeback:0 unstable:0 [ 467.257006] slab_reclaimable:22167 slab_unreclaimable:159548 [ 467.257006] mapped:58387 shmem:637 pagetables:93376 bounce:0 [ 467.257006] free:668180 free_pcp:99 free_cma:0 [ 467.291359] Node 0 active_anon:1613192kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1406976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 467.319852] Node 1 active_anon:382852kB inactive_anon:1328kB active_file:15408kB inactive_file:27016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:48kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 467.347875] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.374773] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 467.379901] Node 0 DMA32 free:21088kB min:36380kB low:45472kB high:54564kB active_anon:1608836kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18560kB pagetables:42640kB bounce:0kB free_pcp:332kB local_pcp:120kB free_cma:0kB [ 467.409992] lowmem_reserve[]: 0 0 0 0 0 [ 467.414071] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.439440] lowmem_reserve[]: 0 0 0 0 0 [ 467.443504] Node 1 Normal free:2641260kB min:53508kB low:66884kB high:80260kB active_anon:382852kB inactive_anon:1328kB active_file:15408kB inactive_file:27016kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:99488kB pagetables:330624kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 467.473672] lowmem_reserve[]: 0 0 0 0 0 [ 467.477666] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 467.493353] Node 0 DMA32: 344*4kB (UME) 154*8kB (UME) 39*16kB (UME) 494*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 21088kB [ 467.507515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 467.518429] Node 1 Normal: 91*4kB (UME) 102*8kB (UME) 21*16kB (UME) 37*32kB (UM) 45*64kB (UME) 15*128kB (U) 4*256kB (U) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 641*4096kB (M) = 2641228kB [ 467.536041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.544949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 467.553647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.562554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 467.571178] 11248 total pagecache pages [ 467.575276] 0 pages in swap cache [ 467.578848] Swap cache stats: add 0, delete 0, find 0/0 [ 467.584276] Free swap = 0kB [ 467.587300] Total swap = 0kB [ 467.590523] 1965979 pages RAM [ 467.593634] 0 pages HighMem/MovableOnly [ 467.597617] 335868 pages reserved [ 467.601132] 0 pages cma reserved [ 467.622653] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 467.634333] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 467.639838] CPU: 0 PID: 24939 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 467.647734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.657232] Call Trace: [ 467.659831] dump_stack+0x142/0x197 [ 467.663473] warn_alloc.cold+0x96/0x1af [ 467.667567] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 467.672705] ? __alloc_pages_direct_compact+0xbc/0x380 [ 467.678479] __alloc_pages_slowpath+0x23c6/0x2930 [ 467.683522] ? save_trace+0x290/0x290 [ 467.687332] ? warn_alloc+0xf0/0xf0 [ 467.691054] ? __might_sleep+0x93/0xb0 [ 467.694946] __alloc_pages_nodemask+0x62c/0x7a0 [ 467.699645] ? lock_downgrade+0x740/0x740 [ 467.703798] ? __alloc_pages_slowpath+0x2930/0x2930 [ 467.708814] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 467.714582] alloc_pages_current+0xec/0x1e0 [ 467.718913] ion_page_pool_alloc+0x11f/0x1c0 [ 467.723336] ion_system_heap_allocate+0x138/0x910 [ 467.728197] ? ion_system_heap_free+0x250/0x250 [ 467.732885] ion_alloc+0x68c/0x860 [ 467.736431] ? ion_dma_buf_release+0x50/0x50 [ 467.740901] ? kasan_check_write+0x14/0x20 [ 467.745151] ? _copy_from_user+0x99/0x110 [ 467.749471] ion_ioctl+0x105/0x217 [ 467.753017] ? ion_alloc.cold+0x40/0x40 [ 467.757133] ? ion_alloc.cold+0x40/0x40 [ 467.761115] do_vfs_ioctl+0x7ae/0x1060 [ 467.765103] ? selinux_file_mprotect+0x5d0/0x5d0 [ 467.769991] ? lock_downgrade+0x740/0x740 [ 467.774159] ? ioctl_preallocate+0x1c0/0x1c0 [ 467.778678] ? __fget+0x237/0x370 [ 467.782140] ? security_file_ioctl+0x89/0xb0 [ 467.786698] SyS_ioctl+0x8f/0xc0 [ 467.790098] ? do_vfs_ioctl+0x1060/0x1060 [ 467.794472] do_syscall_64+0x1e8/0x640 [ 467.798361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.803224] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 467.808423] RIP: 0033:0x45b349 [ 467.811626] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.819334] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 467.826617] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 467.834057] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 467.841371] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 467.848644] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 467.896779] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 467.909974] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 467.915418] CPU: 0 PID: 24939 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 467.923533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.932945] Call Trace: [ 467.935587] dump_stack+0x142/0x197 [ 467.939216] dump_header+0x177/0x6cd [ 467.942930] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 467.948131] ? ___ratelimit+0x55/0x537 [ 467.952017] oom_kill_process.cold+0x10/0xadd [ 467.956747] ? oom_unkillable_task+0x294/0x390 [ 467.961345] ? lock_downgrade+0x740/0x740 [ 467.965539] out_of_memory+0x2ee/0x1180 [ 467.969517] ? lock_acquire+0x16f/0x430 [ 467.973658] ? __lock_is_held+0xb6/0x140 [ 467.977747] ? oom_killer_disable+0x1d0/0x1d0 [ 467.982250] ? __alloc_pages_slowpath+0xca4/0x2930 [ 467.987184] __alloc_pages_slowpath+0x2251/0x2930 [ 467.992027] ? warn_alloc+0xf0/0xf0 [ 467.995661] ? __might_sleep+0x93/0xb0 [ 467.999543] __alloc_pages_nodemask+0x62c/0x7a0 [ 468.004229] ? lock_downgrade+0x740/0x740 [ 468.008470] ? __alloc_pages_slowpath+0x2930/0x2930 [ 468.013504] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 468.019319] alloc_pages_current+0xec/0x1e0 [ 468.023648] ion_page_pool_alloc+0x11f/0x1c0 [ 468.028586] ion_system_heap_allocate+0x138/0x910 [ 468.033588] ? ion_system_heap_free+0x250/0x250 [ 468.038423] ion_alloc+0x68c/0x860 [ 468.042931] ? ion_dma_buf_release+0x50/0x50 [ 468.047349] ? kasan_check_write+0x14/0x20 [ 468.051699] ? _copy_from_user+0x99/0x110 [ 468.055848] ion_ioctl+0x105/0x217 [ 468.059395] ? ion_alloc.cold+0x40/0x40 [ 468.063370] ? ion_alloc.cold+0x40/0x40 [ 468.067339] do_vfs_ioctl+0x7ae/0x1060 [ 468.071274] ? selinux_file_mprotect+0x5d0/0x5d0 [ 468.076114] ? lock_downgrade+0x740/0x740 [ 468.080268] ? ioctl_preallocate+0x1c0/0x1c0 [ 468.084669] ? __fget+0x237/0x370 [ 468.088255] ? security_file_ioctl+0x89/0xb0 [ 468.092662] SyS_ioctl+0x8f/0xc0 [ 468.096154] ? do_vfs_ioctl+0x1060/0x1060 [ 468.100305] do_syscall_64+0x1e8/0x640 [ 468.104197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.109040] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 468.114221] RIP: 0033:0x45b349 [ 468.117521] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.125380] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 468.132647] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 468.140015] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 468.147319] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 468.154587] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 468.163098] Mem-Info: [ 468.165547] active_anon:499011 inactive_anon:584 isolated_anon:0 [ 468.165547] active_file:3854 inactive_file:6765 isolated_file:0 [ 468.165547] unevictable:0 dirty:10 writeback:0 unstable:0 [ 468.165547] slab_reclaimable:22168 slab_unreclaimable:159574 [ 468.165547] mapped:58387 shmem:637 pagetables:93376 bounce:0 [ 468.165547] free:667388 free_pcp:83 free_cma:0 [ 468.199738] Node 0 active_anon:1613192kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1406976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 468.228103] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.255355] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 468.260596] Node 0 DMA32 free:18172kB min:36380kB low:45472kB high:54564kB active_anon:1608836kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18560kB pagetables:42640kB bounce:0kB free_pcp:332kB local_pcp:120kB free_cma:0kB [ 468.289875] lowmem_reserve[]: 0 0 0 0 0 [ 468.294442] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.319936] lowmem_reserve[]: 0 0 0 0 0 [ 468.324047] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 468.339778] Node 0 DMA32: 343*4kB (ME) 70*8kB (UME) 34*16kB (UME) 491*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 468.353349] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.364106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.373006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.381648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.390573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.399259] 11261 total pagecache pages [ 468.403310] 0 pages in swap cache [ 468.406768] Swap cache stats: add 0, delete 0, find 0/0 [ 468.412216] Free swap = 0kB [ 468.415937] Total swap = 0kB [ 468.419000] 1965979 pages RAM [ 468.422604] 0 pages HighMem/MovableOnly [ 468.426575] 335868 pages reserved [ 468.430114] 0 pages cma reserved [ 468.433499] Out of memory: Kill process 8923 (syz-executor.2) score 1007 or sacrifice child [ 468.442190] Killed process 8923 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 468.454306] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 468.465719] oom_reaper: reaped process 8923 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 468.475744] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 468.481418] CPU: 0 PID: 24939 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 468.489315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.498673] Call Trace: [ 468.501286] dump_stack+0x142/0x197 [ 468.504907] warn_alloc.cold+0x96/0x1af [ 468.508955] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 468.513819] ? wait_for_completion+0x420/0x420 [ 468.518412] __alloc_pages_slowpath+0x23c6/0x2930 [ 468.523282] ? warn_alloc+0xf0/0xf0 [ 468.526916] ? __might_sleep+0x93/0xb0 [ 468.530799] __alloc_pages_nodemask+0x62c/0x7a0 [ 468.535478] ? lock_downgrade+0x740/0x740 [ 468.539931] ? __alloc_pages_slowpath+0x2930/0x2930 [ 468.544975] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 468.550608] alloc_pages_current+0xec/0x1e0 [ 468.554944] ion_page_pool_alloc+0x11f/0x1c0 [ 468.559364] ion_system_heap_allocate+0x138/0x910 [ 468.564210] ? ion_system_heap_free+0x250/0x250 [ 468.569114] ion_alloc+0x68c/0x860 [ 468.572676] ? ion_dma_buf_release+0x50/0x50 [ 468.577094] ? kasan_check_write+0x14/0x20 [ 468.581393] ? _copy_from_user+0x99/0x110 [ 468.585542] ion_ioctl+0x105/0x217 [ 468.589139] ? ion_alloc.cold+0x40/0x40 [ 468.593218] ? ion_alloc.cold+0x40/0x40 [ 468.597318] do_vfs_ioctl+0x7ae/0x1060 [ 468.601197] ? selinux_file_mprotect+0x5d0/0x5d0 [ 468.606078] ? lock_downgrade+0x740/0x740 [ 468.610234] ? ioctl_preallocate+0x1c0/0x1c0 [ 468.614638] ? __fget+0x237/0x370 [ 468.618111] ? security_file_ioctl+0x89/0xb0 [ 468.622783] SyS_ioctl+0x8f/0xc0 [ 468.626167] ? do_vfs_ioctl+0x1060/0x1060 [ 468.630327] do_syscall_64+0x1e8/0x640 [ 468.634217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.639212] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 468.644391] RIP: 0033:0x45b349 [ 468.647572] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.655281] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 468.662553] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 468.669833] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 468.677338] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 468.684595] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 468.692776] warn_alloc_show_mem: 1 callbacks suppressed [ 468.692779] Mem-Info: [ 468.700668] active_anon:497956 inactive_anon:584 isolated_anon:0 [ 468.700668] active_file:3854 inactive_file:6773 isolated_file:0 [ 468.700668] unevictable:0 dirty:21 writeback:0 unstable:0 [ 468.700668] slab_reclaimable:22168 slab_unreclaimable:159574 [ 468.700668] mapped:58387 shmem:637 pagetables:93349 bounce:0 [ 468.700668] free:668428 free_pcp:173 free_cma:0 [ 468.735023] Node 0 active_anon:1608972kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1402880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 468.763113] Node 1 active_anon:382852kB inactive_anon:1328kB active_file:15408kB inactive_file:27088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:76kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 468.791072] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.818088] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 468.823991] Node 0 DMA32 free:22300kB min:36380kB low:45472kB high:54564kB active_anon:1604616kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18528kB pagetables:42532kB bounce:0kB free_pcp:588kB local_pcp:120kB free_cma:0kB [ 468.853290] lowmem_reserve[]: 0 0 0 0 0 [ 468.857299] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.882814] lowmem_reserve[]: 0 0 0 0 0 [ 468.886813] Node 1 Normal free:2641040kB min:53508kB low:66884kB high:80260kB active_anon:382852kB inactive_anon:1328kB active_file:15408kB inactive_file:27088kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:99488kB pagetables:330624kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 468.916781] lowmem_reserve[]: 0 0 0 0 0 [ 468.920882] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 468.936567] Node 0 DMA32: 343*4kB (ME) 70*8kB (UME) 34*16kB (UME) 492*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22316kB [ 468.950895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.961676] Node 1 Normal: 86*4kB (UM) 101*8kB (UME) 11*16kB (UM) 39*32kB (UME) 44*64kB (UM) 15*128kB (U) 4*256kB (U) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 641*4096kB (M) = 2641040kB [ 468.978877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.987817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:03:42 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) 22:03:42 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:42 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 468.996473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.007236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 469.015939] 11269 total pagecache pages [ 469.020124] 0 pages in swap cache [ 469.023581] Swap cache stats: add 0, delete 0, find 0/0 [ 469.029056] Free swap = 0kB [ 469.032335] Total swap = 0kB [ 469.035603] 1965979 pages RAM [ 469.038714] 0 pages HighMem/MovableOnly [ 469.042801] 335868 pages reserved [ 469.046257] 0 pages cma reserved [ 469.111801] audit: type=1804 audit(1580076222.906:1816): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/550/file0" dev="sda1" ino=20953 res=1 22:03:43 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:43 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:43 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:43 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 469.566272] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 469.592763] audit: type=1804 audit(1580076223.386:1817): pid=25004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/551/file0" dev="sda1" ino=20234 res=1 [ 469.636913] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 469.676726] CPU: 1 PID: 24999 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 469.684766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.694137] Call Trace: [ 469.696746] dump_stack+0x142/0x197 [ 469.700559] warn_alloc.cold+0x96/0x1af [ 469.704560] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 469.709431] ? __alloc_pages_direct_compact+0xbc/0x380 [ 469.714741] __alloc_pages_slowpath+0x23c6/0x2930 [ 469.719613] ? save_trace+0x290/0x290 [ 469.723433] ? warn_alloc+0xf0/0xf0 [ 469.727109] ? __might_sleep+0x93/0xb0 [ 469.731009] __alloc_pages_nodemask+0x62c/0x7a0 [ 469.735818] ? lock_downgrade+0x740/0x740 [ 469.739987] ? __alloc_pages_slowpath+0x2930/0x2930 [ 469.745140] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 469.750822] alloc_pages_current+0xec/0x1e0 [ 469.755168] ion_page_pool_alloc+0x11f/0x1c0 [ 469.759597] ion_system_heap_allocate+0x138/0x910 [ 469.764457] ? ion_alloc+0x19b/0x860 [ 469.768191] ? rcu_read_lock_sched_held+0x110/0x130 [ 469.773228] ? ion_system_heap_free+0x250/0x250 [ 469.777943] ion_alloc+0x222/0x860 [ 469.781521] ? ion_dma_buf_release+0x50/0x50 [ 469.785945] ? kasan_check_write+0x14/0x20 [ 469.790206] ? _copy_from_user+0x99/0x110 [ 469.794392] ion_ioctl+0x105/0x217 [ 469.797946] ? ion_alloc.cold+0x40/0x40 [ 469.801940] ? ion_alloc.cold+0x40/0x40 [ 469.805937] do_vfs_ioctl+0x7ae/0x1060 [ 469.809854] ? selinux_file_mprotect+0x5d0/0x5d0 [ 469.814624] ? lock_downgrade+0x740/0x740 [ 469.818791] ? ioctl_preallocate+0x1c0/0x1c0 [ 469.823224] ? __fget+0x237/0x370 [ 469.826704] ? security_file_ioctl+0x89/0xb0 [ 469.831138] SyS_ioctl+0x8f/0xc0 [ 469.834521] ? do_vfs_ioctl+0x1060/0x1060 [ 469.838800] do_syscall_64+0x1e8/0x640 [ 469.842700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.847571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 469.852773] RIP: 0033:0x45b349 [ 469.855971] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.863783] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 469.871072] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 469.878359] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 469.885646] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 469.892930] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c 22:03:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 470.009935] Mem-Info: [ 470.026531] active_anon:498739 inactive_anon:582 isolated_anon:0 [ 470.026531] active_file:3879 inactive_file:6754 isolated_file:0 [ 470.026531] unevictable:0 dirty:92 writeback:0 unstable:0 [ 470.026531] slab_reclaimable:22170 slab_unreclaimable:159822 [ 470.026531] mapped:58431 shmem:637 pagetables:93597 bounce:0 [ 470.026531] free:671272 free_pcp:52 free_cma:0 [ 470.175714] Node 0 active_anon:1611016kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1404928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 470.334149] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.366725] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 470.372456] Node 0 DMA32 free:36344kB min:36380kB low:45472kB high:54564kB active_anon:1606660kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18528kB pagetables:42532kB bounce:0kB free_pcp:120kB local_pcp:80kB free_cma:0kB [ 470.406346] lowmem_reserve[]: 0 0 0 0 0 [ 470.410946] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.442182] lowmem_reserve[]: 0 0 0 0 0 [ 470.446463] Node 0 DMA: 4*4kB (UME) 4*8kB (UE) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 470.463633] Node 0 DMA32: 1332*4kB (UM) 82*8kB (UM) 833*16kB (UME) 533*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36368kB [ 470.478043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.488911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.497875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 470.506854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.517279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 470.526037] 11282 total pagecache pages [ 470.530638] 0 pages in swap cache [ 470.534126] Swap cache stats: add 0, delete 0, find 0/0 [ 470.539516] Free swap = 0kB [ 470.542587] Total swap = 0kB [ 470.545715] 1965979 pages RAM [ 470.548804] 0 pages HighMem/MovableOnly [ 470.552860] 335868 pages reserved [ 470.556447] 0 pages cma reserved [ 470.569544] oom_reaper: reaped process 24999 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 470.631572] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 470.644841] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 470.650399] CPU: 1 PID: 24999 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 470.658398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.667749] Call Trace: [ 470.670341] dump_stack+0x142/0x197 [ 470.674004] dump_header+0x177/0x6cd [ 470.677713] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 470.682814] ? ___ratelimit+0x55/0x537 [ 470.686752] oom_kill_process.cold+0x10/0xadd [ 470.691256] ? rcu_read_unlock_special+0x895/0xd40 [ 470.696198] ? lock_downgrade+0x740/0x740 [ 470.700357] out_of_memory+0x2ee/0x1180 [ 470.704339] ? lock_acquire+0x16f/0x430 [ 470.708318] ? __lock_is_held+0xb6/0x140 [ 470.712405] ? oom_killer_disable+0x1d0/0x1d0 [ 470.717026] ? __alloc_pages_slowpath+0xca4/0x2930 [ 470.722223] __alloc_pages_slowpath+0x2251/0x2930 [ 470.727081] ? warn_alloc+0xf0/0xf0 [ 470.730726] ? __might_sleep+0x93/0xb0 [ 470.734637] __alloc_pages_nodemask+0x62c/0x7a0 [ 470.739307] ? lock_downgrade+0x740/0x740 [ 470.743557] ? __alloc_pages_slowpath+0x2930/0x2930 [ 470.748699] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 470.754862] alloc_pages_current+0xec/0x1e0 [ 470.759217] ion_page_pool_alloc+0x11f/0x1c0 [ 470.763723] ion_system_heap_allocate+0x138/0x910 [ 470.768566] ? ion_alloc+0x19b/0x860 [ 470.772283] ? rcu_read_lock_sched_held+0x110/0x130 [ 470.777369] ? ion_system_heap_free+0x250/0x250 [ 470.782044] ion_alloc+0x222/0x860 [ 470.785696] ? ion_dma_buf_release+0x50/0x50 [ 470.790100] ? kasan_check_write+0x14/0x20 [ 470.794336] ? _copy_from_user+0x99/0x110 [ 470.798484] ion_ioctl+0x105/0x217 [ 470.802024] ? ion_alloc.cold+0x40/0x40 [ 470.806002] ? ion_alloc.cold+0x40/0x40 [ 470.809968] do_vfs_ioctl+0x7ae/0x1060 [ 470.813970] ? selinux_file_mprotect+0x5d0/0x5d0 [ 470.818740] ? lock_downgrade+0x740/0x740 [ 470.822887] ? ioctl_preallocate+0x1c0/0x1c0 [ 470.827462] ? __fget+0x237/0x370 [ 470.830915] ? security_file_ioctl+0x89/0xb0 [ 470.835336] SyS_ioctl+0x8f/0xc0 [ 470.838703] ? do_vfs_ioctl+0x1060/0x1060 [ 470.842846] do_syscall_64+0x1e8/0x640 [ 470.846738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.851592] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 470.856775] RIP: 0033:0x45b349 [ 470.859993] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.867734] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 470.875132] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 470.882637] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 470.889907] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 470.897175] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 470.904977] Mem-Info: [ 470.907596] active_anon:498673 inactive_anon:584 isolated_anon:0 [ 470.907596] active_file:3904 inactive_file:6740 isolated_file:0 [ 470.907596] unevictable:0 dirty:8 writeback:0 unstable:0 [ 470.907596] slab_reclaimable:22211 slab_unreclaimable:159851 [ 470.907596] mapped:58387 shmem:637 pagetables:93535 bounce:0 [ 470.907596] free:667082 free_pcp:35 free_cma:0 [ 470.941553] Node 0 active_anon:1611016kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1404928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 470.969873] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.997283] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 471.002386] Node 0 DMA32 free:18380kB min:36380kB low:45472kB high:54564kB active_anon:1606660kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18528kB pagetables:42532kB bounce:0kB free_pcp:140kB local_pcp:120kB free_cma:0kB [ 471.031718] lowmem_reserve[]: 0 0 0 0 0 [ 471.035763] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 471.061534] lowmem_reserve[]: 0 0 0 0 0 [ 471.065630] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 471.081286] Node 0 DMA32: 371*4kB (UME) 101*8kB (UME) 34*16kB (ME) 486*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18388kB [ 471.095327] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 471.106126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.115261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 471.123979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.132916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 471.141572] 11286 total pagecache pages [ 471.145664] 0 pages in swap cache [ 471.149114] Swap cache stats: add 0, delete 0, find 0/0 [ 471.154578] Free swap = 0kB [ 471.157599] Total swap = 0kB [ 471.160689] 1965979 pages RAM [ 471.163787] 0 pages HighMem/MovableOnly [ 471.167754] 335868 pages reserved [ 471.171275] 0 pages cma reserved [ 471.174646] Out of memory: Kill process 9312 (syz-executor.2) score 1007 or sacrifice child [ 471.183225] Killed process 9312 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 471.197303] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 471.202375] oom_reaper: reaped process 9312 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 471.211541] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 471.226073] CPU: 1 PID: 24999 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 471.234142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.243512] Call Trace: [ 471.246286] dump_stack+0x142/0x197 [ 471.249932] warn_alloc.cold+0x96/0x1af [ 471.253912] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 471.259537] ? wait_for_completion+0x420/0x420 [ 471.264129] __alloc_pages_slowpath+0x23c6/0x2930 [ 471.268990] ? warn_alloc+0xf0/0xf0 [ 471.272623] ? __might_sleep+0x93/0xb0 [ 471.276517] __alloc_pages_nodemask+0x62c/0x7a0 [ 471.281199] ? lock_downgrade+0x740/0x740 [ 471.285340] ? __alloc_pages_slowpath+0x2930/0x2930 [ 471.290374] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 471.296149] alloc_pages_current+0xec/0x1e0 [ 471.300484] ion_page_pool_alloc+0x11f/0x1c0 [ 471.304895] ion_system_heap_allocate+0x138/0x910 [ 471.309740] ? ion_alloc+0x19b/0x860 [ 471.313451] ? rcu_read_lock_sched_held+0x110/0x130 [ 471.318721] ? ion_system_heap_free+0x250/0x250 [ 471.323503] ion_alloc+0x222/0x860 [ 471.327054] ? ion_dma_buf_release+0x50/0x50 [ 471.331473] ? kasan_check_write+0x14/0x20 [ 471.335804] ? _copy_from_user+0x99/0x110 [ 471.339959] ion_ioctl+0x105/0x217 [ 471.343513] ? ion_alloc.cold+0x40/0x40 [ 471.347490] ? ion_alloc.cold+0x40/0x40 [ 471.351463] do_vfs_ioctl+0x7ae/0x1060 [ 471.355442] ? selinux_file_mprotect+0x5d0/0x5d0 [ 471.360198] ? lock_downgrade+0x740/0x740 [ 471.364336] ? ioctl_preallocate+0x1c0/0x1c0 [ 471.368767] ? __fget+0x237/0x370 [ 471.372233] ? security_file_ioctl+0x89/0xb0 [ 471.376640] SyS_ioctl+0x8f/0xc0 [ 471.380014] ? do_vfs_ioctl+0x1060/0x1060 [ 471.384188] do_syscall_64+0x1e8/0x640 [ 471.389211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.394061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 471.399256] RIP: 0033:0x45b349 [ 471.402442] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.410148] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 471.417442] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 471.424711] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 471.431971] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 471.439244] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 471.447264] Mem-Info: [ 471.449889] active_anon:498136 inactive_anon:584 isolated_anon:0 [ 471.449889] active_file:3904 inactive_file:6741 isolated_file:0 [ 471.449889] unevictable:0 dirty:12 writeback:0 unstable:0 [ 471.449889] slab_reclaimable:22210 slab_unreclaimable:159585 [ 471.449889] mapped:58387 shmem:637 pagetables:93508 bounce:0 [ 471.449889] free:667866 free_pcp:168 free_cma:0 [ 471.484174] Node 0 active_anon:1608868kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1402880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 471.511943] Node 1 active_anon:383676kB inactive_anon:1328kB active_file:15604kB inactive_file:26964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:40kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 471.542567] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 471.569451] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 471.574554] Node 0 DMA32 free:20468kB min:36380kB low:45472kB high:54564kB active_anon:1604512kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18496kB pagetables:42424kB bounce:0kB free_pcp:372kB local_pcp:352kB free_cma:0kB [ 471.603915] lowmem_reserve[]: 0 0 0 0 0 [ 471.607978] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 471.633523] lowmem_reserve[]: 0 0 0 0 0 [ 471.637523] Node 1 Normal free:2640624kB min:53508kB low:66884kB high:80260kB active_anon:383676kB inactive_anon:1328kB active_file:15604kB inactive_file:26964kB unevictable:0kB writepending:40kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:99712kB pagetables:331368kB bounce:0kB free_pcp:420kB local_pcp:232kB free_cma:0kB [ 471.667892] lowmem_reserve[]: 0 0 0 0 0 [ 471.671969] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 471.687954] Node 0 DMA32: 371*4kB (UME) 101*8kB (UME) 34*16kB (ME) 487*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20468kB [ 471.701974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 471.712762] Node 1 Normal: 40*4kB (UME) 150*8kB (UM) 64*16kB (UME) 44*32kB (UM) 36*64kB (UME) 18*128kB (UM) 4*256kB (U) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 641*4096kB (M) = 2640592kB [ 471.729884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.739017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 471.747661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.756704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 471.765340] 11287 total pagecache pages [ 471.769311] 0 pages in swap cache [ 471.772835] Swap cache stats: add 0, delete 0, find 0/0 [ 471.778202] Free swap = 0kB [ 471.781280] Total swap = 0kB [ 471.784325] 1965979 pages RAM [ 471.787433] 0 pages HighMem/MovableOnly [ 471.791561] 335868 pages reserved [ 471.795108] 0 pages cma reserved [ 471.816562] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 471.828040] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 471.833513] CPU: 1 PID: 24999 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 471.841668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.851107] Call Trace: [ 471.853697] dump_stack+0x142/0x197 [ 471.857346] warn_alloc.cold+0x96/0x1af [ 471.861323] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 471.866187] ? __alloc_pages_direct_compact+0xbc/0x380 [ 471.871473] __alloc_pages_slowpath+0x23c6/0x2930 [ 471.876318] ? save_trace+0x290/0x290 [ 471.880244] ? warn_alloc+0xf0/0xf0 [ 471.884344] ? __might_sleep+0x93/0xb0 [ 471.888354] __alloc_pages_nodemask+0x62c/0x7a0 [ 471.893025] ? lock_downgrade+0x740/0x740 [ 471.897325] ? __alloc_pages_slowpath+0x2930/0x2930 [ 471.902346] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 471.907986] alloc_pages_current+0xec/0x1e0 [ 471.912415] ion_page_pool_alloc+0x11f/0x1c0 [ 471.916925] ion_system_heap_allocate+0x138/0x910 [ 471.921799] ? ion_system_heap_free+0x250/0x250 [ 471.926498] ion_alloc+0x68c/0x860 [ 471.930051] ? ion_dma_buf_release+0x50/0x50 [ 471.934500] ? kasan_check_write+0x14/0x20 [ 471.938733] ? _copy_from_user+0x99/0x110 [ 471.943030] ion_ioctl+0x105/0x217 [ 471.946574] ? ion_alloc.cold+0x40/0x40 [ 471.950588] ? ion_alloc.cold+0x40/0x40 [ 471.954629] do_vfs_ioctl+0x7ae/0x1060 [ 471.958992] ? selinux_file_mprotect+0x5d0/0x5d0 [ 471.963780] ? lock_downgrade+0x740/0x740 [ 471.967944] ? ioctl_preallocate+0x1c0/0x1c0 [ 471.972364] ? __fget+0x237/0x370 [ 471.975827] ? security_file_ioctl+0x89/0xb0 [ 471.980394] SyS_ioctl+0x8f/0xc0 [ 471.983774] ? do_vfs_ioctl+0x1060/0x1060 [ 471.987932] do_syscall_64+0x1e8/0x640 [ 471.991825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.996683] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 472.001889] RIP: 0033:0x45b349 [ 472.005072] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.012785] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 472.020061] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 472.027326] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 472.034599] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 472.041874] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 472.088898] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 472.102197] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 472.107687] CPU: 1 PID: 24999 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 472.115567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.124929] Call Trace: [ 472.127522] dump_stack+0x142/0x197 [ 472.131209] dump_header+0x177/0x6cd [ 472.134991] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 472.140110] ? ___ratelimit+0x55/0x537 [ 472.144009] oom_kill_process.cold+0x10/0xadd [ 472.148511] ? rcu_read_unlock_special+0x639/0xd40 [ 472.153442] ? lock_downgrade+0x740/0x740 [ 472.157594] out_of_memory+0x2ee/0x1180 [ 472.161569] ? lock_acquire+0x16f/0x430 [ 472.165547] ? __lock_is_held+0xb6/0x140 [ 472.169743] ? oom_killer_disable+0x1d0/0x1d0 [ 472.174253] ? __alloc_pages_slowpath+0xca4/0x2930 [ 472.179192] __alloc_pages_slowpath+0x2251/0x2930 [ 472.184077] ? warn_alloc+0xf0/0xf0 [ 472.187734] ? __might_sleep+0x93/0xb0 [ 472.191620] __alloc_pages_nodemask+0x62c/0x7a0 [ 472.196283] ? lock_downgrade+0x740/0x740 [ 472.200435] ? __alloc_pages_slowpath+0x2930/0x2930 [ 472.205455] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 472.211175] alloc_pages_current+0xec/0x1e0 [ 472.215515] ion_page_pool_alloc+0x11f/0x1c0 [ 472.219925] ion_system_heap_allocate+0x138/0x910 [ 472.224776] ? ion_system_heap_free+0x250/0x250 [ 472.229468] ion_alloc+0x68c/0x860 [ 472.233032] ? ion_dma_buf_release+0x50/0x50 [ 472.237443] ? kasan_check_write+0x14/0x20 [ 472.241677] ? _copy_from_user+0x99/0x110 [ 472.245831] ion_ioctl+0x105/0x217 [ 472.249384] ? ion_alloc.cold+0x40/0x40 [ 472.253359] ? ion_alloc.cold+0x40/0x40 [ 472.257348] do_vfs_ioctl+0x7ae/0x1060 [ 472.261232] ? selinux_file_mprotect+0x5d0/0x5d0 [ 472.265983] ? lock_downgrade+0x740/0x740 [ 472.270262] ? ioctl_preallocate+0x1c0/0x1c0 [ 472.274682] ? __fget+0x237/0x370 [ 472.278139] ? security_file_ioctl+0x89/0xb0 [ 472.282674] SyS_ioctl+0x8f/0xc0 [ 472.286035] ? do_vfs_ioctl+0x1060/0x1060 [ 472.290211] do_syscall_64+0x1e8/0x640 [ 472.294190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.299039] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 472.304274] RIP: 0033:0x45b349 [ 472.307496] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.315200] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 472.322468] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 472.329852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 472.337132] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 472.344409] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 472.351990] Mem-Info: [ 472.354410] active_anon:498137 inactive_anon:584 isolated_anon:0 [ 472.354410] active_file:3902 inactive_file:6756 isolated_file:0 [ 472.354410] unevictable:0 dirty:26 writeback:0 unstable:0 [ 472.354410] slab_reclaimable:22211 slab_unreclaimable:159585 [ 472.354410] mapped:58387 shmem:637 pagetables:93508 bounce:0 [ 472.354410] free:667284 free_pcp:35 free_cma:0 [ 472.388153] Node 0 active_anon:1608868kB inactive_anon:1008kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1402880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 472.415797] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.442615] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 472.447756] Node 0 DMA32 free:18172kB min:36380kB low:45472kB high:54564kB active_anon:1604512kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18496kB pagetables:42424kB bounce:0kB free_pcp:140kB local_pcp:120kB free_cma:0kB [ 472.477090] lowmem_reserve[]: 0 0 0 0 0 [ 472.481288] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.507378] lowmem_reserve[]: 0 0 0 0 0 [ 472.511443] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 472.528255] Node 0 DMA32: 387*4kB (ME) 70*8kB (ME) 36*16kB (UME) 485*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18204kB [ 472.541866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 472.552750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.562140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 472.570796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.580008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 472.589111] 11303 total pagecache pages [ 472.593624] 0 pages in swap cache [ 472.597086] Swap cache stats: add 0, delete 0, find 0/0 [ 472.602616] Free swap = 0kB [ 472.605673] Total swap = 0kB [ 472.608686] 1965979 pages RAM [ 472.611873] 0 pages HighMem/MovableOnly [ 472.615848] 335868 pages reserved [ 472.619297] 0 pages cma reserved [ 472.622863] Out of memory: Kill process 9741 (syz-executor.2) score 1007 or sacrifice child [ 472.631741] Killed process 9745 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34688kB, shmem-rss:0kB [ 472.649487] oom_reaper: reaped process 9745 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 472.653425] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 472.671136] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 472.676525] CPU: 0 PID: 24999 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 472.684436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.693803] Call Trace: [ 472.696399] dump_stack+0x142/0x197 [ 472.700038] warn_alloc.cold+0x96/0x1af [ 472.704016] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 472.708875] ? wait_for_completion+0x420/0x420 [ 472.713475] __alloc_pages_slowpath+0x23c6/0x2930 [ 472.718443] ? warn_alloc+0xf0/0xf0 [ 472.722078] ? __might_sleep+0x93/0xb0 [ 472.725959] __alloc_pages_nodemask+0x62c/0x7a0 [ 472.730637] ? lock_downgrade+0x740/0x740 [ 472.734814] ? __alloc_pages_slowpath+0x2930/0x2930 [ 472.739924] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 472.745570] alloc_pages_current+0xec/0x1e0 [ 472.751853] ion_page_pool_alloc+0x11f/0x1c0 [ 472.756414] ion_system_heap_allocate+0x138/0x910 [ 472.761265] ? ion_system_heap_free+0x250/0x250 [ 472.766209] ion_alloc+0x68c/0x860 [ 472.769756] ? ion_dma_buf_release+0x50/0x50 [ 472.774170] ? kasan_check_write+0x14/0x20 [ 472.778397] ? _copy_from_user+0x99/0x110 [ 472.782741] ion_ioctl+0x105/0x217 [ 472.786289] ? ion_alloc.cold+0x40/0x40 [ 472.790616] ? ion_alloc.cold+0x40/0x40 [ 472.794606] do_vfs_ioctl+0x7ae/0x1060 [ 472.798544] ? selinux_file_mprotect+0x5d0/0x5d0 [ 472.803533] ? lock_downgrade+0x740/0x740 [ 472.807688] ? ioctl_preallocate+0x1c0/0x1c0 [ 472.812160] ? __fget+0x237/0x370 [ 472.815642] ? security_file_ioctl+0x89/0xb0 [ 472.820061] SyS_ioctl+0x8f/0xc0 [ 472.823430] ? do_vfs_ioctl+0x1060/0x1060 [ 472.827570] do_syscall_64+0x1e8/0x640 [ 472.831573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.836550] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 472.841836] RIP: 0033:0x45b349 [ 472.845148] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.852864] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 472.860328] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 472.867590] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 472.874913] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 472.882311] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 472.890482] warn_alloc_show_mem: 1 callbacks suppressed [ 472.890485] Mem-Info: [ 472.898454] active_anon:497606 inactive_anon:584 isolated_anon:0 [ 472.898454] active_file:3904 inactive_file:6754 isolated_file:0 [ 472.898454] unevictable:0 dirty:32 writeback:0 unstable:0 [ 472.898454] slab_reclaimable:22211 slab_unreclaimable:159585 [ 472.898454] mapped:58387 shmem:637 pagetables:93482 bounce:0 [ 472.898454] free:667812 free_pcp:144 free_cma:0 [ 472.932558] Node 0 active_anon:1606744kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1400832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 472.960654] Node 1 active_anon:383680kB inactive_anon:1328kB active_file:15604kB inactive_file:27016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:120kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 472.988501] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.015514] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 473.021239] Node 0 DMA32 free:20284kB min:36380kB low:45472kB high:54564kB active_anon:1602388kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18464kB pagetables:42320kB bounce:0kB free_pcp:340kB local_pcp:20kB free_cma:0kB [ 473.050444] lowmem_reserve[]: 0 0 0 0 0 [ 473.054444] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.080032] lowmem_reserve[]: 0 0 0 0 0 [ 473.084033] Node 1 Normal free:2640696kB min:53508kB low:66884kB high:80260kB active_anon:383680kB inactive_anon:1328kB active_file:15604kB inactive_file:27016kB unevictable:0kB writepending:120kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:99712kB pagetables:331368kB bounce:0kB free_pcp:352kB local_pcp:136kB free_cma:0kB [ 473.114368] lowmem_reserve[]: 0 0 0 0 0 [ 473.118430] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 473.134246] Node 0 DMA32: 387*4kB (ME) 70*8kB (ME) 36*16kB (UME) 486*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20284kB [ 473.148104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 473.159396] Node 1 Normal: 40*4kB (UME) 163*8kB (UM) 70*16kB (UME) 45*32kB (UM) 36*64kB (UME) 18*128kB (UM) 4*256kB (U) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 641*4096kB (M) = 2640824kB [ 473.176398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.185449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 473.194071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.202972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 473.211708] 11310 total pagecache pages [ 473.215692] 0 pages in swap cache [ 473.219131] Swap cache stats: add 0, delete 0, find 0/0 [ 473.224565] Free swap = 0kB [ 473.227648] Total swap = 0kB [ 473.230733] 1965979 pages RAM [ 473.233843] 0 pages HighMem/MovableOnly [ 473.238168] 335868 pages reserved 22:03:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) 22:03:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080), 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 473.241745] 0 pages cma reserved [ 473.290797] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 473.313513] audit: type=1804 audit(1580076227.106:1818): pid=25037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/552/file0" dev="sda1" ino=20845 res=1 22:03:47 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080), 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:47 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 473.739777] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 473.792054] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 473.799871] audit: type=1804 audit(1580076227.596:1819): pid=25063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/553/file0" dev="sda1" ino=21087 res=1 [ 473.828522] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 473.835659] CPU: 0 PID: 25057 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 473.843578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.853073] Call Trace: [ 473.855673] dump_stack+0x142/0x197 [ 473.859313] warn_alloc.cold+0x96/0x1af [ 473.863443] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 473.868312] ? __alloc_pages_direct_compact+0xbc/0x380 [ 473.873604] __alloc_pages_slowpath+0x23c6/0x2930 [ 473.878474] ? save_trace+0x290/0x290 [ 473.882301] ? warn_alloc+0xf0/0xf0 [ 473.885951] ? __might_sleep+0x93/0xb0 [ 473.889853] __alloc_pages_nodemask+0x62c/0x7a0 [ 473.894670] ? lock_downgrade+0x740/0x740 [ 473.898845] ? __alloc_pages_slowpath+0x2930/0x2930 [ 473.903886] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 473.909536] alloc_pages_current+0xec/0x1e0 [ 473.913885] ion_page_pool_alloc+0x11f/0x1c0 [ 473.918482] ion_system_heap_allocate+0x138/0x910 [ 473.923462] ? ion_alloc+0x19b/0x860 [ 473.927205] ? rcu_read_lock_sched_held+0x110/0x130 [ 473.932369] ? ion_system_heap_free+0x250/0x250 [ 473.937067] ion_alloc+0x222/0x860 [ 473.940636] ? ion_dma_buf_release+0x50/0x50 [ 473.945065] ? kasan_check_write+0x14/0x20 [ 473.949315] ? _copy_from_user+0x99/0x110 [ 473.953485] ion_ioctl+0x105/0x217 [ 473.957040] ? ion_alloc.cold+0x40/0x40 [ 473.961040] ? ion_alloc.cold+0x40/0x40 [ 473.965038] do_vfs_ioctl+0x7ae/0x1060 [ 473.968946] ? selinux_file_mprotect+0x5d0/0x5d0 [ 473.973718] ? lock_downgrade+0x740/0x740 [ 473.977914] ? ioctl_preallocate+0x1c0/0x1c0 [ 473.982339] ? __fget+0x237/0x370 [ 473.985877] ? security_file_ioctl+0x89/0xb0 22:03:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 473.990393] SyS_ioctl+0x8f/0xc0 [ 473.993781] ? do_vfs_ioctl+0x1060/0x1060 [ 474.000060] do_syscall_64+0x1e8/0x640 [ 474.003970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.009101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 474.014309] RIP: 0033:0x45b349 [ 474.017510] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.025239] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 474.032615] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 474.039996] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 474.047277] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 474.054566] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 474.266205] audit: type=1804 audit(1580076228.066:1820): pid=25088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/554/file0" dev="sda1" ino=21330 res=1 [ 474.551674] Mem-Info: [ 474.569220] active_anon:497989 inactive_anon:582 isolated_anon:0 [ 474.569220] active_file:3911 inactive_file:6773 isolated_file:0 [ 474.569220] unevictable:0 dirty:151 writeback:0 unstable:0 [ 474.569220] slab_reclaimable:22254 slab_unreclaimable:159609 [ 474.569220] mapped:58417 shmem:637 pagetables:93780 bounce:0 [ 474.569220] free:670658 free_pcp:272 free_cma:0 [ 474.624815] Node 0 active_anon:1606744kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1400832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 474.653134] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.680401] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 474.685611] Node 0 DMA32 free:36344kB min:36380kB low:45472kB high:54564kB active_anon:1602388kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18464kB pagetables:42320kB bounce:0kB free_pcp:1080kB local_pcp:292kB free_cma:0kB [ 474.715274] lowmem_reserve[]: 0 0 0 0 0 [ 474.719285] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.745071] lowmem_reserve[]: 0 0 0 0 0 [ 474.749080] Node 0 DMA: 4*4kB (UME) 4*8kB (UE) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 474.765189] Node 0 DMA32: 1384*4kB (UM) 122*8kB (UME) 851*16kB (UM) 505*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36288kB [ 474.779206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 474.790271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.799114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.807795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.816684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.825373] 11323 total pagecache pages [ 474.829358] 0 pages in swap cache [ 474.832892] Swap cache stats: add 0, delete 0, find 0/0 [ 474.838305] Free swap = 0kB [ 474.841397] Total swap = 0kB [ 474.844416] 1965979 pages RAM [ 474.847522] 0 pages HighMem/MovableOnly [ 474.851559] 335868 pages reserved [ 474.855108] 0 pages cma reserved [ 474.866757] oom_reaper: reaped process 25057 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 475.015882] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 475.029159] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 475.034782] CPU: 1 PID: 25057 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 475.042668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.052017] Call Trace: [ 475.054604] dump_stack+0x142/0x197 [ 475.058266] dump_header+0x177/0x6cd [ 475.062022] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 475.067169] ? ___ratelimit+0x55/0x537 [ 475.071063] oom_kill_process.cold+0x10/0xadd [ 475.075554] ? rcu_read_unlock_special+0x895/0xd40 [ 475.080522] ? lock_downgrade+0x740/0x740 [ 475.084682] out_of_memory+0x2ee/0x1180 [ 475.088660] ? lock_acquire+0x16f/0x430 [ 475.092738] ? oom_killer_disable+0x1d0/0x1d0 [ 475.097250] ? __alloc_pages_slowpath+0xca4/0x2930 [ 475.102237] __alloc_pages_slowpath+0x2251/0x2930 [ 475.107192] ? warn_alloc+0xf0/0xf0 [ 475.110824] ? __might_sleep+0x93/0xb0 [ 475.114711] __alloc_pages_nodemask+0x62c/0x7a0 [ 475.119386] ? lock_downgrade+0x740/0x740 [ 475.123881] ? __alloc_pages_slowpath+0x2930/0x2930 [ 475.129185] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 475.134838] alloc_pages_current+0xec/0x1e0 [ 475.139209] ion_page_pool_alloc+0x11f/0x1c0 [ 475.143861] ion_system_heap_allocate+0x138/0x910 [ 475.148824] ? ion_alloc+0x19b/0x860 [ 475.152568] ? rcu_read_lock_sched_held+0x110/0x130 [ 475.157585] ? ion_system_heap_free+0x250/0x250 [ 475.162367] ion_alloc+0x222/0x860 [ 475.165975] ? ion_dma_buf_release+0x50/0x50 [ 475.170395] ? kasan_check_write+0x14/0x20 [ 475.174665] ? _copy_from_user+0x99/0x110 [ 475.178919] ion_ioctl+0x105/0x217 [ 475.182453] ? ion_alloc.cold+0x40/0x40 [ 475.186428] ? ion_alloc.cold+0x40/0x40 [ 475.190400] do_vfs_ioctl+0x7ae/0x1060 [ 475.194309] ? selinux_file_mprotect+0x5d0/0x5d0 [ 475.199110] ? lock_downgrade+0x740/0x740 [ 475.203261] ? ioctl_preallocate+0x1c0/0x1c0 [ 475.207675] ? __fget+0x237/0x370 [ 475.211170] ? security_file_ioctl+0x89/0xb0 [ 475.215636] SyS_ioctl+0x8f/0xc0 [ 475.219120] ? do_vfs_ioctl+0x1060/0x1060 [ 475.223390] do_syscall_64+0x1e8/0x640 [ 475.227275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.232123] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 475.239130] RIP: 0033:0x45b349 [ 475.242330] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.250065] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 475.257333] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 475.264600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 475.271866] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 475.279136] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 475.287149] Mem-Info: [ 475.289711] active_anon:497952 inactive_anon:584 isolated_anon:0 [ 475.289711] active_file:3915 inactive_file:6775 isolated_file:0 [ 475.289711] unevictable:0 dirty:9 writeback:0 unstable:0 [ 475.289711] slab_reclaimable:22256 slab_unreclaimable:159486 [ 475.289711] mapped:58387 shmem:637 pagetables:93735 bounce:0 [ 475.289711] free:666283 free_pcp:267 free_cma:0 [ 475.324045] Node 0 active_anon:1606744kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1400832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.352399] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.380284] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 475.385417] Node 0 DMA32 free:18184kB min:36380kB low:45472kB high:54564kB active_anon:1602388kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18464kB pagetables:42320kB bounce:0kB free_pcp:1068kB local_pcp:280kB free_cma:0kB [ 475.414930] lowmem_reserve[]: 0 0 0 0 0 [ 475.418937] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.445334] lowmem_reserve[]: 0 0 0 0 0 [ 475.449335] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 475.465041] Node 0 DMA32: 386*4kB (UM) 70*8kB (ME) 33*16kB (UM) 486*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18184kB [ 475.478430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 475.489452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.498449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 475.507868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.516886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 475.525677] 11330 total pagecache pages [ 475.529669] 0 pages in swap cache [ 475.533188] Swap cache stats: add 0, delete 0, find 0/0 [ 475.538557] Free swap = 0kB [ 475.541635] Total swap = 0kB [ 475.544655] 1965979 pages RAM [ 475.547746] 0 pages HighMem/MovableOnly [ 475.551779] 335868 pages reserved [ 475.555236] 0 pages cma reserved [ 475.558600] Out of memory: Kill process 9741 (syz-executor.2) score 1007 or sacrifice child [ 475.567192] Killed process 9741 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 475.579642] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 475.587191] oom_reaper: reaped process 9741 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 475.591207] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 475.606776] CPU: 1 PID: 25057 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 475.615055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.624642] Call Trace: [ 475.627228] dump_stack+0x142/0x197 [ 475.630857] warn_alloc.cold+0x96/0x1af [ 475.634831] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 475.639905] ? wait_for_completion+0x420/0x420 [ 475.644489] __alloc_pages_slowpath+0x23c6/0x2930 [ 475.649452] ? warn_alloc+0xf0/0xf0 [ 475.653202] ? __might_sleep+0x93/0xb0 [ 475.657102] __alloc_pages_nodemask+0x62c/0x7a0 [ 475.661881] ? lock_downgrade+0x740/0x740 [ 475.666028] ? __alloc_pages_slowpath+0x2930/0x2930 [ 475.671054] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 475.676693] alloc_pages_current+0xec/0x1e0 [ 475.681018] ion_page_pool_alloc+0x11f/0x1c0 [ 475.685513] ion_system_heap_allocate+0x138/0x910 [ 475.690356] ? ion_alloc+0x19b/0x860 [ 475.694072] ? rcu_read_lock_sched_held+0x110/0x130 [ 475.699311] ? ion_system_heap_free+0x250/0x250 [ 475.704004] ion_alloc+0x222/0x860 [ 475.707606] ? ion_dma_buf_release+0x50/0x50 [ 475.712016] ? kasan_check_write+0x14/0x20 [ 475.716255] ? _copy_from_user+0x99/0x110 [ 475.720510] ion_ioctl+0x105/0x217 [ 475.724063] ? ion_alloc.cold+0x40/0x40 [ 475.728041] ? ion_alloc.cold+0x40/0x40 [ 475.732016] do_vfs_ioctl+0x7ae/0x1060 [ 475.736025] ? selinux_file_mprotect+0x5d0/0x5d0 [ 475.740888] ? lock_downgrade+0x740/0x740 [ 475.745043] ? ioctl_preallocate+0x1c0/0x1c0 [ 475.749456] ? __fget+0x237/0x370 [ 475.753030] ? security_file_ioctl+0x89/0xb0 [ 475.757562] SyS_ioctl+0x8f/0xc0 [ 475.760931] ? do_vfs_ioctl+0x1060/0x1060 [ 475.765077] do_syscall_64+0x1e8/0x640 [ 475.769005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.773857] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 475.779094] RIP: 0033:0x45b349 [ 475.782286] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.790127] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 475.797524] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 475.804789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 475.812079] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 475.819349] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 475.827057] Mem-Info: [ 475.829478] active_anon:496904 inactive_anon:584 isolated_anon:0 [ 475.829478] active_file:3915 inactive_file:6775 isolated_file:0 [ 475.829478] unevictable:0 dirty:9 writeback:0 unstable:0 [ 475.829478] slab_reclaimable:22256 slab_unreclaimable:159486 [ 475.829478] mapped:58387 shmem:637 pagetables:93698 bounce:0 [ 475.829478] free:667394 free_pcp:560 free_cma:0 [ 475.863280] Node 0 active_anon:1602552kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1400832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.891261] Node 1 active_anon:385064kB inactive_anon:1328kB active_file:15652kB inactive_file:27096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:28kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 475.919046] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 475.946080] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 475.951231] Node 0 DMA32 free:22628kB min:36380kB low:45472kB high:54564kB active_anon:1598196kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18432kB pagetables:42172kB bounce:0kB free_pcp:948kB local_pcp:280kB free_cma:0kB [ 475.980966] lowmem_reserve[]: 0 0 0 0 0 [ 475.985061] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.014097] lowmem_reserve[]: 0 0 0 0 0 [ 476.018094] Node 1 Normal free:2636676kB min:53508kB low:66884kB high:80260kB active_anon:385064kB inactive_anon:1328kB active_file:15652kB inactive_file:27096kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100032kB pagetables:332380kB bounce:0kB free_pcp:1288kB local_pcp:684kB free_cma:0kB [ 476.049050] lowmem_reserve[]: 0 0 0 0 0 [ 476.053092] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 476.069086] Node 0 DMA32: 401*4kB (UME) 73*8kB (UME) 37*16kB (UME) 494*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22684kB [ 476.083121] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 476.093881] Node 1 Normal: 61*4kB (UM) 59*8kB (UME) 31*16kB (UME) 22*32kB (UME) 31*64kB (UM) 17*128kB (UE) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UM) 640*4096kB (M) = 2636732kB [ 476.110945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.119821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.128466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.137518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.146256] 11339 total pagecache pages [ 476.150300] 0 pages in swap cache [ 476.153748] Swap cache stats: add 0, delete 0, find 0/0 [ 476.159710] Free swap = 0kB [ 476.163077] Total swap = 0kB [ 476.166248] 1965979 pages RAM [ 476.169340] 0 pages HighMem/MovableOnly [ 476.173386] 335868 pages reserved [ 476.176841] 0 pages cma reserved [ 476.198164] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 476.209853] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 476.215310] CPU: 1 PID: 25057 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 476.223192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.234452] Call Trace: [ 476.237033] dump_stack+0x142/0x197 [ 476.240658] warn_alloc.cold+0x96/0x1af [ 476.244682] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 476.249534] ? __alloc_pages_direct_compact+0xbc/0x380 [ 476.254821] __alloc_pages_slowpath+0x23c6/0x2930 [ 476.260016] ? save_trace+0x290/0x290 [ 476.263882] ? warn_alloc+0xf0/0xf0 [ 476.267511] ? __might_sleep+0x93/0xb0 [ 476.271400] __alloc_pages_nodemask+0x62c/0x7a0 [ 476.276343] ? lock_downgrade+0x740/0x740 [ 476.280495] ? __alloc_pages_slowpath+0x2930/0x2930 [ 476.285504] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 476.291136] alloc_pages_current+0xec/0x1e0 [ 476.295492] ion_page_pool_alloc+0x11f/0x1c0 [ 476.299994] ion_system_heap_allocate+0x138/0x910 [ 476.304874] ? ion_system_heap_free+0x250/0x250 [ 476.309753] ion_alloc+0x68c/0x860 [ 476.313624] ? ion_dma_buf_release+0x50/0x50 [ 476.318053] ? kasan_check_write+0x14/0x20 [ 476.322313] ? _copy_from_user+0x99/0x110 [ 476.326464] ion_ioctl+0x105/0x217 [ 476.329996] ? ion_alloc.cold+0x40/0x40 [ 476.334191] ? ion_alloc.cold+0x40/0x40 [ 476.338433] do_vfs_ioctl+0x7ae/0x1060 [ 476.342591] ? selinux_file_mprotect+0x5d0/0x5d0 [ 476.347579] ? lock_downgrade+0x740/0x740 [ 476.351882] ? ioctl_preallocate+0x1c0/0x1c0 [ 476.356740] ? __fget+0x237/0x370 [ 476.360203] ? security_file_ioctl+0x89/0xb0 [ 476.364626] SyS_ioctl+0x8f/0xc0 [ 476.368001] ? do_vfs_ioctl+0x1060/0x1060 [ 476.372141] do_syscall_64+0x1e8/0x640 [ 476.376023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 476.380870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 476.386156] RIP: 0033:0x45b349 [ 476.389341] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.397046] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 476.404433] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 476.411697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 476.419003] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 476.426380] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 476.472414] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 476.485640] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 476.491130] CPU: 1 PID: 25057 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 476.499037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.508388] Call Trace: [ 476.510977] dump_stack+0x142/0x197 [ 476.514604] dump_header+0x177/0x6cd [ 476.518311] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 476.523414] ? ___ratelimit+0x55/0x537 [ 476.527913] oom_kill_process.cold+0x10/0xadd [ 476.532432] ? oom_unkillable_task+0x294/0x390 [ 476.537114] ? lock_downgrade+0x740/0x740 [ 476.541323] out_of_memory+0x2ee/0x1180 [ 476.545559] ? lock_acquire+0x16f/0x430 [ 476.549533] ? __lock_is_held+0xb6/0x140 [ 476.553679] ? oom_killer_disable+0x1d0/0x1d0 [ 476.558309] ? __alloc_pages_slowpath+0xca4/0x2930 [ 476.563234] __alloc_pages_slowpath+0x2251/0x2930 [ 476.568092] ? warn_alloc+0xf0/0xf0 [ 476.571769] ? __might_sleep+0x93/0xb0 [ 476.576171] __alloc_pages_nodemask+0x62c/0x7a0 [ 476.581016] ? lock_downgrade+0x740/0x740 [ 476.585177] ? __alloc_pages_slowpath+0x2930/0x2930 [ 476.590207] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 476.595840] alloc_pages_current+0xec/0x1e0 [ 476.600169] ion_page_pool_alloc+0x11f/0x1c0 [ 476.604570] ion_system_heap_allocate+0x138/0x910 [ 476.609524] ? ion_system_heap_free+0x250/0x250 [ 476.614249] ion_alloc+0x68c/0x860 [ 476.618081] ? ion_dma_buf_release+0x50/0x50 [ 476.622502] ? kasan_check_write+0x14/0x20 [ 476.626821] ? _copy_from_user+0x99/0x110 [ 476.630974] ion_ioctl+0x105/0x217 [ 476.634524] ? ion_alloc.cold+0x40/0x40 [ 476.638614] ? ion_alloc.cold+0x40/0x40 [ 476.642603] do_vfs_ioctl+0x7ae/0x1060 [ 476.646597] ? selinux_file_mprotect+0x5d0/0x5d0 [ 476.651394] ? lock_downgrade+0x740/0x740 [ 476.655588] ? ioctl_preallocate+0x1c0/0x1c0 [ 476.660118] ? __fget+0x237/0x370 [ 476.663569] ? security_file_ioctl+0x89/0xb0 [ 476.668054] SyS_ioctl+0x8f/0xc0 [ 476.671410] ? do_vfs_ioctl+0x1060/0x1060 [ 476.675557] do_syscall_64+0x1e8/0x640 [ 476.679471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 476.684340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 476.689691] RIP: 0033:0x45b349 [ 476.693573] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.701355] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 476.708644] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 476.715932] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 476.723304] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 476.730667] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 476.738424] Mem-Info: [ 476.740919] active_anon:496897 inactive_anon:584 isolated_anon:0 [ 476.740919] active_file:3918 inactive_file:6779 isolated_file:0 [ 476.740919] unevictable:0 dirty:27 writeback:0 unstable:0 [ 476.740919] slab_reclaimable:22257 slab_unreclaimable:159490 [ 476.740919] mapped:58387 shmem:637 pagetables:93708 bounce:0 [ 476.740919] free:666297 free_pcp:196 free_cma:0 [ 476.776354] Node 0 active_anon:1602524kB inactive_anon:1008kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1396736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 476.804225] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.831674] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 476.836785] Node 0 DMA32 free:18092kB min:36380kB low:45472kB high:54564kB active_anon:1598168kB inactive_anon:1004kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18432kB pagetables:42212kB bounce:0kB free_pcp:784kB local_pcp:120kB free_cma:0kB [ 476.866758] lowmem_reserve[]: 0 0 0 0 0 [ 476.870814] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.896475] lowmem_reserve[]: 0 0 0 0 0 [ 476.900650] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 476.916348] Node 0 DMA32: 401*4kB (ME) 77*8kB (ME) 40*16kB (UME) 476*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 476.929971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 476.941225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.950571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.959593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.968557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.977222] 11348 total pagecache pages [ 476.981339] 0 pages in swap cache [ 476.984902] Swap cache stats: add 0, delete 0, find 0/0 [ 476.990332] Free swap = 0kB [ 476.995133] Total swap = 0kB [ 477.000725] 1965979 pages RAM [ 477.003840] 0 pages HighMem/MovableOnly [ 477.007791] 335868 pages reserved [ 477.011554] 0 pages cma reserved [ 477.014926] Out of memory: Kill process 9784 (syz-executor.2) score 1007 or sacrifice child [ 477.024121] Killed process 9784 (syz-executor.2) total-vm:72720kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 477.037225] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 477.044588] oom_reaper: reaped process 9784 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 477.050361] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 477.069154] CPU: 1 PID: 25057 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 477.077313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.086946] Call Trace: [ 477.089796] dump_stack+0x142/0x197 [ 477.093773] warn_alloc.cold+0x96/0x1af [ 477.098094] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 477.103091] ? wait_for_completion+0x420/0x420 [ 477.107806] __alloc_pages_slowpath+0x23c6/0x2930 [ 477.112849] ? warn_alloc+0xf0/0xf0 [ 477.116493] ? __might_sleep+0x93/0xb0 [ 477.120532] __alloc_pages_nodemask+0x62c/0x7a0 [ 477.125329] ? lock_downgrade+0x740/0x740 [ 477.129626] ? __alloc_pages_slowpath+0x2930/0x2930 [ 477.134737] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 477.140831] alloc_pages_current+0xec/0x1e0 [ 477.145278] ion_page_pool_alloc+0x11f/0x1c0 [ 477.149844] ion_system_heap_allocate+0x138/0x910 [ 477.154707] ? ion_system_heap_free+0x250/0x250 [ 477.159519] ion_alloc+0x68c/0x860 [ 477.163279] ? ion_dma_buf_release+0x50/0x50 [ 477.167687] ? kasan_check_write+0x14/0x20 [ 477.172134] ? _copy_from_user+0x99/0x110 [ 477.176275] ion_ioctl+0x105/0x217 [ 477.179816] ? ion_alloc.cold+0x40/0x40 [ 477.183806] ? ion_alloc.cold+0x40/0x40 [ 477.188066] do_vfs_ioctl+0x7ae/0x1060 [ 477.192272] ? selinux_file_mprotect+0x5d0/0x5d0 [ 477.197170] ? lock_downgrade+0x740/0x740 [ 477.201327] ? ioctl_preallocate+0x1c0/0x1c0 [ 477.205731] ? __fget+0x237/0x370 [ 477.209199] ? security_file_ioctl+0x89/0xb0 [ 477.213696] SyS_ioctl+0x8f/0xc0 [ 477.217559] ? do_vfs_ioctl+0x1060/0x1060 [ 477.221816] do_syscall_64+0x1e8/0x640 [ 477.225703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.230555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 477.235861] RIP: 0033:0x45b349 [ 477.239041] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.246831] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 477.254227] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 477.261948] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 477.269317] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 477.276577] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 477.284191] warn_alloc_show_mem: 1 callbacks suppressed [ 477.284194] Mem-Info: [ 477.292066] active_anon:495841 inactive_anon:584 isolated_anon:0 [ 477.292066] active_file:3916 inactive_file:6797 isolated_file:0 [ 477.292066] unevictable:0 dirty:38 writeback:0 unstable:0 [ 477.292066] slab_reclaimable:22257 slab_unreclaimable:159491 [ 477.292066] mapped:58387 shmem:637 pagetables:93681 bounce:0 [ 477.292066] free:667352 free_pcp:505 free_cma:0 [ 477.325865] Node 0 active_anon:1598296kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 477.354782] Node 1 active_anon:385068kB inactive_anon:1328kB active_file:15652kB inactive_file:27188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24644kB dirty:144kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 477.383026] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.410077] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 477.415120] Node 0 DMA32 free:22444kB min:36380kB low:45472kB high:54564kB active_anon:1593940kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18400kB pagetables:42104kB bounce:0kB free_pcp:796kB local_pcp:120kB free_cma:0kB [ 477.444426] lowmem_reserve[]: 0 0 0 0 0 [ 477.448420] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.473918] lowmem_reserve[]: 0 0 0 0 0 [ 477.477914] Node 1 Normal free:2636692kB min:53508kB low:66884kB high:80260kB active_anon:385068kB inactive_anon:1328kB active_file:15652kB inactive_file:27188kB unevictable:0kB writepending:144kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100032kB pagetables:332380kB bounce:0kB free_pcp:1220kB local_pcp:684kB free_cma:0kB [ 477.508884] lowmem_reserve[]: 0 0 0 0 0 [ 477.512937] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 477.529383] Node 0 DMA32: 411*4kB (ME) 81*8kB (UME) 43*16kB (UME) 481*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22468kB [ 477.543482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 477.554423] Node 1 Normal: 61*4kB (UM) 58*8kB (UME) 31*16kB (UME) 21*32kB (UME) 31*64kB (UM) 17*128kB (UE) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UM) 640*4096kB (M) = 2636692kB [ 477.571492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.580403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 477.589250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.598187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 477.606971] 11352 total pagecache pages [ 477.611008] 0 pages in swap cache [ 477.614461] Swap cache stats: add 0, delete 0, find 0/0 [ 477.619813] Free swap = 0kB [ 477.622897] Total swap = 0kB 22:03:51 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) 22:03:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:51 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:51 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080), 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 477.626054] 1965979 pages RAM [ 477.629153] 0 pages HighMem/MovableOnly [ 477.633194] 335868 pages reserved [ 477.636666] 0 pages cma reserved [ 477.704446] audit: type=1804 audit(1580076231.496:1821): pid=25103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/555/file0" dev="sda1" ino=20757 res=1 [ 477.733635] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 22:03:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:51 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:51 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 478.101829] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 478.149805] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 478.183960] CPU: 0 PID: 25118 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 478.191917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.201282] Call Trace: [ 478.203887] dump_stack+0x142/0x197 [ 478.207532] warn_alloc.cold+0x96/0x1af [ 478.211555] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 478.216429] ? __alloc_pages_direct_compact+0xbc/0x380 [ 478.221720] __alloc_pages_slowpath+0x23c6/0x2930 [ 478.226583] ? save_trace+0x290/0x290 [ 478.230401] ? warn_alloc+0xf0/0xf0 [ 478.234052] ? __might_sleep+0x93/0xb0 [ 478.237965] __alloc_pages_nodemask+0x62c/0x7a0 [ 478.242646] ? lock_downgrade+0x740/0x740 [ 478.246809] ? __alloc_pages_slowpath+0x2930/0x2930 [ 478.251844] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 478.257487] alloc_pages_current+0xec/0x1e0 [ 478.261821] ion_page_pool_alloc+0x11f/0x1c0 [ 478.266246] ion_system_heap_allocate+0x138/0x910 [ 478.271098] ? ion_alloc+0x19b/0x860 [ 478.274850] ? rcu_read_lock_sched_held+0x110/0x130 [ 478.279997] ? ion_system_heap_free+0x250/0x250 [ 478.284684] ion_alloc+0x222/0x860 [ 478.288370] ? ion_dma_buf_release+0x50/0x50 [ 478.292797] ? kasan_check_write+0x14/0x20 [ 478.297045] ? _copy_from_user+0x99/0x110 [ 478.301238] ion_ioctl+0x105/0x217 [ 478.304794] ? ion_alloc.cold+0x40/0x40 [ 478.308801] ? ion_alloc.cold+0x40/0x40 [ 478.312787] do_vfs_ioctl+0x7ae/0x1060 [ 478.316693] ? selinux_file_mprotect+0x5d0/0x5d0 [ 478.321460] ? lock_downgrade+0x740/0x740 [ 478.325649] ? ioctl_preallocate+0x1c0/0x1c0 [ 478.330098] ? __fget+0x237/0x370 [ 478.333653] ? security_file_ioctl+0x89/0xb0 [ 478.338086] SyS_ioctl+0x8f/0xc0 [ 478.341466] ? do_vfs_ioctl+0x1060/0x1060 [ 478.345622] do_syscall_64+0x1e8/0x640 [ 478.349527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.354391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 478.359723] RIP: 0033:0x45b349 [ 478.362917] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.370641] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 478.378058] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 478.385335] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 478.392621] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 22:03:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 478.399903] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 478.410089] audit: type=1804 audit(1580076232.126:1822): pid=25128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/556/file0" dev="sda1" ino=21288 res=1 [ 478.548428] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 478.809831] Mem-Info: [ 478.814001] active_anon:496017 inactive_anon:582 isolated_anon:0 [ 478.814001] active_file:3918 inactive_file:6804 isolated_file:0 [ 478.814001] unevictable:0 dirty:133 writeback:0 unstable:0 [ 478.814001] slab_reclaimable:22272 slab_unreclaimable:159440 [ 478.814001] mapped:58424 shmem:637 pagetables:93895 bounce:0 [ 478.814001] free:670541 free_pcp:200 free_cma:0 [ 478.849039] Node 0 active_anon:1598288kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 478.877091] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.904669] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 478.909732] Node 0 DMA32 free:36300kB min:36380kB low:45472kB high:54564kB active_anon:1593932kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18400kB pagetables:42104kB bounce:0kB free_pcp:800kB local_pcp:604kB free_cma:0kB [ 478.939411] lowmem_reserve[]: 0 0 0 0 0 [ 478.943563] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 478.969251] lowmem_reserve[]: 0 0 0 0 0 [ 478.973932] Node 0 DMA: 4*4kB (UME) 4*8kB (UE) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 478.997713] Node 0 DMA32: 1409*4kB (UME) 81*8kB (UM) 863*16kB (UME) 506*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36284kB [ 479.019864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 479.032849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.044787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.056097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.067157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.078449] 11367 total pagecache pages [ 479.084787] 0 pages in swap cache [ 479.088267] Swap cache stats: add 0, delete 0, find 0/0 [ 479.094348] Free swap = 0kB [ 479.097479] Total swap = 0kB [ 479.100627] 1965979 pages RAM [ 479.103767] 0 pages HighMem/MovableOnly [ 479.107757] 335868 pages reserved [ 479.111992] 0 pages cma reserved [ 479.128171] oom_reaper: reaped process 25118 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 479.159864] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 479.173129] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 479.178531] CPU: 0 PID: 25118 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 479.186411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.195878] Call Trace: [ 479.198461] dump_stack+0x142/0x197 [ 479.202225] dump_header+0x177/0x6cd [ 479.205942] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 479.211049] ? ___ratelimit+0x55/0x537 [ 479.214940] oom_kill_process.cold+0x10/0xadd [ 479.219544] ? oom_unkillable_task+0x294/0x390 [ 479.224153] ? lock_downgrade+0x740/0x740 [ 479.228311] out_of_memory+0x2ee/0x1180 [ 479.232277] ? lock_acquire+0x16f/0x430 [ 479.236264] ? __lock_is_held+0xb6/0x140 [ 479.240329] ? oom_killer_disable+0x1d0/0x1d0 [ 479.244956] ? __alloc_pages_slowpath+0xca4/0x2930 [ 479.249975] __alloc_pages_slowpath+0x2251/0x2930 [ 479.254830] ? warn_alloc+0xf0/0xf0 [ 479.258571] ? __might_sleep+0x93/0xb0 [ 479.262464] __alloc_pages_nodemask+0x62c/0x7a0 [ 479.267530] ? lock_downgrade+0x740/0x740 [ 479.271778] ? __alloc_pages_slowpath+0x2930/0x2930 [ 479.276794] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 479.282426] alloc_pages_current+0xec/0x1e0 [ 479.286838] ion_page_pool_alloc+0x11f/0x1c0 [ 479.291256] ion_system_heap_allocate+0x138/0x910 [ 479.296244] ? ion_alloc+0x19b/0x860 [ 479.299953] ? rcu_read_lock_sched_held+0x110/0x130 [ 479.304972] ? ion_system_heap_free+0x250/0x250 [ 479.309684] ion_alloc+0x222/0x860 [ 479.313225] ? ion_dma_buf_release+0x50/0x50 [ 479.317633] ? kasan_check_write+0x14/0x20 [ 479.321877] ? _copy_from_user+0x99/0x110 [ 479.326278] ion_ioctl+0x105/0x217 [ 479.329833] ? ion_alloc.cold+0x40/0x40 [ 479.333811] ? ion_alloc.cold+0x40/0x40 [ 479.337790] do_vfs_ioctl+0x7ae/0x1060 [ 479.341690] ? selinux_file_mprotect+0x5d0/0x5d0 [ 479.346450] ? lock_downgrade+0x740/0x740 [ 479.350602] ? ioctl_preallocate+0x1c0/0x1c0 [ 479.355016] ? __fget+0x237/0x370 [ 479.358488] ? security_file_ioctl+0x89/0xb0 [ 479.363165] SyS_ioctl+0x8f/0xc0 [ 479.366533] ? do_vfs_ioctl+0x1060/0x1060 [ 479.370684] do_syscall_64+0x1e8/0x640 [ 479.374591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.380229] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 479.385529] RIP: 0033:0x45b349 [ 479.388714] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.396423] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 479.403854] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 479.411121] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 479.418596] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 479.425867] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 479.433967] Mem-Info: [ 479.436462] active_anon:496014 inactive_anon:584 isolated_anon:0 [ 479.436462] active_file:3921 inactive_file:6813 isolated_file:0 [ 479.436462] unevictable:0 dirty:165 writeback:0 unstable:0 [ 479.436462] slab_reclaimable:22307 slab_unreclaimable:159061 [ 479.436462] mapped:58388 shmem:637 pagetables:93906 bounce:0 [ 479.436462] free:666195 free_pcp:84 free_cma:0 [ 479.471109] Node 0 active_anon:1598288kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 479.498915] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.525804] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 479.530901] Node 0 DMA32 free:18076kB min:36380kB low:45472kB high:54564kB active_anon:1593932kB inactive_anon:1004kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18400kB pagetables:42104kB bounce:0kB free_pcp:336kB local_pcp:184kB free_cma:0kB [ 479.561362] lowmem_reserve[]: 0 0 0 0 0 [ 479.565409] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.590860] lowmem_reserve[]: 0 0 0 0 0 [ 479.594855] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 479.610448] Node 0 DMA32: 413*4kB (UME) 81*8kB (UM) 40*16kB (ME) 473*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 479.624208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 479.634975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.643916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.652657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 479.661568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 479.670853] 11376 total pagecache pages [ 479.674883] 0 pages in swap cache [ 479.678330] Swap cache stats: add 0, delete 0, find 0/0 [ 479.683935] Free swap = 0kB [ 479.686954] Total swap = 0kB [ 479.689962] 1965979 pages RAM [ 479.693599] 0 pages HighMem/MovableOnly [ 479.697602] 335868 pages reserved [ 479.701093] 0 pages cma reserved [ 479.704545] Out of memory: Kill process 8151 (syz-executor.4) score 1007 or sacrifice child [ 479.713150] Killed process 8151 (syz-executor.4) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 479.725103] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 479.731746] oom_reaper: reaped process 8151 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 479.736654] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 479.752231] CPU: 0 PID: 25118 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 479.760130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.769524] Call Trace: [ 479.772180] dump_stack+0x142/0x197 [ 479.775823] warn_alloc.cold+0x96/0x1af [ 479.779800] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 479.784724] ? wait_for_completion+0x420/0x420 [ 479.789359] __alloc_pages_slowpath+0x23c6/0x2930 [ 479.794329] ? warn_alloc+0xf0/0xf0 [ 479.797960] ? __might_sleep+0x93/0xb0 [ 479.801853] __alloc_pages_nodemask+0x62c/0x7a0 [ 479.806522] ? lock_downgrade+0x740/0x740 [ 479.810672] ? __alloc_pages_slowpath+0x2930/0x2930 [ 479.815690] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 479.821327] alloc_pages_current+0xec/0x1e0 [ 479.825660] ion_page_pool_alloc+0x11f/0x1c0 [ 479.830070] ion_system_heap_allocate+0x138/0x910 [ 479.834911] ? ion_alloc+0x19b/0x860 [ 479.838626] ? rcu_read_lock_sched_held+0x110/0x130 [ 479.843695] ? ion_system_heap_free+0x250/0x250 [ 479.848461] ion_alloc+0x222/0x860 [ 479.852064] ? ion_dma_buf_release+0x50/0x50 [ 479.856571] ? kasan_check_write+0x14/0x20 [ 479.860814] ? _copy_from_user+0x99/0x110 [ 479.864964] ion_ioctl+0x105/0x217 [ 479.868497] ? ion_alloc.cold+0x40/0x40 [ 479.872464] ? ion_alloc.cold+0x40/0x40 [ 479.876440] do_vfs_ioctl+0x7ae/0x1060 [ 479.880332] ? selinux_file_mprotect+0x5d0/0x5d0 [ 479.885089] ? lock_downgrade+0x740/0x740 [ 479.889229] ? ioctl_preallocate+0x1c0/0x1c0 [ 479.893641] ? __fget+0x237/0x370 [ 479.897100] ? security_file_ioctl+0x89/0xb0 [ 479.901523] SyS_ioctl+0x8f/0xc0 [ 479.904938] ? do_vfs_ioctl+0x1060/0x1060 [ 479.909075] do_syscall_64+0x1e8/0x640 [ 479.913014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.917857] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 479.923149] RIP: 0033:0x45b349 [ 479.926569] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.934281] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 479.941636] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 479.948957] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 479.956222] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 479.963485] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 479.971477] Mem-Info: [ 479.973904] active_anon:496000 inactive_anon:584 isolated_anon:0 [ 479.973904] active_file:3923 inactive_file:6817 isolated_file:0 [ 479.973904] unevictable:0 dirty:171 writeback:0 unstable:0 [ 479.973904] slab_reclaimable:22307 slab_unreclaimable:159061 [ 479.973904] mapped:58388 shmem:637 pagetables:93879 bounce:0 [ 479.973904] free:666203 free_pcp:341 free_cma:0 [ 480.007865] Node 0 active_anon:1598232kB inactive_anon:1008kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 480.035654] Node 1 active_anon:385768kB inactive_anon:1328kB active_file:15672kB inactive_file:27276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24648kB dirty:680kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 480.063533] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.090762] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 480.096003] Node 0 DMA32 free:18108kB min:36380kB low:45472kB high:54564kB active_anon:1593876kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18368kB pagetables:41996kB bounce:0kB free_pcp:528kB local_pcp:184kB free_cma:0kB [ 480.125718] lowmem_reserve[]: 0 0 0 0 0 [ 480.129710] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.155016] lowmem_reserve[]: 0 0 0 0 0 [ 480.159012] Node 1 Normal free:2636332kB min:53508kB low:66884kB high:80260kB active_anon:385768kB inactive_anon:1328kB active_file:15672kB inactive_file:27276kB unevictable:0kB writepending:680kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100288kB pagetables:333280kB bounce:0kB free_pcp:960kB local_pcp:688kB free_cma:0kB [ 480.189392] lowmem_reserve[]: 0 0 0 0 0 [ 480.193447] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 480.209159] Node 0 DMA32: 413*4kB (UME) 81*8kB (UM) 40*16kB (ME) 474*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 480.222622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 480.233387] Node 1 Normal: 21*4kB (UME) 57*8kB (UME) 33*16kB (UME) 19*32kB (UE) 38*64kB (UE) 18*128kB (UM) 5*256kB (UE) 2*512kB (U) 2*1024kB (ME) 2*2048kB (UM) 640*4096kB (M) = 2636300kB [ 480.250948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.259807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 480.268432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.277378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 480.286012] 11380 total pagecache pages [ 480.289996] 0 pages in swap cache [ 480.293522] Swap cache stats: add 0, delete 0, find 0/0 [ 480.298881] Free swap = 0kB [ 480.301926] Total swap = 0kB [ 480.305044] 1965979 pages RAM [ 480.308137] 0 pages HighMem/MovableOnly [ 480.312167] 335868 pages reserved [ 480.315707] 0 pages cma reserved [ 480.337031] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 480.348475] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 480.353957] CPU: 0 PID: 25118 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 480.361923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.371274] Call Trace: [ 480.373864] dump_stack+0x142/0x197 [ 480.377561] warn_alloc.cold+0x96/0x1af [ 480.381524] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 480.386369] ? __alloc_pages_direct_compact+0xbc/0x380 [ 480.391645] __alloc_pages_slowpath+0x23c6/0x2930 [ 480.396496] ? save_trace+0x290/0x290 [ 480.400293] ? warn_alloc+0xf0/0xf0 [ 480.403918] ? __might_sleep+0x93/0xb0 [ 480.407791] __alloc_pages_nodemask+0x62c/0x7a0 [ 480.412459] ? lock_downgrade+0x740/0x740 [ 480.416600] ? __alloc_pages_slowpath+0x2930/0x2930 [ 480.421621] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 480.427354] alloc_pages_current+0xec/0x1e0 [ 480.431684] ion_page_pool_alloc+0x11f/0x1c0 [ 480.436092] ion_system_heap_allocate+0x138/0x910 [ 480.440996] ? ion_system_heap_free+0x250/0x250 [ 480.445656] ion_alloc+0x68c/0x860 [ 480.449185] ? ion_dma_buf_release+0x50/0x50 [ 480.453606] ? kasan_check_write+0x14/0x20 [ 480.457838] ? _copy_from_user+0x99/0x110 [ 480.462027] ion_ioctl+0x105/0x217 [ 480.465556] ? ion_alloc.cold+0x40/0x40 [ 480.469521] ? ion_alloc.cold+0x40/0x40 [ 480.473497] do_vfs_ioctl+0x7ae/0x1060 [ 480.477394] ? selinux_file_mprotect+0x5d0/0x5d0 [ 480.482266] ? lock_downgrade+0x740/0x740 [ 480.486411] ? ioctl_preallocate+0x1c0/0x1c0 [ 480.490847] ? __fget+0x237/0x370 [ 480.494302] ? security_file_ioctl+0x89/0xb0 [ 480.498699] SyS_ioctl+0x8f/0xc0 [ 480.502058] ? do_vfs_ioctl+0x1060/0x1060 [ 480.506209] do_syscall_64+0x1e8/0x640 [ 480.510096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.514945] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 480.520133] RIP: 0033:0x45b349 [ 480.523314] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.531015] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 480.538287] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 480.545564] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 480.552840] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 480.560116] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 480.605714] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 480.618783] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 480.624253] CPU: 0 PID: 25118 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 480.632139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.641498] Call Trace: [ 480.644089] dump_stack+0x142/0x197 [ 480.647730] dump_header+0x177/0x6cd [ 480.651444] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 480.656549] ? ___ratelimit+0x55/0x537 [ 480.660438] oom_kill_process.cold+0x10/0xadd [ 480.664939] ? oom_unkillable_task+0x294/0x390 [ 480.669524] ? lock_downgrade+0x740/0x740 [ 480.673675] out_of_memory+0x2ee/0x1180 [ 480.677688] ? lock_acquire+0x16f/0x430 [ 480.681656] ? __lock_is_held+0xb6/0x140 [ 480.685707] ? oom_killer_disable+0x1d0/0x1d0 [ 480.690200] ? __alloc_pages_slowpath+0xca4/0x2930 [ 480.695125] __alloc_pages_slowpath+0x2251/0x2930 [ 480.699960] ? warn_alloc+0xf0/0xf0 [ 480.703641] ? __might_sleep+0x93/0xb0 [ 480.707515] __alloc_pages_nodemask+0x62c/0x7a0 [ 480.712185] ? lock_downgrade+0x740/0x740 [ 480.716331] ? __alloc_pages_slowpath+0x2930/0x2930 [ 480.721351] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 480.726975] alloc_pages_current+0xec/0x1e0 [ 480.731307] ion_page_pool_alloc+0x11f/0x1c0 [ 480.735730] ion_system_heap_allocate+0x138/0x910 [ 480.740585] ? ion_system_heap_free+0x250/0x250 [ 480.745254] ion_alloc+0x68c/0x860 [ 480.748820] ? ion_dma_buf_release+0x50/0x50 [ 480.753343] ? kasan_check_write+0x14/0x20 [ 480.757624] ? _copy_from_user+0x99/0x110 [ 480.761769] ion_ioctl+0x105/0x217 [ 480.765319] ? ion_alloc.cold+0x40/0x40 [ 480.769291] ? ion_alloc.cold+0x40/0x40 [ 480.773266] do_vfs_ioctl+0x7ae/0x1060 [ 480.777155] ? selinux_file_mprotect+0x5d0/0x5d0 [ 480.781902] ? lock_downgrade+0x740/0x740 [ 480.786051] ? ioctl_preallocate+0x1c0/0x1c0 [ 480.790517] ? __fget+0x237/0x370 [ 480.793988] ? security_file_ioctl+0x89/0xb0 [ 480.798400] SyS_ioctl+0x8f/0xc0 [ 480.801821] ? do_vfs_ioctl+0x1060/0x1060 [ 480.805959] do_syscall_64+0x1e8/0x640 [ 480.809839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.814725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 480.819909] RIP: 0033:0x45b349 [ 480.823204] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.830910] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 480.838180] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 480.845440] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 480.852706] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 480.859987] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 480.868015] Mem-Info: [ 480.870641] active_anon:496000 inactive_anon:584 isolated_anon:0 [ 480.870641] active_file:3921 inactive_file:6819 isolated_file:0 [ 480.870641] unevictable:0 dirty:172 writeback:0 unstable:0 [ 480.870641] slab_reclaimable:22307 slab_unreclaimable:159061 [ 480.870641] mapped:58388 shmem:637 pagetables:93879 bounce:0 [ 480.870641] free:666203 free_pcp:115 free_cma:0 [ 480.904675] Node 0 active_anon:1598232kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 480.932418] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.959129] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 480.964337] Node 0 DMA32 free:18108kB min:36380kB low:45472kB high:54564kB active_anon:1593876kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18368kB pagetables:41996kB bounce:0kB free_pcp:460kB local_pcp:120kB free_cma:0kB [ 480.993919] lowmem_reserve[]: 0 0 0 0 0 [ 480.997922] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.023233] lowmem_reserve[]: 0 0 0 0 0 [ 481.027234] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 481.042882] Node 0 DMA32: 415*4kB (UME) 82*8kB (UME) 39*16kB (M) 474*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 481.056347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.067202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.076190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.084956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.093821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.102455] 11380 total pagecache pages [ 481.106432] 0 pages in swap cache [ 481.109870] Swap cache stats: add 0, delete 0, find 0/0 [ 481.115260] Free swap = 0kB [ 481.118270] Total swap = 0kB [ 481.121847] 1965979 pages RAM [ 481.124943] 0 pages HighMem/MovableOnly [ 481.128922] 335868 pages reserved [ 481.132425] 0 pages cma reserved [ 481.135782] Out of memory: Kill process 8173 (syz-executor.4) score 1007 or sacrifice child [ 481.144345] Killed process 8173 (syz-executor.4) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 481.156229] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 481.162670] oom_reaper: reaped process 8173 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 481.167671] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 481.182924] CPU: 0 PID: 25118 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 481.190790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.200140] Call Trace: [ 481.202719] dump_stack+0x142/0x197 [ 481.206327] warn_alloc.cold+0x96/0x1af [ 481.210289] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 481.215124] ? wait_for_completion+0x420/0x420 [ 481.219736] __alloc_pages_slowpath+0x23c6/0x2930 [ 481.224611] ? warn_alloc+0xf0/0xf0 [ 481.228224] ? __might_sleep+0x93/0xb0 [ 481.232096] __alloc_pages_nodemask+0x62c/0x7a0 [ 481.236747] ? lock_downgrade+0x740/0x740 [ 481.240884] ? __alloc_pages_slowpath+0x2930/0x2930 [ 481.245891] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 481.251512] alloc_pages_current+0xec/0x1e0 [ 481.255825] ion_page_pool_alloc+0x11f/0x1c0 [ 481.260234] ion_system_heap_allocate+0x138/0x910 [ 481.265071] ? ion_system_heap_free+0x250/0x250 [ 481.269731] ion_alloc+0x68c/0x860 [ 481.273255] ? ion_dma_buf_release+0x50/0x50 [ 481.277658] ? kasan_check_write+0x14/0x20 [ 481.281902] ? _copy_from_user+0x99/0x110 [ 481.286050] ion_ioctl+0x105/0x217 [ 481.289582] ? ion_alloc.cold+0x40/0x40 [ 481.293540] ? ion_alloc.cold+0x40/0x40 [ 481.297505] do_vfs_ioctl+0x7ae/0x1060 [ 481.301380] ? selinux_file_mprotect+0x5d0/0x5d0 [ 481.306139] ? lock_downgrade+0x740/0x740 [ 481.310285] ? ioctl_preallocate+0x1c0/0x1c0 [ 481.314693] ? __fget+0x237/0x370 [ 481.318179] ? security_file_ioctl+0x89/0xb0 [ 481.322573] SyS_ioctl+0x8f/0xc0 [ 481.325972] ? do_vfs_ioctl+0x1060/0x1060 [ 481.330113] do_syscall_64+0x1e8/0x640 [ 481.333988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.338852] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 481.344024] RIP: 0033:0x45b349 [ 481.347204] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.355080] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 481.362383] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 481.369641] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 481.376897] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 481.384274] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 481.392231] warn_alloc_show_mem: 1 callbacks suppressed [ 481.392234] Mem-Info: [ 481.399995] active_anon:495986 inactive_anon:584 isolated_anon:0 [ 481.399995] active_file:3921 inactive_file:6836 isolated_file:0 [ 481.399995] unevictable:0 dirty:187 writeback:0 unstable:0 [ 481.399995] slab_reclaimable:22307 slab_unreclaimable:159063 [ 481.399995] mapped:58388 shmem:637 pagetables:93852 bounce:0 [ 481.399995] free:666236 free_pcp:324 free_cma:0 [ 481.433832] Node 0 active_anon:1598172kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 481.461678] Node 1 active_anon:385772kB inactive_anon:1328kB active_file:15672kB inactive_file:27344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24648kB dirty:744kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 481.491414] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.518755] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 481.524387] Node 0 DMA32 free:18140kB min:36380kB low:45472kB high:54564kB active_anon:1593816kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18336kB pagetables:41888kB bounce:0kB free_pcp:652kB local_pcp:532kB free_cma:0kB [ 481.553597] lowmem_reserve[]: 0 0 0 0 0 [ 481.557593] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.583237] lowmem_reserve[]: 0 0 0 0 0 [ 481.587232] Node 1 Normal free:2636456kB min:53508kB low:66884kB high:80260kB active_anon:385772kB inactive_anon:1328kB active_file:15672kB inactive_file:27344kB unevictable:0kB writepending:748kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100288kB pagetables:333280kB bounce:0kB free_pcp:768kB local_pcp:204kB free_cma:0kB [ 481.617985] lowmem_reserve[]: 0 0 0 0 0 [ 481.622035] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 481.637791] Node 0 DMA32: 415*4kB (UME) 82*8kB (UME) 39*16kB (M) 476*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18172kB [ 481.651266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.662024] Node 1 Normal: 28*4kB (UE) 59*8kB (UME) 32*16kB (UE) 21*32kB (UE) 39*64kB (UME) 18*128kB (UM) 5*256kB (UE) 2*512kB (U) 2*1024kB (ME) 2*2048kB (UM) 640*4096kB (M) = 2636456kB [ 481.679012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.687974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.696645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 22:03:55 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:03:55 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:55 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 481.705943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.714749] 11398 total pagecache pages [ 481.718715] 0 pages in swap cache [ 481.722220] Swap cache stats: add 0, delete 0, find 0/0 [ 481.727605] Free swap = 0kB [ 481.730696] Total swap = 0kB [ 481.733727] 1965979 pages RAM [ 481.736836] 0 pages HighMem/MovableOnly [ 481.740893] 335868 pages reserved [ 481.744343] 0 pages cma reserved [ 481.769805] audit: type=1804 audit(1580076235.566:1823): pid=25153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/557/file0" dev="sda1" ino=21491 res=1 [ 481.792298] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 22:03:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:55 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:56 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 482.233529] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 482.256235] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 482.275589] CPU: 0 PID: 25172 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 482.283515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.292879] Call Trace: [ 482.295493] dump_stack+0x142/0x197 [ 482.299128] warn_alloc.cold+0x96/0x1af [ 482.303118] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 482.308296] ? __alloc_pages_direct_compact+0xbc/0x380 [ 482.313725] __alloc_pages_slowpath+0x23c6/0x2930 [ 482.318591] ? save_trace+0x290/0x290 [ 482.322436] ? warn_alloc+0xf0/0xf0 [ 482.326085] ? __might_sleep+0x93/0xb0 [ 482.329985] __alloc_pages_nodemask+0x62c/0x7a0 [ 482.334672] ? lock_downgrade+0x740/0x740 [ 482.338830] ? __alloc_pages_slowpath+0x2930/0x2930 [ 482.343873] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 482.349613] alloc_pages_current+0xec/0x1e0 [ 482.353950] ion_page_pool_alloc+0x11f/0x1c0 [ 482.358398] ion_system_heap_allocate+0x138/0x910 [ 482.363250] ? ion_alloc+0x19b/0x860 [ 482.366981] ? rcu_read_lock_sched_held+0x110/0x130 [ 482.372015] ? ion_system_heap_free+0x250/0x250 [ 482.376704] ion_alloc+0x222/0x860 [ 482.380268] ? ion_dma_buf_release+0x50/0x50 [ 482.384696] ? kasan_check_write+0x14/0x20 [ 482.388945] ? _copy_from_user+0x99/0x110 [ 482.393110] ion_ioctl+0x105/0x217 [ 482.396660] ? ion_alloc.cold+0x40/0x40 [ 482.400657] ? ion_alloc.cold+0x40/0x40 [ 482.404649] do_vfs_ioctl+0x7ae/0x1060 [ 482.408558] ? selinux_file_mprotect+0x5d0/0x5d0 [ 482.413331] ? lock_downgrade+0x740/0x740 [ 482.417625] ? ioctl_preallocate+0x1c0/0x1c0 [ 482.422050] ? __fget+0x237/0x370 [ 482.425532] ? security_file_ioctl+0x89/0xb0 [ 482.429960] SyS_ioctl+0x8f/0xc0 [ 482.433341] ? do_vfs_ioctl+0x1060/0x1060 [ 482.437510] do_syscall_64+0x1e8/0x640 [ 482.441421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 482.446275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 482.451475] RIP: 0033:0x45b349 [ 482.454666] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.462375] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 482.469653] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 482.477027] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 22:03:56 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 482.484314] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 482.491943] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 482.535243] audit: type=1804 audit(1580076236.336:1824): pid=25189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/558/file0" dev="sda1" ino=21853 res=1 [ 482.602816] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 482.687896] Mem-Info: [ 482.690714] active_anon:496307 inactive_anon:580 isolated_anon:0 [ 482.690714] active_file:3922 inactive_file:6843 isolated_file:0 [ 482.690714] unevictable:0 dirty:210 writeback:0 unstable:0 [ 482.690714] slab_reclaimable:22311 slab_unreclaimable:159292 [ 482.690714] mapped:58447 shmem:637 pagetables:94132 bounce:0 [ 482.690714] free:669831 free_pcp:302 free_cma:0 [ 482.838984] Node 0 active_anon:1598172kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 482.871847] Node 0 DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.905666] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 482.911038] Node 0 DMA32 free:36296kB min:36380kB low:45472kB high:54564kB active_anon:1593816kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18336kB pagetables:41888kB bounce:0kB free_pcp:1192kB local_pcp:724kB free_cma:0kB [ 482.944966] lowmem_reserve[]: 0 0 0 0 0 [ 482.949288] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.979511] lowmem_reserve[]: 0 0 0 0 0 [ 482.983795] Node 0 DMA: 4*4kB (UME) 4*8kB (UE) 7*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10432kB [ 483.004636] Node 0 DMA32: 1408*4kB (UM) 93*8kB (UM) 875*16kB (UM) 498*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36312kB [ 483.018565] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 483.040846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.049727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 483.059278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.069301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 483.078303] 11406 total pagecache pages [ 483.082435] 0 pages in swap cache [ 483.085897] Swap cache stats: add 0, delete 0, find 0/0 [ 483.094368] Free swap = 0kB [ 483.097588] Total swap = 0kB [ 483.101080] 1965979 pages RAM [ 483.104210] 0 pages HighMem/MovableOnly [ 483.108181] 335868 pages reserved [ 483.111719] 0 pages cma reserved [ 483.129354] oom_reaper: reaped process 25172 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 483.160823] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 483.172296] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 483.178148] CPU: 0 PID: 25172 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 483.186041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.195507] Call Trace: [ 483.198109] dump_stack+0x142/0x197 [ 483.201755] warn_alloc.cold+0x96/0x1af [ 483.205737] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 483.210592] ? call_timer_fn+0x670/0x670 [ 483.214780] __alloc_pages_slowpath+0x23c6/0x2930 [ 483.219804] ? warn_alloc+0xf0/0xf0 [ 483.223455] ? __might_sleep+0x93/0xb0 [ 483.227400] __alloc_pages_nodemask+0x62c/0x7a0 [ 483.232114] ? lock_downgrade+0x740/0x740 [ 483.236424] ? __alloc_pages_slowpath+0x2930/0x2930 [ 483.241882] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 483.247512] alloc_pages_current+0xec/0x1e0 [ 483.251836] ion_page_pool_alloc+0x11f/0x1c0 [ 483.256242] ion_system_heap_allocate+0x138/0x910 [ 483.261088] ? ion_alloc+0x19b/0x860 [ 483.264805] ? rcu_read_lock_sched_held+0x110/0x130 [ 483.270070] ? ion_system_heap_free+0x250/0x250 [ 483.274845] ion_alloc+0x222/0x860 [ 483.278439] ? ion_dma_buf_release+0x50/0x50 [ 483.282866] ? kasan_check_write+0x14/0x20 [ 483.287105] ? _copy_from_user+0x99/0x110 [ 483.291252] ion_ioctl+0x105/0x217 [ 483.294805] ? ion_alloc.cold+0x40/0x40 [ 483.298787] ? ion_alloc.cold+0x40/0x40 [ 483.302897] do_vfs_ioctl+0x7ae/0x1060 [ 483.306799] ? selinux_file_mprotect+0x5d0/0x5d0 [ 483.311549] ? lock_downgrade+0x740/0x740 [ 483.315711] ? ioctl_preallocate+0x1c0/0x1c0 [ 483.320125] ? __fget+0x237/0x370 [ 483.323597] ? security_file_ioctl+0x89/0xb0 [ 483.328099] SyS_ioctl+0x8f/0xc0 [ 483.331566] ? do_vfs_ioctl+0x1060/0x1060 [ 483.335823] do_syscall_64+0x1e8/0x640 [ 483.339763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.344677] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 483.349862] RIP: 0033:0x45b349 [ 483.353045] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.360756] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 483.368030] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 483.375291] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 483.382565] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 483.389984] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 483.416762] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 483.428211] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 483.433662] CPU: 0 PID: 25172 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 483.441575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.450977] Call Trace: [ 483.453559] dump_stack+0x142/0x197 [ 483.457194] warn_alloc.cold+0x96/0x1af [ 483.461258] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 483.466116] ? __alloc_pages_direct_compact+0xbc/0x380 [ 483.471489] __alloc_pages_slowpath+0x23c6/0x2930 [ 483.476332] ? save_trace+0x290/0x290 [ 483.480137] ? warn_alloc+0xf0/0xf0 [ 483.483783] ? __might_sleep+0x93/0xb0 [ 483.487670] __alloc_pages_nodemask+0x62c/0x7a0 [ 483.492434] ? lock_downgrade+0x740/0x740 [ 483.496571] ? __alloc_pages_slowpath+0x2930/0x2930 [ 483.501590] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 483.507223] alloc_pages_current+0xec/0x1e0 [ 483.511613] ion_page_pool_alloc+0x11f/0x1c0 [ 483.516023] ion_system_heap_allocate+0x138/0x910 [ 483.520871] ? ion_system_heap_free+0x250/0x250 [ 483.525660] ion_alloc+0x68c/0x860 [ 483.529318] ? ion_dma_buf_release+0x50/0x50 [ 483.533722] ? kasan_check_write+0x14/0x20 [ 483.537964] ? _copy_from_user+0x99/0x110 [ 483.542116] ion_ioctl+0x105/0x217 [ 483.545660] ? ion_alloc.cold+0x40/0x40 [ 483.549625] ? ion_alloc.cold+0x40/0x40 [ 483.553783] do_vfs_ioctl+0x7ae/0x1060 [ 483.557669] ? selinux_file_mprotect+0x5d0/0x5d0 [ 483.562420] ? lock_downgrade+0x740/0x740 [ 483.566574] ? ioctl_preallocate+0x1c0/0x1c0 [ 483.571151] ? __fget+0x237/0x370 [ 483.574598] ? security_file_ioctl+0x89/0xb0 [ 483.579035] SyS_ioctl+0x8f/0xc0 [ 483.582436] ? do_vfs_ioctl+0x1060/0x1060 [ 483.586600] do_syscall_64+0x1e8/0x640 [ 483.590495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.595386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 483.600572] RIP: 0033:0x45b349 [ 483.603772] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.611483] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 483.618831] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 483.626222] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 483.633558] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 483.640830] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 483.687291] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 483.701198] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 483.706583] CPU: 0 PID: 25172 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 483.714462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.723814] Call Trace: [ 483.726414] dump_stack+0x142/0x197 [ 483.730047] dump_header+0x177/0x6cd [ 483.733769] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 483.738870] ? ___ratelimit+0x55/0x537 [ 483.742789] oom_kill_process.cold+0x10/0xadd [ 483.747404] ? oom_unkillable_task+0x294/0x390 [ 483.751989] ? lock_downgrade+0x740/0x740 [ 483.756320] out_of_memory+0x2ee/0x1180 [ 483.760319] ? lock_acquire+0x16f/0x430 [ 483.764295] ? __lock_is_held+0xb6/0x140 [ 483.768358] ? oom_killer_disable+0x1d0/0x1d0 [ 483.772848] ? __alloc_pages_slowpath+0xca4/0x2930 [ 483.777777] __alloc_pages_slowpath+0x2251/0x2930 [ 483.782653] ? warn_alloc+0xf0/0xf0 [ 483.786286] ? __might_sleep+0x93/0xb0 [ 483.790232] __alloc_pages_nodemask+0x62c/0x7a0 [ 483.794895] ? check_preemption_disabled+0x3c/0x250 [ 483.799908] ? __alloc_pages_slowpath+0x2930/0x2930 [ 483.804924] ? policy_nodemask+0x53/0x150 [ 483.809066] ? policy_nodemask+0x5b/0x150 [ 483.813222] alloc_pages_current+0xec/0x1e0 [ 483.817561] ion_page_pool_alloc+0x11f/0x1c0 [ 483.821978] ion_system_heap_allocate+0x138/0x910 [ 483.826827] ? ion_system_heap_free+0x250/0x250 [ 483.831491] ion_alloc+0x68c/0x860 [ 483.835026] ? ion_dma_buf_release+0x50/0x50 [ 483.839432] ? kasan_check_write+0x14/0x20 [ 483.843718] ? _copy_from_user+0x99/0x110 [ 483.847974] ion_ioctl+0x105/0x217 [ 483.851573] ? ion_alloc.cold+0x40/0x40 [ 483.855540] ? ion_alloc.cold+0x40/0x40 [ 483.859577] do_vfs_ioctl+0x7ae/0x1060 [ 483.863474] ? selinux_file_mprotect+0x5d0/0x5d0 [ 483.868234] ? lock_downgrade+0x740/0x740 [ 483.872493] ? ioctl_preallocate+0x1c0/0x1c0 [ 483.876950] ? __fget+0x237/0x370 [ 483.880414] ? security_file_ioctl+0x89/0xb0 [ 483.884839] SyS_ioctl+0x8f/0xc0 [ 483.888197] ? do_vfs_ioctl+0x1060/0x1060 [ 483.892444] do_syscall_64+0x1e8/0x640 [ 483.896327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.901189] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 483.906469] RIP: 0033:0x45b349 [ 483.909656] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.917363] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 483.924790] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 483.932127] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 483.939392] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 483.946655] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 483.954802] Mem-Info: [ 483.957230] active_anon:496217 inactive_anon:584 isolated_anon:0 [ 483.957230] active_file:3926 inactive_file:6850 isolated_file:0 [ 483.957230] unevictable:0 dirty:14 writeback:14 unstable:0 [ 483.957230] slab_reclaimable:22341 slab_unreclaimable:159326 [ 483.957230] mapped:58388 shmem:637 pagetables:94064 bounce:0 [ 483.957230] free:665411 free_pcp:143 free_cma:0 [ 483.991266] Node 0 active_anon:1598172kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:8kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 484.019029] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.046140] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 484.051254] Node 0 DMA32 free:18076kB min:36380kB low:45472kB high:54564kB active_anon:1593816kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:16kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18336kB pagetables:41888kB bounce:0kB free_pcp:572kB local_pcp:120kB free_cma:0kB [ 484.081751] lowmem_reserve[]: 0 0 0 0 0 [ 484.085940] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.111252] lowmem_reserve[]: 0 0 0 0 0 [ 484.115252] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 484.130926] Node 0 DMA32: 411*4kB (M) 82*8kB (UME) 40*16kB (ME) 473*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 484.144428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 484.155400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.164476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 484.173127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.182094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 484.190870] 11422 total pagecache pages [ 484.194845] 0 pages in swap cache [ 484.198347] Swap cache stats: add 0, delete 0, find 0/0 [ 484.203753] Free swap = 0kB [ 484.206764] Total swap = 0kB [ 484.209773] 1965979 pages RAM [ 484.213539] 0 pages HighMem/MovableOnly [ 484.217514] 335868 pages reserved [ 484.221011] 0 pages cma reserved [ 484.224374] Out of memory: Kill process 8410 (syz-executor.4) score 1007 or sacrifice child [ 484.233183] Killed process 8411 (syz-executor.4) total-vm:72720kB, anon-rss:4248kB, file-rss:34688kB, shmem-rss:0kB [ 484.245231] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 484.256738] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 484.262171] CPU: 0 PID: 25172 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 484.270064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.279422] Call Trace: [ 484.282018] dump_stack+0x142/0x197 [ 484.285649] warn_alloc.cold+0x96/0x1af [ 484.289620] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 484.294483] ? wait_for_completion+0x420/0x420 [ 484.299061] __alloc_pages_slowpath+0x23c6/0x2930 [ 484.303910] ? warn_alloc+0xf0/0xf0 [ 484.307537] ? __might_sleep+0x93/0xb0 [ 484.311429] __alloc_pages_nodemask+0x62c/0x7a0 [ 484.316203] ? check_preemption_disabled+0x3c/0x250 [ 484.321228] ? __alloc_pages_slowpath+0x2930/0x2930 [ 484.326303] ? policy_nodemask+0x53/0x150 [ 484.330454] ? policy_nodemask+0x5b/0x150 [ 484.334610] alloc_pages_current+0xec/0x1e0 [ 484.338979] ion_page_pool_alloc+0x11f/0x1c0 [ 484.343392] ion_system_heap_allocate+0x138/0x910 [ 484.348238] ? ion_system_heap_free+0x250/0x250 [ 484.352996] ion_alloc+0x68c/0x860 [ 484.356562] ? ion_dma_buf_release+0x50/0x50 [ 484.360972] ? kasan_check_write+0x14/0x20 [ 484.365196] ? _copy_from_user+0x99/0x110 [ 484.369395] ion_ioctl+0x105/0x217 [ 484.372935] ? ion_alloc.cold+0x40/0x40 [ 484.376914] ? ion_alloc.cold+0x40/0x40 [ 484.383509] do_vfs_ioctl+0x7ae/0x1060 [ 484.387404] ? selinux_file_mprotect+0x5d0/0x5d0 [ 484.392159] ? lock_downgrade+0x740/0x740 [ 484.396313] ? ioctl_preallocate+0x1c0/0x1c0 [ 484.400729] ? __fget+0x237/0x370 [ 484.404188] ? security_file_ioctl+0x89/0xb0 [ 484.408595] SyS_ioctl+0x8f/0xc0 [ 484.411972] ? do_vfs_ioctl+0x1060/0x1060 [ 484.416118] do_syscall_64+0x1e8/0x640 [ 484.419997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 484.424847] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 484.430134] RIP: 0033:0x45b349 [ 484.433321] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.441038] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 484.448352] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 484.455617] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 484.462950] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 484.470220] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 484.478263] warn_alloc_show_mem: 2 callbacks suppressed [ 484.478267] Mem-Info: [ 484.486079] active_anon:496217 inactive_anon:584 isolated_anon:0 [ 484.486079] active_file:3927 inactive_file:6849 isolated_file:0 [ 484.486079] unevictable:0 dirty:15 writeback:0 unstable:0 [ 484.486079] slab_reclaimable:22341 slab_unreclaimable:159326 [ 484.486079] mapped:58388 shmem:637 pagetables:94027 bounce:0 [ 484.486079] free:665411 free_pcp:463 free_cma:0 [ 484.520762] Node 0 active_anon:1598172kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 484.548709] Node 1 active_anon:386696kB inactive_anon:1328kB active_file:15696kB inactive_file:27396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24648kB dirty:52kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 484.577126] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.604327] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 484.609358] Node 0 DMA32 free:18076kB min:36380kB low:45472kB high:54564kB active_anon:1593816kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18304kB pagetables:41740kB bounce:0kB free_pcp:704kB local_pcp:120kB free_cma:0kB [ 484.638509] lowmem_reserve[]: 0 0 0 0 0 [ 484.642639] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.668055] lowmem_reserve[]: 0 0 0 0 0 [ 484.672132] Node 1 Normal free:2633196kB min:53508kB low:66884kB high:80260kB active_anon:386696kB inactive_anon:1328kB active_file:15696kB inactive_file:27396kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100544kB pagetables:334128kB bounce:0kB free_pcp:1136kB local_pcp:464kB free_cma:0kB [ 484.702412] lowmem_reserve[]: 0 0 0 0 0 [ 484.706411] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 484.722104] Node 0 DMA32: 411*4kB (M) 83*8kB (UME) 40*16kB (ME) 474*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 484.736039] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 484.747251] Node 1 Normal: 79*4kB (UM) 64*8kB (UM) 15*16kB (UM) 9*32kB (UE) 12*64kB (U) 17*128kB (U) 5*256kB (UE) 2*512kB (U) 1*1024kB (E) 2*2048kB (UM) 640*4096kB (M) = 2633164kB [ 484.763730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.772623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 484.781344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 22:03:58 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:03:58 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:58 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:58 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 484.790221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 484.799023] 11422 total pagecache pages [ 484.803055] 0 pages in swap cache [ 484.806602] Swap cache stats: add 0, delete 0, find 0/0 [ 484.812016] Free swap = 0kB [ 484.815031] Total swap = 0kB [ 484.818040] 1965979 pages RAM [ 484.821336] 0 pages HighMem/MovableOnly [ 484.825315] 335868 pages reserved [ 484.828749] 0 pages cma reserved [ 484.895701] audit: type=1804 audit(1580076238.686:1825): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/559/file0" dev="sda1" ino=21053 res=1 [ 484.941219] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 22:03:58 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:03:58 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x8]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:58 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:03:59 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 485.303148] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 485.346636] audit: type=1804 audit(1580076239.146:1826): pid=25235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/560/file0" dev="sda1" ino=19759 res=1 [ 485.349916] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 485.396586] CPU: 1 PID: 25228 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 485.404506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.413888] Call Trace: [ 485.416482] dump_stack+0x142/0x197 [ 485.420119] warn_alloc.cold+0x96/0x1af [ 485.424114] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 485.428970] ? __alloc_pages_direct_compact+0xbc/0x380 [ 485.434254] __alloc_pages_slowpath+0x23c6/0x2930 [ 485.439109] ? save_trace+0x290/0x290 [ 485.442917] ? warn_alloc+0xf0/0xf0 [ 485.446581] ? __might_sleep+0x93/0xb0 [ 485.450478] __alloc_pages_nodemask+0x62c/0x7a0 [ 485.455152] ? lock_downgrade+0x740/0x740 [ 485.459303] ? __alloc_pages_slowpath+0x2930/0x2930 [ 485.464331] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 485.469972] alloc_pages_current+0xec/0x1e0 [ 485.474305] ion_page_pool_alloc+0x11f/0x1c0 [ 485.478723] ion_system_heap_allocate+0x138/0x910 [ 485.483573] ? ion_alloc+0x19b/0x860 [ 485.487312] ? rcu_read_lock_sched_held+0x110/0x130 [ 485.492353] ? ion_system_heap_free+0x250/0x250 [ 485.497034] ion_alloc+0x222/0x860 [ 485.500589] ? ion_dma_buf_release+0x50/0x50 [ 485.505008] ? kasan_check_write+0x14/0x20 [ 485.509249] ? _copy_from_user+0x99/0x110 [ 485.513404] ion_ioctl+0x105/0x217 [ 485.516952] ? ion_alloc.cold+0x40/0x40 [ 485.521094] ? ion_alloc.cold+0x40/0x40 [ 485.525078] do_vfs_ioctl+0x7ae/0x1060 [ 485.528973] ? selinux_file_mprotect+0x5d0/0x5d0 [ 485.533738] ? lock_downgrade+0x740/0x740 [ 485.537901] ? ioctl_preallocate+0x1c0/0x1c0 [ 485.542320] ? __fget+0x237/0x370 [ 485.545786] ? security_file_ioctl+0x89/0xb0 [ 485.550237] SyS_ioctl+0x8f/0xc0 [ 485.553632] ? do_vfs_ioctl+0x1060/0x1060 [ 485.557791] do_syscall_64+0x1e8/0x640 [ 485.561688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 485.566547] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 485.571741] RIP: 0033:0x45b349 [ 485.574941] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.582659] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 485.589936] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 22:03:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 485.597215] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 485.604498] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 485.611777] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 485.636305] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 485.877751] audit: type=1804 audit(1580076239.676:1827): pid=25257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/561/file0" dev="sda1" ino=21118 res=1 [ 485.935555] Mem-Info: [ 485.958700] active_anon:496562 inactive_anon:582 isolated_anon:0 [ 485.958700] active_file:3928 inactive_file:6868 isolated_file:0 [ 485.958700] unevictable:0 dirty:73 writeback:0 unstable:0 [ 485.958700] slab_reclaimable:22348 slab_unreclaimable:159418 [ 485.958700] mapped:58415 shmem:637 pagetables:94405 bounce:0 [ 485.958700] free:669163 free_pcp:192 free_cma:0 [ 486.077672] Node 0 active_anon:1598160kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 486.136480] Node 0 DMA free:10488kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.176662] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 486.184988] Node 0 DMA32 free:36324kB min:36380kB low:45472kB high:54564kB active_anon:1593804kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18304kB pagetables:41784kB bounce:0kB free_pcp:756kB local_pcp:588kB free_cma:0kB [ 486.250174] lowmem_reserve[]: 0 0 0 0 0 [ 486.266816] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.296813] lowmem_reserve[]: 0 0 0 0 0 [ 486.301209] Node 0 DMA: 4*4kB (UME) 7*8kB (UE) 9*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10488kB [ 486.317079] Node 0 DMA32: 1483*4kB (UM) 89*8kB (UME) 867*16kB (UME) 495*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36356kB [ 486.331693] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 486.342691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.351613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 486.360248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.369354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 486.378163] 11446 total pagecache pages [ 486.382261] 0 pages in swap cache [ 486.385725] Swap cache stats: add 0, delete 0, find 0/0 [ 486.391208] Free swap = 0kB [ 486.394228] Total swap = 0kB [ 486.397242] 1965979 pages RAM [ 486.400530] 0 pages HighMem/MovableOnly [ 486.404614] 335868 pages reserved [ 486.408136] 0 pages cma reserved [ 486.419518] oom_reaper: reaped process 25228 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 486.454197] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 486.467769] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 486.473247] CPU: 1 PID: 25228 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 486.481297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.490746] Call Trace: [ 486.493331] dump_stack+0x142/0x197 [ 486.497063] dump_header+0x177/0x6cd [ 486.500771] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 486.506050] ? ___ratelimit+0x55/0x537 [ 486.509992] oom_kill_process.cold+0x10/0xadd [ 486.514483] ? rcu_read_unlock_special+0x895/0xd40 [ 486.519528] ? lock_downgrade+0x740/0x740 [ 486.523676] out_of_memory+0x2ee/0x1180 [ 486.527642] ? lock_acquire+0x16f/0x430 [ 486.531615] ? __lock_is_held+0xb6/0x140 [ 486.535672] ? oom_killer_disable+0x1d0/0x1d0 [ 486.540252] ? __alloc_pages_slowpath+0xca4/0x2930 [ 486.545420] __alloc_pages_slowpath+0x2251/0x2930 [ 486.550283] ? warn_alloc+0xf0/0xf0 [ 486.553912] ? __might_sleep+0x93/0xb0 [ 486.557793] __alloc_pages_nodemask+0x62c/0x7a0 [ 486.562607] ? lock_downgrade+0x740/0x740 [ 486.566868] ? __alloc_pages_slowpath+0x2930/0x2930 [ 486.571889] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 486.577643] alloc_pages_current+0xec/0x1e0 [ 486.582190] ion_page_pool_alloc+0x11f/0x1c0 [ 486.586861] ion_system_heap_allocate+0x138/0x910 [ 486.591740] ? ion_alloc+0x19b/0x860 [ 486.595478] ? rcu_read_lock_sched_held+0x110/0x130 [ 486.600591] ? ion_system_heap_free+0x250/0x250 [ 486.605260] ion_alloc+0x222/0x860 [ 486.608937] ? ion_dma_buf_release+0x50/0x50 [ 486.613344] ? kasan_check_write+0x14/0x20 [ 486.617576] ? _copy_from_user+0x99/0x110 [ 486.621724] ion_ioctl+0x105/0x217 [ 486.625263] ? ion_alloc.cold+0x40/0x40 [ 486.629240] ? ion_alloc.cold+0x40/0x40 [ 486.633207] do_vfs_ioctl+0x7ae/0x1060 [ 486.637267] ? selinux_file_mprotect+0x5d0/0x5d0 [ 486.642038] ? lock_downgrade+0x740/0x740 [ 486.646195] ? ioctl_preallocate+0x1c0/0x1c0 [ 486.650599] ? __fget+0x237/0x370 [ 486.654055] ? security_file_ioctl+0x89/0xb0 [ 486.658627] SyS_ioctl+0x8f/0xc0 [ 486.662052] ? do_vfs_ioctl+0x1060/0x1060 [ 486.666204] do_syscall_64+0x1e8/0x640 [ 486.670090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 486.675038] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 486.680216] RIP: 0033:0x45b349 [ 486.684531] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.692235] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 486.699513] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 486.707128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 486.714468] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 486.721737] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 486.729677] Mem-Info: [ 486.732156] active_anon:496539 inactive_anon:586 isolated_anon:0 [ 486.732156] active_file:3936 inactive_file:6876 isolated_file:0 [ 486.732156] unevictable:0 dirty:101 writeback:0 unstable:0 [ 486.732156] slab_reclaimable:22376 slab_unreclaimable:159288 [ 486.732156] mapped:58388 shmem:637 pagetables:94344 bounce:0 [ 486.732156] free:664733 free_pcp:92 free_cma:0 [ 486.765928] Node 0 active_anon:1598160kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1392640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 486.793784] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.820514] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 486.825672] Node 0 DMA32 free:18128kB min:36380kB low:45472kB high:54564kB active_anon:1593804kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18304kB pagetables:41784kB bounce:0kB free_pcp:368kB local_pcp:204kB free_cma:0kB [ 486.854896] lowmem_reserve[]: 0 0 0 0 0 [ 486.858901] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.884242] lowmem_reserve[]: 0 0 0 0 0 [ 486.888237] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 4*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 486.896101] NOHZ: local_softirq_pending 08 [ 486.904001] Node 0 DMA32: 440*4kB (UM) 84*8kB (UME) 51*16kB (UME) 465*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18128kB [ 486.921719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 486.932655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.941540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 486.950172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.959015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 486.967667] 11454 total pagecache pages [ 486.971678] 0 pages in swap cache [ 486.975118] Swap cache stats: add 0, delete 0, find 0/0 [ 486.980547] Free swap = 0kB [ 486.983562] Total swap = 0kB [ 486.986576] 1965979 pages RAM [ 486.989666] 0 pages HighMem/MovableOnly [ 486.993669] 335868 pages reserved [ 486.997219] 0 pages cma reserved [ 487.000640] Out of memory: Kill process 8410 (syz-executor.4) score 1007 or sacrifice child [ 487.009197] Killed process 8410 (syz-executor.4) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 487.021304] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 487.028603] oom_reaper: reaped process 8410 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 487.032748] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 487.048156] CPU: 1 PID: 25228 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 487.056135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.065493] Call Trace: [ 487.068073] dump_stack+0x142/0x197 [ 487.071690] warn_alloc.cold+0x96/0x1af [ 487.075649] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 487.080490] ? wait_for_completion+0x420/0x420 [ 487.085069] __alloc_pages_slowpath+0x23c6/0x2930 [ 487.089939] ? warn_alloc+0xf0/0xf0 [ 487.093571] ? __might_sleep+0x93/0xb0 [ 487.097499] __alloc_pages_nodemask+0x62c/0x7a0 [ 487.102181] ? lock_downgrade+0x740/0x740 [ 487.106328] ? __alloc_pages_slowpath+0x2930/0x2930 [ 487.111411] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 487.117034] alloc_pages_current+0xec/0x1e0 [ 487.121358] ion_page_pool_alloc+0x11f/0x1c0 [ 487.125773] ion_system_heap_allocate+0x138/0x910 [ 487.130661] ? ion_alloc+0x19b/0x860 [ 487.134377] ? rcu_read_lock_sched_held+0x110/0x130 [ 487.139425] ? ion_system_heap_free+0x250/0x250 [ 487.144091] ion_alloc+0x222/0x860 [ 487.147627] ? ion_dma_buf_release+0x50/0x50 [ 487.152028] ? kasan_check_write+0x14/0x20 [ 487.156266] ? _copy_from_user+0x99/0x110 [ 487.160411] ion_ioctl+0x105/0x217 [ 487.163947] ? ion_alloc.cold+0x40/0x40 [ 487.167949] ? ion_alloc.cold+0x40/0x40 [ 487.172006] do_vfs_ioctl+0x7ae/0x1060 [ 487.175889] ? selinux_file_mprotect+0x5d0/0x5d0 [ 487.180639] ? lock_downgrade+0x740/0x740 [ 487.184828] ? ioctl_preallocate+0x1c0/0x1c0 [ 487.189233] ? __fget+0x237/0x370 [ 487.192682] ? security_file_ioctl+0x89/0xb0 [ 487.197114] SyS_ioctl+0x8f/0xc0 [ 487.200570] ? do_vfs_ioctl+0x1060/0x1060 [ 487.204707] do_syscall_64+0x1e8/0x640 [ 487.208694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 487.213575] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 487.218763] RIP: 0033:0x45b349 [ 487.221989] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.229689] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 487.236955] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 487.244240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 487.251502] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 487.258759] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 487.266513] Mem-Info: [ 487.268931] active_anon:495494 inactive_anon:584 isolated_anon:0 [ 487.268931] active_file:3937 inactive_file:6881 isolated_file:0 [ 487.268931] unevictable:0 dirty:112 writeback:0 unstable:0 [ 487.268931] slab_reclaimable:22377 slab_unreclaimable:159292 [ 487.268931] mapped:58388 shmem:637 pagetables:94330 bounce:0 [ 487.268931] free:665761 free_pcp:429 free_cma:0 [ 487.303059] Node 0 active_anon:1593940kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1388544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 487.330865] Node 1 active_anon:388036kB inactive_anon:1328kB active_file:15736kB inactive_file:27524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24648kB dirty:440kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 487.358809] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.385553] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 487.390666] Node 0 DMA32 free:22256kB min:36380kB low:45472kB high:54564kB active_anon:1589584kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18272kB pagetables:41676kB bounce:0kB free_pcp:628kB local_pcp:204kB free_cma:0kB [ 487.419849] lowmem_reserve[]: 0 0 0 0 0 [ 487.423921] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.449439] lowmem_reserve[]: 0 0 0 0 0 [ 487.453581] Node 1 Normal free:2630420kB min:53508kB low:66884kB high:80260kB active_anon:388036kB inactive_anon:1328kB active_file:15736kB inactive_file:27524kB unevictable:0kB writepending:440kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100928kB pagetables:335404kB bounce:0kB free_pcp:1212kB local_pcp:560kB free_cma:0kB [ 487.484133] lowmem_reserve[]: 0 0 0 0 0 [ 487.488138] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 4*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 487.503987] Node 0 DMA32: 440*4kB (UM) 84*8kB (UME) 51*16kB (UME) 466*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22256kB [ 487.518080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.529385] Node 1 Normal: 25*4kB (UME) 62*8kB (UM) 24*16kB (UM) 20*32kB (UM) 9*64kB (U) 7*128kB (U) 5*256kB (UE) 3*512kB (UM) 1*1024kB (E) 1*2048kB (U) 640*4096kB (M) = 2630420kB [ 487.545723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.554755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.563394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.572381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 487.581128] 11457 total pagecache pages [ 487.585098] 0 pages in swap cache [ 487.588535] Swap cache stats: add 0, delete 0, find 0/0 [ 487.593932] Free swap = 0kB [ 487.596986] Total swap = 0kB [ 487.599991] 1965979 pages RAM [ 487.603177] 0 pages HighMem/MovableOnly [ 487.607144] 335868 pages reserved [ 487.610655] 0 pages cma reserved [ 487.631697] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 487.643193] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 487.648587] CPU: 1 PID: 25228 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 487.656532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.666036] Call Trace: [ 487.668635] dump_stack+0x142/0x197 [ 487.672279] warn_alloc.cold+0x96/0x1af [ 487.676265] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 487.681109] ? __alloc_pages_direct_compact+0xbc/0x380 [ 487.686421] __alloc_pages_slowpath+0x23c6/0x2930 [ 487.691269] ? save_trace+0x290/0x290 [ 487.695058] ? warn_alloc+0xf0/0xf0 [ 487.698883] ? __might_sleep+0x93/0xb0 [ 487.702775] __alloc_pages_nodemask+0x62c/0x7a0 [ 487.707433] ? lock_downgrade+0x740/0x740 [ 487.711578] ? __alloc_pages_slowpath+0x2930/0x2930 [ 487.716588] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 487.722321] alloc_pages_current+0xec/0x1e0 [ 487.726667] ion_page_pool_alloc+0x11f/0x1c0 [ 487.731069] ion_system_heap_allocate+0x138/0x910 [ 487.735922] ? ion_system_heap_free+0x250/0x250 [ 487.740720] ion_alloc+0x68c/0x860 [ 487.744253] ? ion_dma_buf_release+0x50/0x50 [ 487.748717] ? kasan_check_write+0x14/0x20 [ 487.752976] ? _copy_from_user+0x99/0x110 [ 487.757133] ion_ioctl+0x105/0x217 [ 487.760670] ? ion_alloc.cold+0x40/0x40 [ 487.764652] ? ion_alloc.cold+0x40/0x40 [ 487.768636] do_vfs_ioctl+0x7ae/0x1060 [ 487.772535] ? selinux_file_mprotect+0x5d0/0x5d0 [ 487.777283] ? lock_downgrade+0x740/0x740 [ 487.781436] ? ioctl_preallocate+0x1c0/0x1c0 [ 487.785852] ? __fget+0x237/0x370 [ 487.789303] ? security_file_ioctl+0x89/0xb0 [ 487.793711] SyS_ioctl+0x8f/0xc0 [ 487.797082] ? do_vfs_ioctl+0x1060/0x1060 [ 487.801317] do_syscall_64+0x1e8/0x640 [ 487.805195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 487.810049] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 487.815237] RIP: 0033:0x45b349 [ 487.818426] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.826133] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 487.833473] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 487.840835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 487.848106] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 487.855373] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 487.903514] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 487.916609] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 487.922115] CPU: 1 PID: 25228 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 487.930005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.939537] Call Trace: [ 487.942133] dump_stack+0x142/0x197 [ 487.945762] dump_header+0x177/0x6cd [ 487.949467] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 487.954764] ? ___ratelimit+0x55/0x537 [ 487.958648] oom_kill_process.cold+0x10/0xadd [ 487.963149] ? oom_unkillable_task+0x294/0x390 [ 487.967727] ? lock_downgrade+0x740/0x740 [ 487.971866] out_of_memory+0x2ee/0x1180 [ 487.975836] ? lock_acquire+0x16f/0x430 [ 487.979819] ? __lock_is_held+0xb6/0x140 [ 487.983881] ? oom_killer_disable+0x1d0/0x1d0 [ 487.988363] ? __alloc_pages_slowpath+0xca4/0x2930 [ 487.993438] __alloc_pages_slowpath+0x2251/0x2930 [ 487.998282] ? warn_alloc+0xf0/0xf0 [ 488.001925] ? __might_sleep+0x93/0xb0 [ 488.005814] __alloc_pages_nodemask+0x62c/0x7a0 [ 488.010516] ? lock_downgrade+0x740/0x740 [ 488.014735] ? __alloc_pages_slowpath+0x2930/0x2930 [ 488.019761] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 488.025404] alloc_pages_current+0xec/0x1e0 [ 488.029731] ion_page_pool_alloc+0x11f/0x1c0 [ 488.034137] ion_system_heap_allocate+0x138/0x910 [ 488.038971] ? ion_system_heap_free+0x250/0x250 [ 488.043753] ion_alloc+0x68c/0x860 [ 488.047387] ? ion_dma_buf_release+0x50/0x50 [ 488.051807] ? kasan_check_write+0x14/0x20 [ 488.056097] ? _copy_from_user+0x99/0x110 [ 488.060241] ion_ioctl+0x105/0x217 [ 488.064132] ? ion_alloc.cold+0x40/0x40 [ 488.068149] ? ion_alloc.cold+0x40/0x40 [ 488.072126] do_vfs_ioctl+0x7ae/0x1060 [ 488.076010] ? selinux_file_mprotect+0x5d0/0x5d0 [ 488.080753] ? lock_downgrade+0x740/0x740 [ 488.084900] ? ioctl_preallocate+0x1c0/0x1c0 [ 488.089309] ? __fget+0x237/0x370 [ 488.092758] ? security_file_ioctl+0x89/0xb0 [ 488.097158] SyS_ioctl+0x8f/0xc0 [ 488.100549] ? do_vfs_ioctl+0x1060/0x1060 [ 488.104689] do_syscall_64+0x1e8/0x640 [ 488.108561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 488.113440] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 488.118617] RIP: 0033:0x45b349 [ 488.121798] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.129546] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 488.136868] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 488.144193] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 488.151518] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 488.158788] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 488.167022] Mem-Info: [ 488.167987] NOHZ: local_softirq_pending 08 [ 488.169475] active_anon:495494 inactive_anon:584 isolated_anon:0 [ 488.169475] active_file:3935 inactive_file:6894 isolated_file:0 [ 488.169475] unevictable:0 dirty:12 writeback:0 unstable:0 [ 488.169475] slab_reclaimable:22377 slab_unreclaimable:159345 [ 488.169475] mapped:58388 shmem:637 pagetables:94330 bounce:0 [ 488.169475] free:664662 free_pcp:136 free_cma:0 [ 488.207824] Node 0 active_anon:1593940kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1388544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 488.235511] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.262675] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 488.267716] Node 0 DMA32 free:18176kB min:36380kB low:45472kB high:54564kB active_anon:1589584kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18272kB pagetables:41676kB bounce:0kB free_pcp:548kB local_pcp:120kB free_cma:0kB [ 488.297021] lowmem_reserve[]: 0 0 0 0 0 [ 488.301100] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.326799] lowmem_reserve[]: 0 0 0 0 0 [ 488.330954] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 4*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 488.346690] Node 0 DMA32: 440*4kB (ME) 89*8kB (UME) 50*16kB (ME) 466*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18184kB [ 488.360189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 488.371144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.379986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.388673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.397608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.406365] 11498 total pagecache pages [ 488.410391] 0 pages in swap cache [ 488.413846] Swap cache stats: add 0, delete 0, find 0/0 [ 488.419257] Free swap = 0kB [ 488.422336] Total swap = 0kB [ 488.425459] 1965979 pages RAM [ 488.428616] 0 pages HighMem/MovableOnly [ 488.432638] 335868 pages reserved [ 488.436131] 0 pages cma reserved [ 488.439559] Out of memory: Kill process 9908 (syz-executor.4) score 1007 or sacrifice child [ 488.448203] Killed process 9908 (syz-executor.4) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 488.460275] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 488.470552] oom_reaper: reaped process 9908 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 488.471710] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 488.487146] CPU: 1 PID: 25228 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 488.495025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.504375] Call Trace: [ 488.506949] dump_stack+0x142/0x197 [ 488.510561] warn_alloc.cold+0x96/0x1af [ 488.514515] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 488.519343] ? wait_for_completion+0x420/0x420 [ 488.524048] __alloc_pages_slowpath+0x23c6/0x2930 [ 488.528894] ? warn_alloc+0xf0/0xf0 [ 488.532529] ? __might_sleep+0x93/0xb0 [ 488.536403] __alloc_pages_nodemask+0x62c/0x7a0 [ 488.541056] ? lock_downgrade+0x740/0x740 [ 488.545183] ? __alloc_pages_slowpath+0x2930/0x2930 [ 488.550197] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 488.555816] alloc_pages_current+0xec/0x1e0 [ 488.560134] ion_page_pool_alloc+0x11f/0x1c0 [ 488.564524] ion_system_heap_allocate+0x138/0x910 [ 488.569367] ? ion_system_heap_free+0x250/0x250 [ 488.574028] ion_alloc+0x68c/0x860 [ 488.577571] ? ion_dma_buf_release+0x50/0x50 [ 488.581982] ? kasan_check_write+0x14/0x20 [ 488.586208] ? _copy_from_user+0x99/0x110 [ 488.590385] ion_ioctl+0x105/0x217 [ 488.593909] ? ion_alloc.cold+0x40/0x40 [ 488.597886] ? ion_alloc.cold+0x40/0x40 [ 488.601853] do_vfs_ioctl+0x7ae/0x1060 [ 488.605730] ? selinux_file_mprotect+0x5d0/0x5d0 [ 488.610470] ? lock_downgrade+0x740/0x740 [ 488.614602] ? ioctl_preallocate+0x1c0/0x1c0 [ 488.619041] ? __fget+0x237/0x370 [ 488.622490] ? security_file_ioctl+0x89/0xb0 [ 488.626975] SyS_ioctl+0x8f/0xc0 [ 488.630338] ? do_vfs_ioctl+0x1060/0x1060 [ 488.634505] do_syscall_64+0x1e8/0x640 [ 488.638374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 488.643201] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 488.648371] RIP: 0033:0x45b349 [ 488.651540] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.659226] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 488.666489] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 488.673764] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 488.681084] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 488.688456] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 488.696160] warn_alloc_show_mem: 1 callbacks suppressed [ 488.696163] Mem-Info: [ 488.704034] active_anon:494958 inactive_anon:584 isolated_anon:0 [ 488.704034] active_file:3955 inactive_file:6908 isolated_file:0 [ 488.704034] unevictable:0 dirty:18 writeback:0 unstable:0 [ 488.704034] slab_reclaimable:22378 slab_unreclaimable:159352 [ 488.704034] mapped:58398 shmem:637 pagetables:94303 bounce:0 [ 488.704034] free:665166 free_pcp:443 free_cma:0 [ 488.737833] Node 0 active_anon:1591796kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1386496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 488.765588] Node 1 active_anon:388036kB inactive_anon:1328kB active_file:15808kB inactive_file:27632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:72kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 488.793345] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.820386] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 488.825438] Node 0 DMA32 free:20256kB min:36380kB low:45472kB high:54564kB active_anon:1587440kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18240kB pagetables:41568kB bounce:0kB free_pcp:772kB local_pcp:120kB free_cma:0kB [ 488.854804] lowmem_reserve[]: 0 0 0 0 0 [ 488.858849] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 488.884201] lowmem_reserve[]: 0 0 0 0 0 [ 488.888199] Node 1 Normal free:2630040kB min:53508kB low:66884kB high:80260kB active_anon:388036kB inactive_anon:1328kB active_file:15808kB inactive_file:27632kB unevictable:0kB writepending:72kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:100928kB pagetables:335404kB bounce:0kB free_pcp:1124kB local_pcp:516kB free_cma:0kB [ 488.919018] lowmem_reserve[]: 0 0 0 0 0 [ 488.923067] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 4*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 488.939016] Node 0 DMA32: 440*4kB (ME) 89*8kB (UME) 50*16kB (ME) 467*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20264kB [ 488.952965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 488.963741] Node 1 Normal: 24*4kB (UM) 61*8kB (UME) 11*16kB (UM) 19*32kB (UM) 9*64kB (U) 8*128kB (UE) 4*256kB (U) 3*512kB (UM) 1*1024kB (E) 1*2048kB (U) 640*4096kB (M) = 2630040kB [ 488.980148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 488.988984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 488.997639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 22:04:02 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:04:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:02 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000340)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:02 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:02 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x8]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:02 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 489.006535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 489.015168] 11505 total pagecache pages [ 489.019144] 0 pages in swap cache [ 489.022678] Swap cache stats: add 0, delete 0, find 0/0 [ 489.028044] Free swap = 0kB [ 489.031121] Total swap = 0kB [ 489.034131] 1965979 pages RAM [ 489.037224] 0 pages HighMem/MovableOnly [ 489.041622] 335868 pages reserved [ 489.045076] 0 pages cma reserved [ 489.108666] audit: type=1804 audit(1580076242.906:1828): pid=25274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/562/file0" dev="sda1" ino=21375 res=1 [ 489.139667] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 22:04:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x8]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:03 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:03 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:03 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000340)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 489.511790] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 489.531684] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 489.537240] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 489.545125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.554574] Call Trace: [ 489.557170] dump_stack+0x142/0x197 [ 489.560932] warn_alloc.cold+0x96/0x1af [ 489.564912] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 489.569769] ? __alloc_pages_direct_compact+0xbc/0x380 [ 489.575096] __alloc_pages_slowpath+0x23c6/0x2930 [ 489.579972] ? save_trace+0x290/0x290 [ 489.583916] ? warn_alloc+0xf0/0xf0 [ 489.587569] ? __might_sleep+0x93/0xb0 [ 489.591468] __alloc_pages_nodemask+0x62c/0x7a0 [ 489.596147] ? lock_downgrade+0x740/0x740 [ 489.600310] ? __alloc_pages_slowpath+0x2930/0x2930 [ 489.605449] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 489.611093] alloc_pages_current+0xec/0x1e0 [ 489.615521] ion_page_pool_alloc+0x11f/0x1c0 [ 489.619954] ion_system_heap_allocate+0x138/0x910 [ 489.624806] ? ion_alloc+0x19b/0x860 [ 489.628636] ? rcu_read_lock_sched_held+0x110/0x130 [ 489.633800] ? ion_system_heap_free+0x250/0x250 [ 489.638481] ion_alloc+0x222/0x860 [ 489.642138] ? ion_dma_buf_release+0x50/0x50 [ 489.646576] ? kasan_check_write+0x14/0x20 [ 489.650820] ? _copy_from_user+0x99/0x110 [ 489.654977] ion_ioctl+0x105/0x217 [ 489.658528] ? ion_alloc.cold+0x40/0x40 [ 489.662600] ? ion_alloc.cold+0x40/0x40 [ 489.666581] do_vfs_ioctl+0x7ae/0x1060 [ 489.670599] ? selinux_file_mprotect+0x5d0/0x5d0 [ 489.674938] audit: type=1804 audit(1580076243.336:1829): pid=25303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/563/file0" dev="sda1" ino=21378 res=1 [ 489.675364] ? lock_downgrade+0x740/0x740 [ 489.675380] ? ioctl_preallocate+0x1c0/0x1c0 [ 489.675393] ? __fget+0x237/0x370 [ 489.675412] ? security_file_ioctl+0x89/0xb0 [ 489.719615] SyS_ioctl+0x8f/0xc0 [ 489.722990] ? do_vfs_ioctl+0x1060/0x1060 [ 489.727168] do_syscall_64+0x1e8/0x640 [ 489.731060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 489.735909] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 489.741106] RIP: 0033:0x45b349 [ 489.744305] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.752024] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 22:04:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 489.759302] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 489.766589] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 489.773863] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 489.781256] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 489.886083] Mem-Info: [ 489.893931] active_anon:495355 inactive_anon:583 isolated_anon:0 [ 489.893931] active_file:3955 inactive_file:6916 isolated_file:0 [ 489.893931] unevictable:0 dirty:113 writeback:0 unstable:0 [ 489.893931] slab_reclaimable:22380 slab_unreclaimable:159199 [ 489.893931] mapped:58425 shmem:637 pagetables:94645 bounce:0 [ 489.893931] free:668365 free_pcp:300 free_cma:0 [ 489.934286] Node 0 active_anon:1591796kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1386496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 489.996938] Node 0 DMA free:10492kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.027981] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 490.035167] Node 0 DMA32 free:36380kB min:36380kB low:45472kB high:54564kB active_anon:1587440kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18240kB pagetables:41568kB bounce:0kB free_pcp:1188kB local_pcp:696kB free_cma:0kB [ 490.074924] lowmem_reserve[]: 0 0 0 0 0 [ 490.084864] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.125410] audit: type=1804 audit(1580076243.926:1830): pid=25320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/564/file0" dev="sda1" ino=21425 res=1 [ 490.222647] lowmem_reserve[]: 0 0 0 0 0 [ 490.239021] Node 0 DMA: 3*4kB (ME) 6*8kB (UE) 10*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10492kB [ 490.301219] Node 0 DMA32: 1489*4kB (UM) 83*8kB (UM) 867*16kB (UME) 494*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36300kB [ 490.328691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 490.339796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.348886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.357978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.367008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 490.375936] 11516 total pagecache pages [ 490.379957] 0 pages in swap cache [ 490.383479] Swap cache stats: add 0, delete 0, find 0/0 [ 490.389039] Free swap = 0kB [ 490.392126] Total swap = 0kB [ 490.395317] 1965979 pages RAM [ 490.398419] 0 pages HighMem/MovableOnly [ 490.402569] 335868 pages reserved [ 490.406202] 0 pages cma reserved [ 490.425328] oom_reaper: reaped process 25292 (syz-executor.0), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 490.557744] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 490.570863] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 490.576269] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 490.584145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.593501] Call Trace: [ 490.596328] dump_stack+0x142/0x197 [ 490.599981] dump_header+0x177/0x6cd [ 490.603721] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 490.608843] ? ___ratelimit+0x55/0x537 [ 490.612741] oom_kill_process.cold+0x10/0xadd [ 490.617227] ? rcu_read_unlock_special+0x895/0xd40 [ 490.622274] ? lock_downgrade+0x740/0x740 [ 490.627738] out_of_memory+0x2ee/0x1180 [ 490.631719] ? lock_acquire+0x16f/0x430 [ 490.635691] ? __lock_is_held+0xb6/0x140 [ 490.639817] ? oom_killer_disable+0x1d0/0x1d0 [ 490.644313] ? __alloc_pages_slowpath+0xca4/0x2930 [ 490.649238] __alloc_pages_slowpath+0x2251/0x2930 [ 490.654125] ? warn_alloc+0xf0/0xf0 [ 490.657765] ? __might_sleep+0x93/0xb0 [ 490.661648] __alloc_pages_nodemask+0x62c/0x7a0 [ 490.666336] ? lock_downgrade+0x740/0x740 [ 490.670482] ? __alloc_pages_slowpath+0x2930/0x2930 [ 490.675515] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 490.681140] alloc_pages_current+0xec/0x1e0 [ 490.685471] ion_page_pool_alloc+0x11f/0x1c0 [ 490.689879] ion_system_heap_allocate+0x138/0x910 [ 490.694712] ? ion_alloc+0x19b/0x860 [ 490.698421] ? rcu_read_lock_sched_held+0x110/0x130 [ 490.703438] ? ion_system_heap_free+0x250/0x250 [ 490.708106] ion_alloc+0x222/0x860 [ 490.711817] ? ion_dma_buf_release+0x50/0x50 [ 490.716221] ? kasan_check_write+0x14/0x20 [ 490.720462] ? _copy_from_user+0x99/0x110 [ 490.724740] ion_ioctl+0x105/0x217 [ 490.728268] ? ion_alloc.cold+0x40/0x40 [ 490.732239] ? ion_alloc.cold+0x40/0x40 [ 490.736261] do_vfs_ioctl+0x7ae/0x1060 [ 490.740201] ? selinux_file_mprotect+0x5d0/0x5d0 [ 490.745008] ? lock_downgrade+0x740/0x740 [ 490.749504] ? ioctl_preallocate+0x1c0/0x1c0 [ 490.753915] ? __fget+0x237/0x370 [ 490.757369] ? security_file_ioctl+0x89/0xb0 [ 490.761892] SyS_ioctl+0x8f/0xc0 [ 490.765246] ? do_vfs_ioctl+0x1060/0x1060 [ 490.769423] do_syscall_64+0x1e8/0x640 [ 490.773364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 490.778239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 490.783415] RIP: 0033:0x45b349 [ 490.786594] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.794303] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 490.801999] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 490.809262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 490.816587] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 490.823849] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 490.831477] Mem-Info: [ 490.833893] active_anon:495352 inactive_anon:584 isolated_anon:0 [ 490.833893] active_file:3961 inactive_file:6923 isolated_file:0 [ 490.833893] unevictable:0 dirty:8 writeback:0 unstable:0 [ 490.833893] slab_reclaimable:22425 slab_unreclaimable:159260 [ 490.833893] mapped:58398 shmem:637 pagetables:94637 bounce:0 [ 490.833893] free:663749 free_pcp:171 free_cma:0 [ 490.867587] Node 0 active_anon:1591796kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1386496kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 490.895440] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.922478] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 490.927528] Node 0 DMA32 free:18092kB min:36380kB low:45472kB high:54564kB active_anon:1587440kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18240kB pagetables:41568kB bounce:0kB free_pcp:684kB local_pcp:216kB free_cma:0kB [ 490.956687] lowmem_reserve[]: 0 0 0 0 0 [ 490.960754] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 490.986093] lowmem_reserve[]: 0 0 0 0 0 [ 490.990127] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 491.005926] Node 0 DMA32: 439*4kB (M) 82*8kB (M) 44*16kB (ME) 468*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 491.019284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 491.030067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.039017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 491.047962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.056862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 491.065498] 11526 total pagecache pages [ 491.069479] 0 pages in swap cache [ 491.073000] Swap cache stats: add 0, delete 0, find 0/0 [ 491.078358] Free swap = 0kB [ 491.081421] Total swap = 0kB [ 491.084439] 1965979 pages RAM [ 491.087530] 0 pages HighMem/MovableOnly [ 491.091567] 335868 pages reserved [ 491.095019] 0 pages cma reserved [ 491.098373] Out of memory: Kill process 7785 (syz-executor.1) score 1007 or sacrifice child [ 491.106952] Killed process 7785 (syz-executor.1) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 491.119019] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 491.130673] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 491.136066] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 491.144039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.153476] Call Trace: [ 491.156063] dump_stack+0x142/0x197 [ 491.159680] warn_alloc.cold+0x96/0x1af [ 491.163643] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 491.168545] ? wait_for_completion+0x420/0x420 [ 491.173224] __alloc_pages_slowpath+0x23c6/0x2930 [ 491.178178] ? warn_alloc+0xf0/0xf0 [ 491.181799] ? __might_sleep+0x93/0xb0 [ 491.185676] __alloc_pages_nodemask+0x62c/0x7a0 [ 491.190339] ? lock_downgrade+0x740/0x740 [ 491.194480] ? __alloc_pages_slowpath+0x2930/0x2930 [ 491.199495] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 491.205119] alloc_pages_current+0xec/0x1e0 [ 491.209453] ion_page_pool_alloc+0x11f/0x1c0 [ 491.213857] ion_system_heap_allocate+0x138/0x910 [ 491.218693] ? ion_alloc+0x19b/0x860 [ 491.222405] ? rcu_read_lock_sched_held+0x110/0x130 [ 491.227480] ? ion_system_heap_free+0x250/0x250 [ 491.232149] ion_alloc+0x222/0x860 [ 491.235763] ? ion_dma_buf_release+0x50/0x50 [ 491.240169] ? kasan_check_write+0x14/0x20 [ 491.244409] ? _copy_from_user+0x99/0x110 [ 491.248558] ion_ioctl+0x105/0x217 [ 491.252097] ? ion_alloc.cold+0x40/0x40 [ 491.256136] ? ion_alloc.cold+0x40/0x40 [ 491.260107] do_vfs_ioctl+0x7ae/0x1060 [ 491.264040] ? selinux_file_mprotect+0x5d0/0x5d0 [ 491.268965] ? lock_downgrade+0x740/0x740 [ 491.273106] ? ioctl_preallocate+0x1c0/0x1c0 [ 491.277514] ? __fget+0x237/0x370 [ 491.280971] ? security_file_ioctl+0x89/0xb0 [ 491.285519] SyS_ioctl+0x8f/0xc0 [ 491.288873] ? do_vfs_ioctl+0x1060/0x1060 [ 491.293135] do_syscall_64+0x1e8/0x640 [ 491.297047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 491.301890] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 491.307074] RIP: 0033:0x45b349 [ 491.310275] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.318078] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 491.325358] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 491.332712] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 491.340047] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 491.347399] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 491.355874] Mem-Info: [ 491.358289] active_anon:494821 inactive_anon:584 isolated_anon:0 [ 491.358289] active_file:3962 inactive_file:6928 isolated_file:0 [ 491.358289] unevictable:0 dirty:11 writeback:0 unstable:0 [ 491.358289] slab_reclaimable:22425 slab_unreclaimable:159260 [ 491.358289] mapped:58398 shmem:637 pagetables:94610 bounce:0 [ 491.358289] free:664277 free_pcp:459 free_cma:0 [ 491.392209] Node 0 active_anon:1589672kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1384448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 491.419983] Node 1 active_anon:389612kB inactive_anon:1328kB active_file:15836kB inactive_file:27712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:36kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 491.447973] Node 0 DMA free:10372kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.474702] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 491.479801] Node 0 DMA32 free:20172kB min:36380kB low:45472kB high:54564kB active_anon:1585316kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18208kB pagetables:41460kB bounce:0kB free_pcp:892kB local_pcp:216kB free_cma:0kB [ 491.509124] lowmem_reserve[]: 0 0 0 0 0 [ 491.513187] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.538729] lowmem_reserve[]: 0 0 0 0 0 [ 491.542795] Node 1 Normal free:2626564kB min:53508kB low:66884kB high:80260kB active_anon:389612kB inactive_anon:1328kB active_file:15836kB inactive_file:27712kB unevictable:0kB writepending:36kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:101344kB pagetables:336740kB bounce:0kB free_pcp:1060kB local_pcp:580kB free_cma:0kB [ 491.574241] lowmem_reserve[]: 0 0 0 0 0 [ 491.578303] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 5*16kB (UME) 5*32kB (UME) 2*64kB (UM) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10372kB [ 491.594101] Node 0 DMA32: 439*4kB (M) 82*8kB (M) 44*16kB (ME) 469*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20172kB [ 491.607736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 491.618612] Node 1 Normal: 15*4kB (UME) 3*8kB (UME) 15*16kB (U) 27*32kB (UME) 8*64kB (UM) 7*128kB (UME) 0*256kB 3*512kB (UM) 1*1024kB (E) 2*2048kB (UM) 639*4096kB (M) = 2626596kB [ 491.634831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.643845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 491.652549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.661444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 491.670076] 11526 total pagecache pages [ 491.674047] 0 pages in swap cache [ 491.677479] Swap cache stats: add 0, delete 0, find 0/0 [ 491.682904] Free swap = 0kB [ 491.685959] Total swap = 0kB [ 491.688964] 1965979 pages RAM [ 491.692122] 0 pages HighMem/MovableOnly [ 491.696092] 335868 pages reserved [ 491.699539] 0 pages cma reserved [ 491.720915] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 491.732410] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 491.737830] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 491.745701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.755045] Call Trace: [ 491.757753] dump_stack+0x142/0x197 [ 491.761407] warn_alloc.cold+0x96/0x1af [ 491.765370] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 491.770210] ? __alloc_pages_direct_compact+0xbc/0x380 [ 491.775498] __alloc_pages_slowpath+0x23c6/0x2930 [ 491.780345] ? save_trace+0x290/0x290 [ 491.784142] ? warn_alloc+0xf0/0xf0 [ 491.787839] ? __might_sleep+0x93/0xb0 [ 491.791813] __alloc_pages_nodemask+0x62c/0x7a0 [ 491.796471] ? lock_downgrade+0x740/0x740 [ 491.800616] ? __alloc_pages_slowpath+0x2930/0x2930 [ 491.805623] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 491.811242] alloc_pages_current+0xec/0x1e0 [ 491.815559] ion_page_pool_alloc+0x11f/0x1c0 [ 491.819963] ion_system_heap_allocate+0x138/0x910 [ 491.824801] ? ion_system_heap_free+0x250/0x250 [ 491.829464] ion_alloc+0x68c/0x860 [ 491.832999] ? ion_dma_buf_release+0x50/0x50 [ 491.837405] ? kasan_check_write+0x14/0x20 [ 491.841638] ? _copy_from_user+0x99/0x110 [ 491.845779] ion_ioctl+0x105/0x217 [ 491.849350] ? ion_alloc.cold+0x40/0x40 [ 491.853315] ? ion_alloc.cold+0x40/0x40 [ 491.857288] do_vfs_ioctl+0x7ae/0x1060 [ 491.861180] ? selinux_file_mprotect+0x5d0/0x5d0 [ 491.865936] ? lock_downgrade+0x740/0x740 [ 491.870092] ? ioctl_preallocate+0x1c0/0x1c0 [ 491.874491] ? __fget+0x237/0x370 [ 491.877995] ? security_file_ioctl+0x89/0xb0 [ 491.882397] SyS_ioctl+0x8f/0xc0 [ 491.885754] ? do_vfs_ioctl+0x1060/0x1060 [ 491.889899] do_syscall_64+0x1e8/0x640 [ 491.893781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 491.898625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 491.903810] RIP: 0033:0x45b349 [ 491.907006] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.914704] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 491.921966] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 491.929417] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 491.936681] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 491.944857] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 491.990729] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 492.003897] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 492.009322] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 492.017197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.026719] Call Trace: [ 492.029313] dump_stack+0x142/0x197 [ 492.032943] dump_header+0x177/0x6cd [ 492.036660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 492.041761] ? ___ratelimit+0x55/0x537 [ 492.045641] oom_kill_process.cold+0x10/0xadd [ 492.050130] ? oom_unkillable_task+0x294/0x390 [ 492.054707] ? lock_downgrade+0x740/0x740 [ 492.058848] out_of_memory+0x2ee/0x1180 [ 492.062932] ? lock_acquire+0x16f/0x430 [ 492.066901] ? __lock_is_held+0xb6/0x140 [ 492.071003] ? oom_killer_disable+0x1d0/0x1d0 [ 492.075494] ? __alloc_pages_slowpath+0xca4/0x2930 [ 492.080417] __alloc_pages_slowpath+0x2251/0x2930 [ 492.085264] ? warn_alloc+0xf0/0xf0 [ 492.088894] ? __might_sleep+0x93/0xb0 [ 492.092773] __alloc_pages_nodemask+0x62c/0x7a0 [ 492.097489] ? lock_downgrade+0x740/0x740 [ 492.101650] ? __alloc_pages_slowpath+0x2930/0x2930 [ 492.106668] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 492.112394] alloc_pages_current+0xec/0x1e0 [ 492.116716] ion_page_pool_alloc+0x11f/0x1c0 [ 492.121119] ion_system_heap_allocate+0x138/0x910 [ 492.126065] ? ion_system_heap_free+0x250/0x250 [ 492.130776] ion_alloc+0x68c/0x860 [ 492.134426] ? ion_dma_buf_release+0x50/0x50 [ 492.138932] ? kasan_check_write+0x14/0x20 [ 492.143174] ? _copy_from_user+0x99/0x110 [ 492.147321] ion_ioctl+0x105/0x217 [ 492.150852] ? ion_alloc.cold+0x40/0x40 [ 492.154833] ? ion_alloc.cold+0x40/0x40 [ 492.158898] do_vfs_ioctl+0x7ae/0x1060 [ 492.162786] ? selinux_file_mprotect+0x5d0/0x5d0 [ 492.167585] ? lock_downgrade+0x740/0x740 [ 492.171951] ? ioctl_preallocate+0x1c0/0x1c0 [ 492.176367] ? __fget+0x237/0x370 [ 492.179836] ? security_file_ioctl+0x89/0xb0 [ 492.184243] SyS_ioctl+0x8f/0xc0 [ 492.187606] ? do_vfs_ioctl+0x1060/0x1060 [ 492.191751] do_syscall_64+0x1e8/0x640 [ 492.195768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.200624] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 492.205812] RIP: 0033:0x45b349 [ 492.208985] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.216685] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 492.223948] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 492.231201] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 492.238455] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 492.245708] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 492.253645] Mem-Info: [ 492.256067] active_anon:494821 inactive_anon:584 isolated_anon:0 [ 492.256067] active_file:3959 inactive_file:6931 isolated_file:0 [ 492.256067] unevictable:0 dirty:11 writeback:0 unstable:0 [ 492.256067] slab_reclaimable:22425 slab_unreclaimable:159288 [ 492.256067] mapped:58398 shmem:637 pagetables:94610 bounce:0 [ 492.256067] free:663764 free_pcp:196 free_cma:0 [ 492.289842] Node 0 active_anon:1589672kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1384448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 492.317487] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.344501] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 492.349550] Node 0 DMA32 free:18124kB min:36380kB low:45472kB high:54564kB active_anon:1585316kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18208kB pagetables:41460kB bounce:0kB free_pcp:784kB local_pcp:120kB free_cma:0kB [ 492.378605] lowmem_reserve[]: 0 0 0 0 0 [ 492.382668] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.408899] lowmem_reserve[]: 0 0 0 0 0 [ 492.412959] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 492.428710] Node 0 DMA32: 439*4kB (M) 82*8kB (M) 50*16kB (ME) 466*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18124kB [ 492.441960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.452833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.462207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 492.470851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.479810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 492.488582] 11541 total pagecache pages [ 492.492619] 0 pages in swap cache [ 492.496058] Swap cache stats: add 0, delete 0, find 0/0 [ 492.501490] Free swap = 0kB [ 492.504504] Total swap = 0kB [ 492.507519] 1965979 pages RAM [ 492.510694] 0 pages HighMem/MovableOnly [ 492.514668] 335868 pages reserved [ 492.518101] 0 pages cma reserved [ 492.521523] Out of memory: Kill process 7883 (syz-executor.2) score 1007 or sacrifice child [ 492.530133] Killed process 7886 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34688kB, shmem-rss:0kB [ 492.543100] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 492.549072] oom_reaper: reaped process 7886 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 492.554566] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 492.554592] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 492.554597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.554604] Call Trace: [ 492.589730] dump_stack+0x142/0x197 [ 492.593343] warn_alloc.cold+0x96/0x1af [ 492.597397] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 492.602368] ? wait_for_completion+0x420/0x420 [ 492.606944] __alloc_pages_slowpath+0x23c6/0x2930 [ 492.611841] ? warn_alloc+0xf0/0xf0 [ 492.615589] ? __might_sleep+0x93/0xb0 [ 492.619466] __alloc_pages_nodemask+0x62c/0x7a0 [ 492.624127] ? lock_downgrade+0x740/0x740 [ 492.628324] ? __alloc_pages_slowpath+0x2930/0x2930 [ 492.633422] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 492.639065] alloc_pages_current+0xec/0x1e0 [ 492.643383] ion_page_pool_alloc+0x11f/0x1c0 [ 492.647830] ion_system_heap_allocate+0x138/0x910 [ 492.652725] ? ion_system_heap_free+0x250/0x250 [ 492.657394] ion_alloc+0x68c/0x860 [ 492.660926] ? ion_dma_buf_release+0x50/0x50 [ 492.665384] ? kasan_check_write+0x14/0x20 [ 492.669622] ? _copy_from_user+0x99/0x110 [ 492.673764] ion_ioctl+0x105/0x217 [ 492.677420] ? ion_alloc.cold+0x40/0x40 [ 492.681394] ? ion_alloc.cold+0x40/0x40 [ 492.685592] do_vfs_ioctl+0x7ae/0x1060 [ 492.689473] ? selinux_file_mprotect+0x5d0/0x5d0 [ 492.694228] ? lock_downgrade+0x740/0x740 [ 492.698376] ? ioctl_preallocate+0x1c0/0x1c0 [ 492.702780] ? __fget+0x237/0x370 [ 492.706265] ? security_file_ioctl+0x89/0xb0 [ 492.710672] SyS_ioctl+0x8f/0xc0 [ 492.714026] ? do_vfs_ioctl+0x1060/0x1060 [ 492.718208] do_syscall_64+0x1e8/0x640 [ 492.722103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.726949] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 492.732215] RIP: 0033:0x45b349 [ 492.735397] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.743142] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 492.750449] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 492.757842] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 492.765109] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 492.772407] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 492.780110] warn_alloc_show_mem: 1 callbacks suppressed [ 492.780114] Mem-Info: [ 492.787900] active_anon:494804 inactive_anon:584 isolated_anon:0 [ 492.787900] active_file:3961 inactive_file:6945 isolated_file:0 [ 492.787900] unevictable:0 dirty:13 writeback:0 unstable:0 [ 492.787900] slab_reclaimable:22426 slab_unreclaimable:159298 [ 492.787900] mapped:58398 shmem:637 pagetables:94584 bounce:0 [ 492.787900] free:663738 free_pcp:465 free_cma:0 [ 492.821922] Node 0 active_anon:1589604kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1384448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 492.849701] Node 1 active_anon:389612kB inactive_anon:1328kB active_file:15836kB inactive_file:27776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:56kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 492.879340] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.906066] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 492.911160] Node 0 DMA32 free:18280kB min:36380kB low:45472kB high:54564kB active_anon:1585248kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18176kB pagetables:41356kB bounce:0kB free_pcp:844kB local_pcp:120kB free_cma:0kB [ 492.940206] lowmem_reserve[]: 0 0 0 0 0 [ 492.944209] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.969756] lowmem_reserve[]: 0 0 0 0 0 [ 492.973828] Node 1 Normal free:2626444kB min:53508kB low:66884kB high:80260kB active_anon:389612kB inactive_anon:1328kB active_file:15836kB inactive_file:27776kB unevictable:0kB writepending:56kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:101344kB pagetables:336740kB bounce:0kB free_pcp:996kB local_pcp:580kB free_cma:0kB [ 493.004238] lowmem_reserve[]: 0 0 0 0 0 [ 493.008225] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 493.024008] Node 0 DMA32: 466*4kB (UME) 84*8kB (M) 50*16kB (ME) 467*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18280kB [ 493.037598] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 493.048494] Node 1 Normal: 22*4kB (UME) 4*8kB (ME) 7*16kB (U) 27*32kB (UME) 7*64kB (UM) 6*128kB (UE) 1*256kB (M) 3*512kB (UM) 1*1024kB (E) 2*2048kB (UM) 639*4096kB (M) = 2626568kB [ 493.065211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.074175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 493.082924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 22:04:06 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:04:06 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x0]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:06 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:06 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000340)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 493.091832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 493.100584] 11550 total pagecache pages [ 493.104547] 0 pages in swap cache [ 493.107983] Swap cache stats: add 0, delete 0, find 0/0 [ 493.113508] Free swap = 0kB [ 493.116527] Total swap = 0kB [ 493.119527] 1965979 pages RAM [ 493.122718] 0 pages HighMem/MovableOnly [ 493.126800] 335868 pages reserved [ 493.130310] 0 pages cma reserved 22:04:07 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x0]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 493.186680] audit: type=1804 audit(1580076246.986:1831): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/565/file0" dev="sda1" ino=21165 res=1 22:04:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0xd9677c3ab23b0a5f}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:07 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:07 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x0]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:07 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 493.655822] audit: type=1804 audit(1580076247.456:1832): pid=25359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/566/file0" dev="sda1" ino=21379 res=1 [ 493.789645] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 493.903091] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 493.938445] CPU: 0 PID: 25351 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 493.946370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.955745] Call Trace: [ 493.958343] dump_stack+0x142/0x197 [ 493.961983] warn_alloc.cold+0x96/0x1af [ 493.965970] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 493.970883] ? __alloc_pages_direct_compact+0xbc/0x380 [ 493.976171] __alloc_pages_slowpath+0x23c6/0x2930 [ 493.981028] ? save_trace+0x290/0x290 [ 493.984863] ? warn_alloc+0xf0/0xf0 [ 493.988508] ? __might_sleep+0x93/0xb0 [ 493.992406] __alloc_pages_nodemask+0x62c/0x7a0 [ 493.997081] ? lock_downgrade+0x740/0x740 [ 494.001240] ? __alloc_pages_slowpath+0x2930/0x2930 [ 494.006280] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 494.011918] alloc_pages_current+0xec/0x1e0 [ 494.016257] ion_page_pool_alloc+0x11f/0x1c0 [ 494.020679] ion_system_heap_allocate+0x138/0x910 [ 494.025523] ? ion_alloc+0x19b/0x860 [ 494.029246] ? rcu_read_lock_sched_held+0x110/0x130 [ 494.034273] ? ion_system_heap_free+0x250/0x250 [ 494.038954] ion_alloc+0x222/0x860 [ 494.042569] ? ion_dma_buf_release+0x50/0x50 [ 494.046990] ? kasan_check_write+0x14/0x20 [ 494.051228] ? _copy_from_user+0x99/0x110 [ 494.055387] ion_ioctl+0x105/0x217 [ 494.058932] ? ion_alloc.cold+0x40/0x40 [ 494.062912] ? ion_alloc.cold+0x40/0x40 [ 494.067005] do_vfs_ioctl+0x7ae/0x1060 [ 494.070903] ? selinux_file_mprotect+0x5d0/0x5d0 [ 494.075667] ? lock_downgrade+0x740/0x740 [ 494.079837] ? ioctl_preallocate+0x1c0/0x1c0 [ 494.084252] ? __fget+0x237/0x370 [ 494.087845] ? security_file_ioctl+0x89/0xb0 [ 494.092267] SyS_ioctl+0x8f/0xc0 [ 494.095642] ? do_vfs_ioctl+0x1060/0x1060 [ 494.099801] do_syscall_64+0x1e8/0x640 [ 494.103703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 494.109255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 494.114450] RIP: 0033:0x45b349 [ 494.117644] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.125361] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 494.132637] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 494.139919] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 494.147209] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 494.154488] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 494.212626] Mem-Info: [ 494.215259] active_anon:492177 inactive_anon:583 isolated_anon:0 [ 494.215259] active_file:3967 inactive_file:6952 isolated_file:0 [ 494.215259] unevictable:0 dirty:129 writeback:0 unstable:0 [ 494.215259] slab_reclaimable:22488 slab_unreclaimable:159229 [ 494.215259] mapped:58413 shmem:637 pagetables:94875 bounce:0 [ 494.215259] free:669227 free_pcp:277 free_cma:0 [ 494.360116] Node 0 active_anon:1580852kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1372160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 494.388224] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.415364] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 494.421057] Node 0 DMA32 free:38160kB min:36380kB low:45472kB high:54564kB active_anon:1576496kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18208kB pagetables:41520kB bounce:0kB free_pcp:1028kB local_pcp:680kB free_cma:0kB [ 494.450778] lowmem_reserve[]: 0 0 0 0 0 [ 494.454846] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.480183] lowmem_reserve[]: 0 0 0 0 0 [ 494.484184] Node 0 DMA: 3*4kB (ME) 6*8kB (UE) 10*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 494.499870] Node 0 DMA32: 1846*4kB (UME) 167*8kB (M) 802*16kB (UME) 515*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38032kB [ 494.513741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 494.524638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.533573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 494.542205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.551744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 494.560452] 11558 total pagecache pages [ 494.566411] 0 pages in swap cache [ 494.569971] Swap cache stats: add 0, delete 0, find 0/0 [ 494.575384] Free swap = 0kB [ 494.578449] Total swap = 0kB [ 494.581515] 1965979 pages RAM [ 494.584700] 0 pages HighMem/MovableOnly [ 494.588664] 335868 pages reserved [ 494.592173] 0 pages cma reserved [ 494.605510] oom_reaper: reaped process 25351 (syz-executor.0), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 494.757031] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 494.770156] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 494.775541] CPU: 1 PID: 25351 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 494.783411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.792760] Call Trace: [ 494.795347] dump_stack+0x142/0x197 [ 494.798962] dump_header+0x177/0x6cd [ 494.802673] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 494.807958] ? ___ratelimit+0x55/0x537 [ 494.811853] oom_kill_process.cold+0x10/0xadd [ 494.816352] ? oom_unkillable_task+0x294/0x390 [ 494.821049] ? lock_downgrade+0x740/0x740 [ 494.825200] out_of_memory+0x2ee/0x1180 [ 494.829161] ? lock_acquire+0x16f/0x430 [ 494.833131] ? oom_killer_disable+0x1d0/0x1d0 [ 494.837616] ? __alloc_pages_slowpath+0xca4/0x2930 [ 494.842539] __alloc_pages_slowpath+0x2251/0x2930 [ 494.847393] ? warn_alloc+0xf0/0xf0 [ 494.851038] ? __might_sleep+0x93/0xb0 [ 494.854927] __alloc_pages_nodemask+0x62c/0x7a0 [ 494.859588] ? lock_downgrade+0x740/0x740 [ 494.863851] ? __alloc_pages_slowpath+0x2930/0x2930 [ 494.868942] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 494.874610] alloc_pages_current+0xec/0x1e0 [ 494.878933] ion_page_pool_alloc+0x11f/0x1c0 [ 494.883347] ion_system_heap_allocate+0x138/0x910 [ 494.888345] ? ion_alloc+0x19b/0x860 [ 494.892060] ? rcu_read_lock_sched_held+0x110/0x130 [ 494.897074] ? ion_system_heap_free+0x250/0x250 [ 494.901738] ion_alloc+0x222/0x860 [ 494.905266] ? ion_dma_buf_release+0x50/0x50 [ 494.909666] ? kasan_check_write+0x14/0x20 [ 494.913890] ? _copy_from_user+0x99/0x110 [ 494.918030] ion_ioctl+0x105/0x217 [ 494.921557] ? ion_alloc.cold+0x40/0x40 [ 494.925569] ? ion_alloc.cold+0x40/0x40 [ 494.930684] do_vfs_ioctl+0x7ae/0x1060 [ 494.934571] ? selinux_file_mprotect+0x5d0/0x5d0 [ 494.939350] ? lock_downgrade+0x740/0x740 [ 494.943496] ? ioctl_preallocate+0x1c0/0x1c0 [ 494.947901] ? __fget+0x237/0x370 [ 494.951356] ? security_file_ioctl+0x89/0xb0 [ 494.955765] SyS_ioctl+0x8f/0xc0 [ 494.959128] ? do_vfs_ioctl+0x1060/0x1060 [ 494.963278] do_syscall_64+0x1e8/0x640 [ 494.967161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 494.972018] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 494.977204] RIP: 0033:0x45b349 [ 494.980382] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.988217] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 494.995562] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 495.002828] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 495.010213] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 495.017485] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 495.025320] Mem-Info: [ 495.028607] active_anon:492117 inactive_anon:584 isolated_anon:0 [ 495.028607] active_file:3968 inactive_file:6959 isolated_file:0 [ 495.028607] unevictable:0 dirty:0 writeback:0 unstable:0 [ 495.028607] slab_reclaimable:22500 slab_unreclaimable:159331 [ 495.028607] mapped:58398 shmem:637 pagetables:94850 bounce:0 [ 495.028607] free:664262 free_pcp:154 free_cma:0 [ 495.062930] Node 0 active_anon:1580852kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1372160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 495.090723] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.117530] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 495.123005] Node 0 DMA32 free:18944kB min:36380kB low:45472kB high:54564kB active_anon:1576496kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18208kB pagetables:41520kB bounce:0kB free_pcp:616kB local_pcp:348kB free_cma:0kB [ 495.152066] lowmem_reserve[]: 0 0 0 0 0 [ 495.156070] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.181494] lowmem_reserve[]: 0 0 0 0 0 [ 495.185488] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 495.201278] Node 0 DMA32: 708*4kB (UME) 258*8kB (UM) 88*16kB (UME) 395*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18944kB [ 495.214920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 495.225686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.235702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.244324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.253298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.261998] 11567 total pagecache pages [ 495.266019] 0 pages in swap cache [ 495.269455] Swap cache stats: add 0, delete 0, find 0/0 [ 495.274859] Free swap = 0kB [ 495.277874] Total swap = 0kB [ 495.280948] 1965979 pages RAM [ 495.284047] 0 pages HighMem/MovableOnly [ 495.288052] 335868 pages reserved [ 495.291548] 0 pages cma reserved [ 495.294912] Out of memory: Kill process 7883 (syz-executor.2) score 1007 or sacrifice child [ 495.303743] Killed process 7883 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 495.316810] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 495.328262] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 495.333690] CPU: 1 PID: 25351 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 495.341562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.350916] Call Trace: [ 495.353552] dump_stack+0x142/0x197 [ 495.357182] warn_alloc.cold+0x96/0x1af [ 495.361158] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 495.366003] ? wait_for_completion+0x420/0x420 [ 495.370619] __alloc_pages_slowpath+0x23c6/0x2930 [ 495.375473] ? warn_alloc+0xf0/0xf0 [ 495.379095] ? __might_sleep+0x93/0xb0 [ 495.383025] __alloc_pages_nodemask+0x62c/0x7a0 [ 495.387685] ? lock_downgrade+0x740/0x740 [ 495.391831] ? __alloc_pages_slowpath+0x2930/0x2930 [ 495.396854] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 495.402481] alloc_pages_current+0xec/0x1e0 [ 495.406799] ion_page_pool_alloc+0x11f/0x1c0 [ 495.411205] ion_system_heap_allocate+0x138/0x910 [ 495.416043] ? ion_alloc+0x19b/0x860 [ 495.419750] ? rcu_read_lock_sched_held+0x110/0x130 [ 495.424762] ? ion_system_heap_free+0x250/0x250 [ 495.429426] ion_alloc+0x222/0x860 [ 495.432965] ? ion_dma_buf_release+0x50/0x50 [ 495.437379] ? kasan_check_write+0x14/0x20 [ 495.441619] ? _copy_from_user+0x99/0x110 [ 495.445786] ion_ioctl+0x105/0x217 [ 495.449313] ? ion_alloc.cold+0x40/0x40 [ 495.453283] ? ion_alloc.cold+0x40/0x40 [ 495.457391] do_vfs_ioctl+0x7ae/0x1060 [ 495.461279] ? selinux_file_mprotect+0x5d0/0x5d0 [ 495.466029] ? lock_downgrade+0x740/0x740 [ 495.470170] ? ioctl_preallocate+0x1c0/0x1c0 [ 495.474580] ? __fget+0x237/0x370 [ 495.478126] ? security_file_ioctl+0x89/0xb0 [ 495.482535] SyS_ioctl+0x8f/0xc0 [ 495.485904] ? do_vfs_ioctl+0x1060/0x1060 [ 495.490057] do_syscall_64+0x1e8/0x640 [ 495.493946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 495.498787] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 495.503964] RIP: 0033:0x45b349 [ 495.507138] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.514845] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 495.522111] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 495.529367] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 495.537671] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 495.544981] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 495.552842] Mem-Info: [ 495.555266] active_anon:491070 inactive_anon:584 isolated_anon:0 [ 495.555266] active_file:3968 inactive_file:6959 isolated_file:0 [ 495.555266] unevictable:0 dirty:9 writeback:0 unstable:0 [ 495.555266] slab_reclaimable:22500 slab_unreclaimable:159301 [ 495.555266] mapped:58398 shmem:637 pagetables:94813 bounce:0 [ 495.555266] free:665300 free_pcp:524 free_cma:0 [ 495.589088] Node 0 active_anon:1576664kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1372160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 495.616935] Node 1 active_anon:387616kB inactive_anon:1328kB active_file:15864kB inactive_file:27832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:28kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 495.644703] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.671439] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 495.676491] Node 0 DMA32 free:23040kB min:36380kB low:45472kB high:54564kB active_anon:1572308kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18176kB pagetables:41372kB bounce:0kB free_pcp:860kB local_pcp:348kB free_cma:0kB [ 495.705694] lowmem_reserve[]: 0 0 0 0 0 [ 495.710212] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.735546] lowmem_reserve[]: 0 0 0 0 0 [ 495.739537] Node 1 Normal free:2627792kB min:53508kB low:66884kB high:80260kB active_anon:387616kB inactive_anon:1328kB active_file:15864kB inactive_file:27832kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:101632kB pagetables:337640kB bounce:0kB free_pcp:1352kB local_pcp:652kB free_cma:0kB [ 495.770210] lowmem_reserve[]: 0 0 0 0 0 [ 495.774213] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 495.790102] Node 0 DMA32: 708*4kB (UME) 258*8kB (UM) 88*16kB (UME) 396*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 23072kB [ 495.804239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 495.815092] Node 1 Normal: 88*4kB (UME) 166*8kB (UM) 94*16kB (UME) 45*32kB (UME) 13*64kB (UM) 3*128kB (UE) 2*256kB (ME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (M) 639*4096kB (M) = 2627792kB [ 495.831921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.840837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.849586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.858593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.867216] 11567 total pagecache pages [ 495.871260] 0 pages in swap cache [ 495.874802] Swap cache stats: add 0, delete 0, find 0/0 [ 495.880329] Free swap = 0kB [ 495.883346] Total swap = 0kB [ 495.886357] 1965979 pages RAM [ 495.889447] 0 pages HighMem/MovableOnly [ 495.893548] 335868 pages reserved [ 495.897006] 0 pages cma reserved [ 495.919720] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 495.931511] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 495.937043] CPU: 1 PID: 25351 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 495.944913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.954281] Call Trace: [ 495.956868] dump_stack+0x142/0x197 [ 495.960514] warn_alloc.cold+0x96/0x1af [ 495.964494] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 495.969334] ? __alloc_pages_direct_compact+0xbc/0x380 [ 495.974625] __alloc_pages_slowpath+0x23c6/0x2930 [ 495.979465] ? save_trace+0x290/0x290 [ 495.983271] ? warn_alloc+0xf0/0xf0 [ 495.986916] ? __might_sleep+0x93/0xb0 [ 495.990810] __alloc_pages_nodemask+0x62c/0x7a0 [ 495.995478] ? lock_downgrade+0x740/0x740 [ 495.999638] ? __alloc_pages_slowpath+0x2930/0x2930 [ 496.004731] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 496.010362] alloc_pages_current+0xec/0x1e0 [ 496.014699] ion_page_pool_alloc+0x11f/0x1c0 [ 496.019103] ion_system_heap_allocate+0x138/0x910 [ 496.023991] ? ion_system_heap_free+0x250/0x250 [ 496.028747] ion_alloc+0x68c/0x860 [ 496.032306] ? ion_dma_buf_release+0x50/0x50 [ 496.036779] ? kasan_check_write+0x14/0x20 [ 496.041024] ? _copy_from_user+0x99/0x110 [ 496.045172] ion_ioctl+0x105/0x217 [ 496.048809] ? ion_alloc.cold+0x40/0x40 [ 496.052795] ? ion_alloc.cold+0x40/0x40 [ 496.056920] do_vfs_ioctl+0x7ae/0x1060 [ 496.060810] ? selinux_file_mprotect+0x5d0/0x5d0 [ 496.065571] ? lock_downgrade+0x740/0x740 [ 496.070423] ? ioctl_preallocate+0x1c0/0x1c0 [ 496.074848] ? __fget+0x237/0x370 [ 496.078314] ? security_file_ioctl+0x89/0xb0 [ 496.082732] SyS_ioctl+0x8f/0xc0 [ 496.086106] ? do_vfs_ioctl+0x1060/0x1060 [ 496.090266] do_syscall_64+0x1e8/0x640 [ 496.094158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 496.099003] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 496.104184] RIP: 0033:0x45b349 [ 496.107362] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.115061] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 496.122322] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 496.129687] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 496.137019] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 496.144290] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 496.192541] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 496.206600] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 496.212021] CPU: 1 PID: 25351 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 496.219901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.229287] Call Trace: [ 496.231878] dump_stack+0x142/0x197 [ 496.235502] dump_header+0x177/0x6cd [ 496.239253] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 496.244347] ? ___ratelimit+0x55/0x537 [ 496.248222] oom_kill_process.cold+0x10/0xadd [ 496.252710] ? oom_unkillable_task+0x294/0x390 [ 496.257292] ? lock_downgrade+0x740/0x740 [ 496.261508] out_of_memory+0x2ee/0x1180 [ 496.265469] ? lock_acquire+0x16f/0x430 [ 496.269431] ? __lock_is_held+0xb6/0x140 [ 496.273485] ? oom_killer_disable+0x1d0/0x1d0 [ 496.277977] ? __alloc_pages_slowpath+0xca4/0x2930 [ 496.282904] __alloc_pages_slowpath+0x2251/0x2930 [ 496.287740] ? warn_alloc+0xf0/0xf0 [ 496.291375] ? __might_sleep+0x93/0xb0 [ 496.295256] __alloc_pages_nodemask+0x62c/0x7a0 [ 496.299913] ? lock_downgrade+0x740/0x740 [ 496.304066] ? __alloc_pages_slowpath+0x2930/0x2930 [ 496.309074] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 496.314697] alloc_pages_current+0xec/0x1e0 [ 496.319020] ion_page_pool_alloc+0x11f/0x1c0 [ 496.323438] ion_system_heap_allocate+0x138/0x910 [ 496.328281] ? ion_system_heap_free+0x250/0x250 [ 496.332958] ion_alloc+0x68c/0x860 [ 496.336510] ? ion_dma_buf_release+0x50/0x50 [ 496.340919] ? kasan_check_write+0x14/0x20 [ 496.345162] ? _copy_from_user+0x99/0x110 [ 496.349326] ion_ioctl+0x105/0x217 [ 496.352870] ? ion_alloc.cold+0x40/0x40 [ 496.356871] ? ion_alloc.cold+0x40/0x40 [ 496.360949] do_vfs_ioctl+0x7ae/0x1060 [ 496.364832] ? selinux_file_mprotect+0x5d0/0x5d0 [ 496.369672] ? lock_downgrade+0x740/0x740 [ 496.373808] ? ioctl_preallocate+0x1c0/0x1c0 [ 496.378228] ? __fget+0x237/0x370 [ 496.381674] ? security_file_ioctl+0x89/0xb0 [ 496.386085] SyS_ioctl+0x8f/0xc0 [ 496.389451] ? do_vfs_ioctl+0x1060/0x1060 [ 496.393587] do_syscall_64+0x1e8/0x640 [ 496.397464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 496.402298] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 496.407486] RIP: 0033:0x45b349 [ 496.410664] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.418454] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 496.425709] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 496.432972] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 496.440244] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 496.447508] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 496.455056] Mem-Info: [ 496.457469] active_anon:491065 inactive_anon:584 isolated_anon:0 [ 496.457469] active_file:3968 inactive_file:6975 isolated_file:0 [ 496.457469] unevictable:0 dirty:10 writeback:0 unstable:0 [ 496.457469] slab_reclaimable:22500 slab_unreclaimable:159326 [ 496.457469] mapped:58398 shmem:637 pagetables:94823 bounce:0 [ 496.457469] free:664022 free_pcp:158 free_cma:0 [ 496.491521] Node 0 active_anon:1576644kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1368064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 496.519897] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.546911] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 496.552075] Node 0 DMA32 free:18148kB min:36380kB low:45472kB high:54564kB active_anon:1572288kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18176kB pagetables:41412kB bounce:0kB free_pcp:632kB local_pcp:120kB free_cma:0kB [ 496.581169] lowmem_reserve[]: 0 0 0 0 0 [ 496.585154] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 496.610490] lowmem_reserve[]: 0 0 0 0 0 [ 496.614755] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 496.630567] Node 0 DMA32: 775*4kB (UME) 169*8kB (UME) 86*16kB (UME) 385*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18148kB [ 496.644483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 496.655387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.664801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 496.673457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.682353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 496.690992] 11585 total pagecache pages [ 496.694976] 0 pages in swap cache [ 496.698418] Swap cache stats: add 0, delete 0, find 0/0 [ 496.703856] Free swap = 0kB [ 496.706874] Total swap = 0kB [ 496.709880] 1965979 pages RAM [ 496.713077] 0 pages HighMem/MovableOnly [ 496.717224] 335868 pages reserved [ 496.720746] 0 pages cma reserved [ 496.724111] Out of memory: Kill process 7895 (syz-executor.2) score 1007 or sacrifice child [ 496.732691] Killed process 7895 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 496.744676] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 496.750982] oom_reaper: reaped process 7895 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 496.756178] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 496.771469] CPU: 1 PID: 25351 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 496.779397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.788885] Call Trace: [ 496.791465] dump_stack+0x142/0x197 [ 496.795142] warn_alloc.cold+0x96/0x1af [ 496.799121] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 496.803962] ? wait_for_completion+0x420/0x420 [ 496.808547] __alloc_pages_slowpath+0x23c6/0x2930 [ 496.813501] ? warn_alloc+0xf0/0xf0 [ 496.817131] ? __might_sleep+0x93/0xb0 [ 496.821036] __alloc_pages_nodemask+0x62c/0x7a0 [ 496.825709] ? lock_downgrade+0x740/0x740 [ 496.829859] ? __alloc_pages_slowpath+0x2930/0x2930 [ 496.834895] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 496.840530] alloc_pages_current+0xec/0x1e0 [ 496.844870] ion_page_pool_alloc+0x11f/0x1c0 [ 496.849320] ion_system_heap_allocate+0x138/0x910 [ 496.854164] ? ion_system_heap_free+0x250/0x250 [ 496.858826] ion_alloc+0x68c/0x860 [ 496.862397] ? ion_dma_buf_release+0x50/0x50 [ 496.866811] ? kasan_check_write+0x14/0x20 [ 496.871048] ? _copy_from_user+0x99/0x110 [ 496.875195] ion_ioctl+0x105/0x217 [ 496.878722] ? ion_alloc.cold+0x40/0x40 [ 496.882707] ? ion_alloc.cold+0x40/0x40 [ 496.886685] do_vfs_ioctl+0x7ae/0x1060 [ 496.890662] ? selinux_file_mprotect+0x5d0/0x5d0 [ 496.895417] ? lock_downgrade+0x740/0x740 [ 496.899677] ? ioctl_preallocate+0x1c0/0x1c0 [ 496.904091] ? __fget+0x237/0x370 [ 496.907556] ? security_file_ioctl+0x89/0xb0 [ 496.912014] SyS_ioctl+0x8f/0xc0 [ 496.915386] ? do_vfs_ioctl+0x1060/0x1060 [ 496.919547] do_syscall_64+0x1e8/0x640 [ 496.923446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 496.928403] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 496.933601] RIP: 0033:0x45b349 [ 496.936785] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.944488] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 496.951753] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 496.959060] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 496.966437] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 496.973800] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 496.981379] warn_alloc_show_mem: 1 callbacks suppressed [ 496.981382] Mem-Info: [ 496.989148] active_anon:491050 inactive_anon:584 isolated_anon:0 [ 496.989148] active_file:3968 inactive_file:6982 isolated_file:0 [ 496.989148] unevictable:0 dirty:16 writeback:0 unstable:0 [ 496.989148] slab_reclaimable:22500 slab_unreclaimable:159327 [ 496.989148] mapped:58398 shmem:637 pagetables:94796 bounce:0 [ 496.989148] free:664069 free_pcp:496 free_cma:0 [ 497.023156] Node 0 active_anon:1576584kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1368064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 497.051018] Node 1 active_anon:387616kB inactive_anon:1328kB active_file:15864kB inactive_file:27924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:60kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 497.078809] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.105557] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 497.110763] Node 0 DMA32 free:18180kB min:36380kB low:45472kB high:54564kB active_anon:1572228kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18144kB pagetables:41304kB bounce:0kB free_pcp:820kB local_pcp:120kB free_cma:0kB [ 497.139987] lowmem_reserve[]: 0 0 0 0 0 [ 497.144036] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.169401] lowmem_reserve[]: 0 0 0 0 0 [ 497.173455] Node 1 Normal free:2627728kB min:53508kB low:66884kB high:80260kB active_anon:387616kB inactive_anon:1328kB active_file:15864kB inactive_file:27924kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:101632kB pagetables:337640kB bounce:0kB free_pcp:1288kB local_pcp:652kB free_cma:0kB [ 497.203927] lowmem_reserve[]: 0 0 0 0 0 [ 497.207926] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 497.223822] Node 0 DMA32: 775*4kB (UME) 169*8kB (UME) 86*16kB (UME) 386*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18180kB [ 497.237559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 497.248363] Node 1 Normal: 74*4kB (UME) 169*8kB (UME) 88*16kB (UME) 44*32kB (UM) 14*64kB (UME) 3*128kB (UE) 2*256kB (ME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (M) 639*4096kB (M) = 2627696kB [ 497.265254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 497.274311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 497.283042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 22:04:11 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:04:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x0]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x0]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 22:04:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 497.292072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 497.300725] 11590 total pagecache pages [ 497.304707] 0 pages in swap cache [ 497.308154] Swap cache stats: add 0, delete 0, find 0/0 [ 497.313631] Free swap = 0kB [ 497.316663] Total swap = 0kB [ 497.319718] 1965979 pages RAM [ 497.322874] 0 pages HighMem/MovableOnly [ 497.326885] 335868 pages reserved [ 497.330405] 0 pages cma reserved 22:04:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 497.411007] audit: type=1804 audit(1580076251.206:1833): pid=25389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/567/file0" dev="sda1" ino=21483 res=1 22:04:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x0]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 497.823622] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 22:04:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 497.868176] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 497.884428] CPU: 0 PID: 25406 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 497.892352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.901825] Call Trace: [ 497.904426] dump_stack+0x142/0x197 [ 497.908065] warn_alloc.cold+0x96/0x1af [ 497.912073] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 497.916938] ? __alloc_pages_direct_compact+0xbc/0x380 [ 497.922232] __alloc_pages_slowpath+0x23c6/0x2930 [ 497.927088] ? save_trace+0x290/0x290 [ 497.930905] ? warn_alloc+0xf0/0xf0 [ 497.934553] ? __might_sleep+0x93/0xb0 [ 497.938452] __alloc_pages_nodemask+0x62c/0x7a0 [ 497.943132] ? lock_downgrade+0x740/0x740 [ 497.947418] ? __alloc_pages_slowpath+0x2930/0x2930 [ 497.952453] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 497.958097] alloc_pages_current+0xec/0x1e0 [ 497.962432] ion_page_pool_alloc+0x11f/0x1c0 [ 497.966864] ion_system_heap_allocate+0x138/0x910 [ 497.971728] ? ion_alloc+0x19b/0x860 [ 497.975560] ? rcu_read_lock_sched_held+0x110/0x130 [ 497.980599] ? ion_system_heap_free+0x250/0x250 [ 497.985293] ion_alloc+0x222/0x860 [ 497.988871] ? ion_dma_buf_release+0x50/0x50 [ 497.993295] ? kasan_check_write+0x14/0x20 [ 497.997551] ? _copy_from_user+0x99/0x110 [ 498.001842] ion_ioctl+0x105/0x217 [ 498.005427] ? ion_alloc.cold+0x40/0x40 [ 498.009424] ? ion_alloc.cold+0x40/0x40 [ 498.013418] do_vfs_ioctl+0x7ae/0x1060 [ 498.017326] ? selinux_file_mprotect+0x5d0/0x5d0 [ 498.022095] ? lock_downgrade+0x740/0x740 [ 498.026283] ? ioctl_preallocate+0x1c0/0x1c0 [ 498.028477] audit: type=1804 audit(1580076251.826:1834): pid=25417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/568/file0" dev="sda1" ino=21412 res=1 [ 498.030935] ? __fget+0x237/0x370 [ 498.030955] ? security_file_ioctl+0x89/0xb0 [ 498.030970] SyS_ioctl+0x8f/0xc0 [ 498.030979] ? do_vfs_ioctl+0x1060/0x1060 [ 498.030990] do_syscall_64+0x1e8/0x640 [ 498.030999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 498.031014] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 498.031021] RIP: 0033:0x45b349 [ 498.031026] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.031036] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 498.031041] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 498.031050] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 498.120612] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 498.127889] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 498.239638] Mem-Info: [ 498.243100] active_anon:491325 inactive_anon:583 isolated_anon:0 [ 498.243100] active_file:3974 inactive_file:6987 isolated_file:0 [ 498.243100] unevictable:0 dirty:126 writeback:0 unstable:0 [ 498.243100] slab_reclaimable:22529 slab_unreclaimable:159400 [ 498.243100] mapped:58413 shmem:637 pagetables:95035 bounce:0 [ 498.243100] free:668698 free_pcp:210 free_cma:0 [ 498.336618] Node 0 active_anon:1576576kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1368064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 498.575583] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.634823] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 498.665896] Node 0 DMA32 free:36308kB min:36380kB low:45472kB high:54564kB active_anon:1572220kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18144kB pagetables:41304kB bounce:0kB free_pcp:800kB local_pcp:740kB free_cma:0kB [ 498.697780] lowmem_reserve[]: 0 0 0 0 0 [ 498.702052] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.727788] lowmem_reserve[]: 0 0 0 0 0 [ 498.731879] Node 0 DMA: 3*4kB (ME) 6*8kB (UE) 10*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 498.747785] Node 0 DMA32: 1927*4kB (UME) 181*8kB (UME) 699*16kB (UM) 499*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36308kB [ 498.761731] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 498.772618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.781515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 498.790547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.799432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 498.808224] 11604 total pagecache pages [ 498.812327] 0 pages in swap cache [ 498.815803] Swap cache stats: add 0, delete 0, find 0/0 [ 498.821474] Free swap = 0kB [ 498.824495] Total swap = 0kB [ 498.827590] 1965979 pages RAM [ 498.830755] 0 pages HighMem/MovableOnly [ 498.834908] 335868 pages reserved [ 498.838346] 0 pages cma reserved [ 498.852754] oom_reaper: reaped process 25406 (syz-executor.0), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 498.890380] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 498.903493] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 498.908893] CPU: 1 PID: 25406 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 498.916946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.926424] Call Trace: [ 498.929019] dump_stack+0x142/0x197 [ 498.932650] dump_header+0x177/0x6cd [ 498.936364] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 498.941596] ? ___ratelimit+0x55/0x537 [ 498.945482] oom_kill_process.cold+0x10/0xadd [ 498.950031] ? rcu_read_unlock_special+0x895/0xd40 [ 498.954966] ? lock_downgrade+0x740/0x740 [ 498.959301] out_of_memory+0x2ee/0x1180 [ 498.963269] ? lock_acquire+0x16f/0x430 [ 498.967294] ? __lock_is_held+0xb6/0x140 [ 498.971354] ? oom_killer_disable+0x1d0/0x1d0 [ 498.975843] ? __alloc_pages_slowpath+0xca4/0x2930 [ 498.980794] __alloc_pages_slowpath+0x2251/0x2930 [ 498.985829] ? warn_alloc+0xf0/0xf0 [ 498.989455] ? __might_sleep+0x93/0xb0 [ 498.993447] __alloc_pages_nodemask+0x62c/0x7a0 [ 498.998111] ? lock_downgrade+0x740/0x740 [ 499.002400] ? __alloc_pages_slowpath+0x2930/0x2930 [ 499.007419] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 499.013241] alloc_pages_current+0xec/0x1e0 [ 499.018633] ion_page_pool_alloc+0x11f/0x1c0 [ 499.023044] ion_system_heap_allocate+0x138/0x910 [ 499.028402] ? ion_alloc+0x19b/0x860 [ 499.032110] ? rcu_read_lock_sched_held+0x110/0x130 [ 499.037479] ? ion_system_heap_free+0x250/0x250 [ 499.042160] ion_alloc+0x222/0x860 [ 499.045709] ? ion_dma_buf_release+0x50/0x50 [ 499.050133] ? kasan_check_write+0x14/0x20 [ 499.054448] ? _copy_from_user+0x99/0x110 [ 499.058585] ion_ioctl+0x105/0x217 [ 499.062178] ? ion_alloc.cold+0x40/0x40 [ 499.066153] ? ion_alloc.cold+0x40/0x40 [ 499.070129] do_vfs_ioctl+0x7ae/0x1060 [ 499.074074] ? selinux_file_mprotect+0x5d0/0x5d0 [ 499.078818] ? lock_downgrade+0x740/0x740 [ 499.083071] ? ioctl_preallocate+0x1c0/0x1c0 [ 499.087481] ? __fget+0x237/0x370 [ 499.091076] ? security_file_ioctl+0x89/0xb0 [ 499.095531] SyS_ioctl+0x8f/0xc0 [ 499.098908] ? do_vfs_ioctl+0x1060/0x1060 [ 499.103051] do_syscall_64+0x1e8/0x640 [ 499.106941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 499.111798] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 499.116978] RIP: 0033:0x45b349 [ 499.120267] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.127965] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 499.135269] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 499.142637] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 499.149897] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 499.157156] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 499.164779] Mem-Info: [ 499.167195] active_anon:491319 inactive_anon:584 isolated_anon:0 [ 499.167195] active_file:3977 inactive_file:6994 isolated_file:0 [ 499.167195] unevictable:0 dirty:8 writeback:0 unstable:0 [ 499.167195] slab_reclaimable:22551 slab_unreclaimable:159302 [ 499.167195] mapped:58398 shmem:637 pagetables:95008 bounce:0 [ 499.167195] free:664170 free_pcp:215 free_cma:0 [ 499.201399] Node 0 active_anon:1576576kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1368064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 499.229201] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.255911] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 499.261151] Node 0 DMA32 free:18080kB min:36380kB low:45472kB high:54564kB active_anon:1572220kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18144kB pagetables:41304kB bounce:0kB free_pcp:860kB local_pcp:120kB free_cma:0kB [ 499.290421] lowmem_reserve[]: 0 0 0 0 0 [ 499.294438] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.319814] lowmem_reserve[]: 0 0 0 0 0 [ 499.323866] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 499.339565] Node 0 DMA32: 790*4kB (ME) 175*8kB (ME) 85*16kB (UM) 380*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18080kB [ 499.353050] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 499.363831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.372830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 499.381474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.390474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 499.399178] 11610 total pagecache pages [ 499.403214] 0 pages in swap cache [ 499.406659] Swap cache stats: add 0, delete 0, find 0/0 [ 499.412075] Free swap = 0kB [ 499.415087] Total swap = 0kB [ 499.418092] 1965979 pages RAM [ 499.421308] 0 pages HighMem/MovableOnly [ 499.425454] 335868 pages reserved [ 499.428886] 0 pages cma reserved [ 499.432470] Out of memory: Kill process 7958 (syz-executor.2) score 1007 or sacrifice child [ 499.441047] Killed process 7958 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 499.453016] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 499.461805] oom_reaper: reaped process 7958 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 499.464986] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 499.480370] CPU: 1 PID: 25406 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 499.488358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.497914] Call Trace: [ 499.500496] dump_stack+0x142/0x197 [ 499.504110] warn_alloc.cold+0x96/0x1af [ 499.508199] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 499.513045] ? wait_for_completion+0x420/0x420 [ 499.517725] __alloc_pages_slowpath+0x23c6/0x2930 [ 499.522581] ? warn_alloc+0xf0/0xf0 [ 499.526311] ? __might_sleep+0x93/0xb0 [ 499.530192] __alloc_pages_nodemask+0x62c/0x7a0 [ 499.534879] ? lock_downgrade+0x740/0x740 [ 499.539013] ? __alloc_pages_slowpath+0x2930/0x2930 [ 499.544035] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 499.549655] alloc_pages_current+0xec/0x1e0 [ 499.554004] ion_page_pool_alloc+0x11f/0x1c0 [ 499.558469] ion_system_heap_allocate+0x138/0x910 [ 499.563301] ? ion_alloc+0x19b/0x860 [ 499.567232] ? rcu_read_lock_sched_held+0x110/0x130 [ 499.572241] ? ion_system_heap_free+0x250/0x250 [ 499.576898] ion_alloc+0x222/0x860 [ 499.580431] ? ion_dma_buf_release+0x50/0x50 [ 499.584868] ? kasan_check_write+0x14/0x20 [ 499.589122] ? _copy_from_user+0x99/0x110 [ 499.593269] ion_ioctl+0x105/0x217 [ 499.596835] ? ion_alloc.cold+0x40/0x40 [ 499.600811] ? ion_alloc.cold+0x40/0x40 [ 499.604774] do_vfs_ioctl+0x7ae/0x1060 [ 499.608698] ? selinux_file_mprotect+0x5d0/0x5d0 [ 499.613454] ? lock_downgrade+0x740/0x740 [ 499.617598] ? ioctl_preallocate+0x1c0/0x1c0 [ 499.622113] ? __fget+0x237/0x370 [ 499.625664] ? security_file_ioctl+0x89/0xb0 [ 499.630067] SyS_ioctl+0x8f/0xc0 [ 499.633420] ? do_vfs_ioctl+0x1060/0x1060 [ 499.637563] do_syscall_64+0x1e8/0x640 [ 499.641449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 499.646282] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 499.651459] RIP: 0033:0x45b349 [ 499.654694] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.662392] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 499.669647] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 499.676901] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 499.684210] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 499.691466] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 499.701029] Mem-Info: [ 499.703478] active_anon:490270 inactive_anon:584 isolated_anon:0 [ 499.703478] active_file:3977 inactive_file:6994 isolated_file:0 [ 499.703478] unevictable:0 dirty:8 writeback:0 unstable:0 [ 499.703478] slab_reclaimable:22551 slab_unreclaimable:159302 [ 499.703478] mapped:58398 shmem:637 pagetables:94971 bounce:0 [ 499.703478] free:665250 free_pcp:537 free_cma:0 [ 499.737347] Node 0 active_anon:1572380kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1368064kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 499.765110] Node 1 active_anon:388700kB inactive_anon:1328kB active_file:15900kB inactive_file:27972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:24kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 499.792944] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.819712] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 499.824992] Node 0 DMA32 free:22500kB min:36380kB low:45472kB high:54564kB active_anon:1568024kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18112kB pagetables:41156kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 499.854210] lowmem_reserve[]: 0 0 0 0 0 [ 499.858216] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 499.883549] lowmem_reserve[]: 0 0 0 0 0 [ 499.887551] Node 1 Normal free:2628232kB min:53508kB low:66884kB high:80260kB active_anon:388700kB inactive_anon:1328kB active_file:15900kB inactive_file:27972kB unevictable:0kB writepending:24kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:101888kB pagetables:338488kB bounce:0kB free_pcp:1404kB local_pcp:708kB free_cma:0kB [ 499.918343] lowmem_reserve[]: 0 0 0 0 0 [ 499.922389] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 499.938292] Node 0 DMA32: 829*4kB (UME) 178*8kB (UME) 87*16kB (UME) 386*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22580kB [ 499.952414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 499.963451] Node 1 Normal: 24*4kB (UME) 159*8kB (UM) 63*16kB (UM) 59*32kB (UM) 21*64kB (UME) 5*128kB (UE) 2*256kB (ME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (M) 639*4096kB (M) = 2628200kB [ 499.980170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 499.989202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 499.997851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.007157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.015877] 11610 total pagecache pages [ 500.019867] 0 pages in swap cache [ 500.023379] Swap cache stats: add 0, delete 0, find 0/0 [ 500.028786] Free swap = 0kB [ 500.031857] Total swap = 0kB [ 500.034873] 1965979 pages RAM [ 500.037962] 0 pages HighMem/MovableOnly [ 500.042042] 335868 pages reserved [ 500.045494] 0 pages cma reserved [ 500.067149] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 500.078687] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 500.084485] CPU: 1 PID: 25406 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 500.092519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.101881] Call Trace: [ 500.104476] dump_stack+0x142/0x197 [ 500.108102] warn_alloc.cold+0x96/0x1af [ 500.112075] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 500.117048] ? __alloc_pages_direct_compact+0xbc/0x380 [ 500.122320] __alloc_pages_slowpath+0x23c6/0x2930 [ 500.127171] ? save_trace+0x290/0x290 [ 500.130970] ? warn_alloc+0xf0/0xf0 [ 500.134710] ? __might_sleep+0x93/0xb0 [ 500.138700] __alloc_pages_nodemask+0x62c/0x7a0 [ 500.143459] ? lock_downgrade+0x740/0x740 [ 500.147725] ? __alloc_pages_slowpath+0x2930/0x2930 [ 500.152999] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 500.158620] alloc_pages_current+0xec/0x1e0 [ 500.163059] ion_page_pool_alloc+0x11f/0x1c0 [ 500.167551] ion_system_heap_allocate+0x138/0x910 [ 500.172395] ? ion_system_heap_free+0x250/0x250 [ 500.177164] ion_alloc+0x68c/0x860 [ 500.180705] ? ion_dma_buf_release+0x50/0x50 [ 500.185109] ? kasan_check_write+0x14/0x20 [ 500.189333] ? _copy_from_user+0x99/0x110 [ 500.193469] ion_ioctl+0x105/0x217 [ 500.197116] ? ion_alloc.cold+0x40/0x40 [ 500.201092] ? ion_alloc.cold+0x40/0x40 [ 500.205064] do_vfs_ioctl+0x7ae/0x1060 [ 500.208945] ? selinux_file_mprotect+0x5d0/0x5d0 [ 500.213695] ? lock_downgrade+0x740/0x740 [ 500.217841] ? ioctl_preallocate+0x1c0/0x1c0 [ 500.222387] ? __fget+0x237/0x370 [ 500.225841] ? security_file_ioctl+0x89/0xb0 [ 500.230347] SyS_ioctl+0x8f/0xc0 [ 500.233702] ? do_vfs_ioctl+0x1060/0x1060 [ 500.237857] do_syscall_64+0x1e8/0x640 [ 500.241900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.246740] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.251925] RIP: 0033:0x45b349 [ 500.255175] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.262876] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 500.270325] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 500.277605] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 500.284905] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 500.292180] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 500.341833] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 500.355032] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 500.360464] CPU: 1 PID: 25406 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 500.368432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.377788] Call Trace: [ 500.380421] dump_stack+0x142/0x197 [ 500.384057] dump_header+0x177/0x6cd [ 500.387981] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 500.393131] ? ___ratelimit+0x55/0x537 [ 500.397022] oom_kill_process.cold+0x10/0xadd [ 500.401506] ? oom_unkillable_task+0x294/0x390 [ 500.406081] ? lock_downgrade+0x740/0x740 [ 500.410248] out_of_memory+0x2ee/0x1180 [ 500.414318] ? lock_acquire+0x16f/0x430 [ 500.418423] ? __lock_is_held+0xb6/0x140 [ 500.422491] ? oom_killer_disable+0x1d0/0x1d0 [ 500.426975] ? __alloc_pages_slowpath+0xca4/0x2930 [ 500.431965] __alloc_pages_slowpath+0x2251/0x2930 [ 500.436819] ? warn_alloc+0xf0/0xf0 [ 500.440442] ? __might_sleep+0x93/0xb0 [ 500.444415] __alloc_pages_nodemask+0x62c/0x7a0 [ 500.449079] ? lock_downgrade+0x740/0x740 [ 500.453277] ? __alloc_pages_slowpath+0x2930/0x2930 [ 500.458290] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 500.463912] alloc_pages_current+0xec/0x1e0 [ 500.468227] ion_page_pool_alloc+0x11f/0x1c0 [ 500.472687] ion_system_heap_allocate+0x138/0x910 [ 500.477603] ? ion_system_heap_free+0x250/0x250 [ 500.482264] ion_alloc+0x68c/0x860 [ 500.485901] ? ion_dma_buf_release+0x50/0x50 [ 500.490304] ? kasan_check_write+0x14/0x20 [ 500.494595] ? _copy_from_user+0x99/0x110 [ 500.498783] ion_ioctl+0x105/0x217 [ 500.502394] ? ion_alloc.cold+0x40/0x40 [ 500.506376] ? ion_alloc.cold+0x40/0x40 [ 500.510345] do_vfs_ioctl+0x7ae/0x1060 [ 500.514232] ? selinux_file_mprotect+0x5d0/0x5d0 [ 500.519097] ? lock_downgrade+0x740/0x740 [ 500.523247] ? ioctl_preallocate+0x1c0/0x1c0 [ 500.527667] ? __fget+0x237/0x370 [ 500.531111] ? security_file_ioctl+0x89/0xb0 [ 500.535513] SyS_ioctl+0x8f/0xc0 [ 500.538932] ? do_vfs_ioctl+0x1060/0x1060 [ 500.543071] do_syscall_64+0x1e8/0x640 [ 500.546953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.551878] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.557241] RIP: 0033:0x45b349 [ 500.560514] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.568441] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 500.575717] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 500.583002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 500.590265] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 500.597615] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 500.605284] Mem-Info: [ 500.607824] active_anon:490265 inactive_anon:584 isolated_anon:0 [ 500.607824] active_file:3978 inactive_file:7000 isolated_file:0 [ 500.607824] unevictable:0 dirty:30 writeback:0 unstable:0 [ 500.607824] slab_reclaimable:22552 slab_unreclaimable:159303 [ 500.607824] mapped:58398 shmem:637 pagetables:94981 bounce:0 [ 500.607824] free:664178 free_pcp:184 free_cma:0 [ 500.641852] Node 0 active_anon:1572360kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1363968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 500.669919] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.696811] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 500.702095] Node 0 DMA32 free:18112kB min:36380kB low:45472kB high:54564kB active_anon:1568004kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18112kB pagetables:41196kB bounce:0kB free_pcp:736kB local_pcp:120kB free_cma:0kB [ 500.731256] lowmem_reserve[]: 0 0 0 0 0 [ 500.735243] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.760626] lowmem_reserve[]: 0 0 0 0 0 [ 500.764622] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 500.780470] Node 0 DMA32: 828*4kB (ME) 178*8kB (UME) 86*16kB (ME) 375*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 500.794163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.805199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.814309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.822990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.831898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.840556] 11629 total pagecache pages [ 500.844535] 0 pages in swap cache [ 500.847976] Swap cache stats: add 0, delete 0, find 0/0 [ 500.853381] Free swap = 0kB [ 500.856445] Total swap = 0kB [ 500.859492] 1965979 pages RAM [ 500.862642] 0 pages HighMem/MovableOnly [ 500.866755] 335868 pages reserved [ 500.870269] 0 pages cma reserved [ 500.873637] Out of memory: Kill process 8037 (syz-executor.1) score 1007 or sacrifice child [ 500.882212] Killed process 8037 (syz-executor.1) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 500.894192] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 500.904895] oom_reaper: reaped process 8037 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 500.905908] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 500.921180] CPU: 1 PID: 25406 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 500.929049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.939608] Call Trace: [ 500.942290] dump_stack+0x142/0x197 [ 500.945908] warn_alloc.cold+0x96/0x1af [ 500.949902] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 500.954908] ? wait_for_completion+0x420/0x420 [ 500.959520] __alloc_pages_slowpath+0x23c6/0x2930 [ 500.964375] ? warn_alloc+0xf0/0xf0 [ 500.968050] ? __might_sleep+0x93/0xb0 [ 500.971986] __alloc_pages_nodemask+0x62c/0x7a0 [ 500.976664] ? lock_downgrade+0x740/0x740 [ 500.981371] ? __alloc_pages_slowpath+0x2930/0x2930 [ 500.986381] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 500.991994] alloc_pages_current+0xec/0x1e0 [ 500.996304] ion_page_pool_alloc+0x11f/0x1c0 [ 501.000710] ion_system_heap_allocate+0x138/0x910 [ 501.005549] ? ion_system_heap_free+0x250/0x250 [ 501.010213] ion_alloc+0x68c/0x860 [ 501.013743] ? ion_dma_buf_release+0x50/0x50 [ 501.018234] ? kasan_check_write+0x14/0x20 [ 501.022461] ? _copy_from_user+0x99/0x110 [ 501.026607] ion_ioctl+0x105/0x217 [ 501.030567] ? ion_alloc.cold+0x40/0x40 [ 501.035156] ? ion_alloc.cold+0x40/0x40 [ 501.039128] do_vfs_ioctl+0x7ae/0x1060 [ 501.043010] ? selinux_file_mprotect+0x5d0/0x5d0 [ 501.047791] ? lock_downgrade+0x740/0x740 [ 501.052015] ? ioctl_preallocate+0x1c0/0x1c0 [ 501.056421] ? __fget+0x237/0x370 [ 501.059919] ? security_file_ioctl+0x89/0xb0 [ 501.064314] SyS_ioctl+0x8f/0xc0 [ 501.067695] ? do_vfs_ioctl+0x1060/0x1060 [ 501.071835] do_syscall_64+0x1e8/0x640 [ 501.075704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 501.080539] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 501.085721] RIP: 0033:0x45b349 [ 501.088904] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.097468] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 501.104730] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 501.111991] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 501.119260] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 501.126520] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 501.134165] warn_alloc_show_mem: 1 callbacks suppressed [ 501.134168] Mem-Info: [ 501.141992] active_anon:489735 inactive_anon:584 isolated_anon:0 [ 501.141992] active_file:3978 inactive_file:7017 isolated_file:0 [ 501.141992] unevictable:0 dirty:36 writeback:0 unstable:0 [ 501.141992] slab_reclaimable:22552 slab_unreclaimable:159304 [ 501.141992] mapped:58398 shmem:637 pagetables:94954 bounce:0 [ 501.141992] free:664723 free_pcp:507 free_cma:0 [ 501.175769] Node 0 active_anon:1570240kB inactive_anon:1008kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1361920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 501.203637] Node 1 active_anon:388700kB inactive_anon:1328kB active_file:15900kB inactive_file:28068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:136kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 501.233675] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.260385] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 501.265452] Node 0 DMA32 free:20292kB min:36380kB low:45472kB high:54564kB active_anon:1565884kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18080kB pagetables:41088kB bounce:0kB free_pcp:812kB local_pcp:120kB free_cma:0kB [ 501.294846] lowmem_reserve[]: 0 0 0 0 0 [ 501.298852] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.324242] lowmem_reserve[]: 0 0 0 0 0 [ 501.328403] Node 1 Normal free:2628332kB min:53508kB low:66884kB high:80260kB active_anon:388700kB inactive_anon:1328kB active_file:15900kB inactive_file:28068kB unevictable:0kB writepending:136kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:101888kB pagetables:338488kB bounce:0kB free_pcp:1212kB local_pcp:584kB free_cma:0kB [ 501.359026] lowmem_reserve[]: 0 0 0 0 0 [ 501.363091] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 501.378797] Node 0 DMA32: 839*4kB (ME) 180*8kB (UME) 88*16kB (UME) 377*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20316kB [ 501.392873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 501.403641] Node 1 Normal: 43*4kB (UME) 165*8kB (UM) 63*16kB (UM) 59*32kB (UM) 21*64kB (UME) 5*128kB (UE) 2*256kB (ME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (M) 639*4096kB (M) = 2628324kB [ 501.420396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.429237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 501.437928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 22:04:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, [], @p_u16=0x0}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:04:15 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:15 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:15 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x0]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:15 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 501.446845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 501.455468] 11633 total pagecache pages [ 501.459445] 0 pages in swap cache [ 501.462963] Swap cache stats: add 0, delete 0, find 0/0 [ 501.468318] Free swap = 0kB [ 501.471397] Total swap = 0kB [ 501.474410] 1965979 pages RAM [ 501.477494] 0 pages HighMem/MovableOnly [ 501.481907] 335868 pages reserved [ 501.485637] 0 pages cma reserved [ 501.561408] audit: type=1804 audit(1580076255.356:1835): pid=25448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/569/file0" dev="sda1" ino=21428 res=1 22:04:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:04:15 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:15 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x0]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:15 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:15 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 501.991204] audit: type=1804 audit(1580076255.786:1836): pid=25467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/570/file0" dev="sda1" ino=21176 res=1 22:04:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 502.038733] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 502.186559] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 502.234263] CPU: 0 PID: 25462 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 502.242266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.251726] Call Trace: [ 502.254326] dump_stack+0x142/0x197 [ 502.257966] warn_alloc.cold+0x96/0x1af [ 502.261952] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 502.266811] ? __alloc_pages_direct_compact+0xbc/0x380 [ 502.272100] __alloc_pages_slowpath+0x23c6/0x2930 [ 502.276966] ? save_trace+0x290/0x290 [ 502.280780] ? warn_alloc+0xf0/0xf0 [ 502.284425] ? __might_sleep+0x93/0xb0 [ 502.288351] __alloc_pages_nodemask+0x62c/0x7a0 [ 502.293030] ? lock_downgrade+0x740/0x740 [ 502.297189] ? __alloc_pages_slowpath+0x2930/0x2930 [ 502.302216] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 502.307853] alloc_pages_current+0xec/0x1e0 [ 502.312187] ion_page_pool_alloc+0x11f/0x1c0 [ 502.316612] ion_system_heap_allocate+0x138/0x910 [ 502.321465] ? ion_alloc+0x19b/0x860 [ 502.325184] ? rcu_read_lock_sched_held+0x110/0x130 [ 502.330213] ? ion_system_heap_free+0x250/0x250 [ 502.335042] ion_alloc+0x222/0x860 [ 502.338593] ? ion_dma_buf_release+0x50/0x50 [ 502.343036] ? kasan_check_write+0x14/0x20 [ 502.347374] ? _copy_from_user+0x99/0x110 [ 502.351534] ion_ioctl+0x105/0x217 [ 502.355075] ? ion_alloc.cold+0x40/0x40 [ 502.359061] ? ion_alloc.cold+0x40/0x40 [ 502.363047] do_vfs_ioctl+0x7ae/0x1060 [ 502.366940] ? selinux_file_mprotect+0x5d0/0x5d0 [ 502.371695] ? lock_downgrade+0x740/0x740 [ 502.375848] ? ioctl_preallocate+0x1c0/0x1c0 [ 502.380267] ? __fget+0x237/0x370 [ 502.383728] ? security_file_ioctl+0x89/0xb0 [ 502.388150] SyS_ioctl+0x8f/0xc0 [ 502.391518] ? do_vfs_ioctl+0x1060/0x1060 [ 502.395671] do_syscall_64+0x1e8/0x640 [ 502.399562] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.404415] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 502.409616] RIP: 0033:0x45b349 [ 502.412802] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.420523] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 502.427794] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 502.435069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 502.442363] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 502.449642] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 502.526336] Mem-Info: [ 502.528969] active_anon:489945 inactive_anon:584 isolated_anon:0 [ 502.528969] active_file:3980 inactive_file:7024 isolated_file:0 [ 502.528969] unevictable:0 dirty:28 writeback:21 unstable:0 [ 502.528969] slab_reclaimable:22555 slab_unreclaimable:159286 [ 502.528969] mapped:58413 shmem:637 pagetables:95199 bounce:0 [ 502.528969] free:668364 free_pcp:203 free_cma:0 [ 502.567438] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 502.586885] Node 0 active_anon:1570240kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1361920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 502.738730] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 502.781857] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 502.818943] Node 0 DMA32 free:36304kB min:36380kB low:45472kB high:54564kB active_anon:1565884kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18080kB pagetables:41088kB bounce:0kB free_pcp:772kB local_pcp:692kB free_cma:0kB [ 502.848969] lowmem_reserve[]: 0 0 0 0 0 [ 502.860550] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 502.886097] lowmem_reserve[]: 0 0 0 0 0 [ 502.890203] Node 0 DMA: 3*4kB (ME) 6*8kB (UE) 10*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 502.905990] Node 0 DMA32: 1992*4kB (UME) 182*8kB (ME) 688*16kB (UME) 494*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36240kB [ 502.920058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 502.930906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.939823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 502.948584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.957547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 502.966214] 11649 total pagecache pages [ 502.970592] 0 pages in swap cache [ 502.974043] Swap cache stats: add 0, delete 0, find 0/0 [ 502.979441] Free swap = 0kB [ 502.982501] Total swap = 0kB [ 502.985623] 1965979 pages RAM [ 502.988769] 0 pages HighMem/MovableOnly [ 502.992797] 335868 pages reserved [ 502.996248] 0 pages cma reserved [ 503.007900] oom_reaper: reaped process 25462 (syz-executor.0), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 503.047082] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 503.060412] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 503.065805] CPU: 0 PID: 25462 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 503.073675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.083071] Call Trace: [ 503.085663] dump_stack+0x142/0x197 [ 503.089519] dump_header+0x177/0x6cd [ 503.093220] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 503.098315] ? ___ratelimit+0x55/0x537 [ 503.102219] oom_kill_process.cold+0x10/0xadd [ 503.106727] ? lock_downgrade+0x740/0x740 [ 503.110887] out_of_memory+0x2ee/0x1180 [ 503.114862] ? lock_acquire+0x16f/0x430 [ 503.118830] ? __lock_is_held+0xb6/0x140 [ 503.122918] ? oom_killer_disable+0x1d0/0x1d0 [ 503.127415] ? __alloc_pages_slowpath+0xca4/0x2930 [ 503.132335] __alloc_pages_slowpath+0x2251/0x2930 [ 503.137179] ? warn_alloc+0xf0/0xf0 [ 503.140799] ? __might_sleep+0x93/0xb0 [ 503.144671] __alloc_pages_nodemask+0x62c/0x7a0 [ 503.149332] ? lock_downgrade+0x740/0x740 [ 503.153473] ? __alloc_pages_slowpath+0x2930/0x2930 [ 503.158488] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 503.164112] alloc_pages_current+0xec/0x1e0 [ 503.168559] ion_page_pool_alloc+0x11f/0x1c0 [ 503.172961] ion_system_heap_allocate+0x138/0x910 [ 503.178894] ? ion_alloc+0x19b/0x860 [ 503.182606] ? rcu_read_lock_sched_held+0x110/0x130 [ 503.191269] ? ion_system_heap_free+0x250/0x250 [ 503.195935] ion_alloc+0x222/0x860 [ 503.199466] ? ion_dma_buf_release+0x50/0x50 [ 503.204016] ? kasan_check_write+0x14/0x20 [ 503.208248] ? _copy_from_user+0x99/0x110 [ 503.212484] ion_ioctl+0x105/0x217 [ 503.216108] ? ion_alloc.cold+0x40/0x40 [ 503.220080] ? ion_alloc.cold+0x40/0x40 [ 503.224044] do_vfs_ioctl+0x7ae/0x1060 [ 503.227935] ? selinux_file_mprotect+0x5d0/0x5d0 [ 503.232738] ? lock_downgrade+0x740/0x740 [ 503.237054] ? ioctl_preallocate+0x1c0/0x1c0 [ 503.241454] ? __fget+0x237/0x370 [ 503.244904] ? security_file_ioctl+0x89/0xb0 [ 503.249307] SyS_ioctl+0x8f/0xc0 [ 503.252665] ? do_vfs_ioctl+0x1060/0x1060 [ 503.256800] do_syscall_64+0x1e8/0x640 [ 503.260768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.265604] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 503.270807] RIP: 0033:0x45b349 [ 503.273990] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.281693] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 503.288953] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 503.296378] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 503.303812] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 503.311076] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 503.319493] Mem-Info: [ 503.322003] active_anon:489945 inactive_anon:584 isolated_anon:0 [ 503.322003] active_file:3984 inactive_file:7028 isolated_file:0 [ 503.322003] unevictable:0 dirty:67 writeback:0 unstable:0 [ 503.322003] slab_reclaimable:22574 slab_unreclaimable:159176 [ 503.322003] mapped:58398 shmem:637 pagetables:95141 bounce:0 [ 503.322003] free:663954 free_pcp:77 free_cma:0 [ 503.355669] Node 0 active_anon:1570240kB inactive_anon:1008kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1361920kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 503.383340] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.410148] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 503.415183] Node 0 DMA32 free:18136kB min:36380kB low:45472kB high:54564kB active_anon:1565884kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18080kB pagetables:41088kB bounce:0kB free_pcp:308kB local_pcp:236kB free_cma:0kB [ 503.444790] lowmem_reserve[]: 0 0 0 0 0 [ 503.448839] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.474189] lowmem_reserve[]: 0 0 0 0 0 [ 503.478192] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 503.493838] Node 0 DMA32: 824*4kB (ME) 183*8kB (UME) 106*16kB (UME) 365*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 503.507634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 503.518572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.527459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.536201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.545350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.554001] 11655 total pagecache pages [ 503.557990] 0 pages in swap cache [ 503.561631] Swap cache stats: add 0, delete 0, find 0/0 [ 503.567040] Free swap = 0kB [ 503.570601] Total swap = 0kB [ 503.573623] 1965979 pages RAM [ 503.576770] 0 pages HighMem/MovableOnly [ 503.580807] 335868 pages reserved [ 503.584298] 0 pages cma reserved [ 503.587706] Out of memory: Kill process 8107 (syz-executor.1) score 1007 or sacrifice child [ 503.596285] Killed process 8107 (syz-executor.1) total-vm:72720kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 503.608252] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 503.619820] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 503.625270] CPU: 0 PID: 25462 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 503.633157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.642633] Call Trace: [ 503.645211] dump_stack+0x142/0x197 [ 503.648835] warn_alloc.cold+0x96/0x1af [ 503.652871] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 503.657796] ? wait_for_completion+0x420/0x420 [ 503.662404] __alloc_pages_slowpath+0x23c6/0x2930 [ 503.667246] ? warn_alloc+0xf0/0xf0 [ 503.670868] ? __might_sleep+0x93/0xb0 [ 503.674742] __alloc_pages_nodemask+0x62c/0x7a0 [ 503.679501] ? lock_downgrade+0x740/0x740 [ 503.683643] ? __alloc_pages_slowpath+0x2930/0x2930 [ 503.688657] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 503.694419] alloc_pages_current+0xec/0x1e0 [ 503.698749] ion_page_pool_alloc+0x11f/0x1c0 [ 503.703147] ion_system_heap_allocate+0x138/0x910 [ 503.708022] ? ion_alloc+0x19b/0x860 [ 503.711724] ? rcu_read_lock_sched_held+0x110/0x130 [ 503.716727] ? ion_system_heap_free+0x250/0x250 [ 503.721388] ion_alloc+0x222/0x860 [ 503.724918] ? ion_dma_buf_release+0x50/0x50 [ 503.729352] ? kasan_check_write+0x14/0x20 [ 503.733577] ? _copy_from_user+0x99/0x110 [ 503.737721] ion_ioctl+0x105/0x217 [ 503.741254] ? ion_alloc.cold+0x40/0x40 [ 503.745221] ? ion_alloc.cold+0x40/0x40 [ 503.749347] do_vfs_ioctl+0x7ae/0x1060 [ 503.753224] ? selinux_file_mprotect+0x5d0/0x5d0 [ 503.757980] ? lock_downgrade+0x740/0x740 [ 503.762120] ? ioctl_preallocate+0x1c0/0x1c0 [ 503.766532] ? __fget+0x237/0x370 [ 503.769975] ? security_file_ioctl+0x89/0xb0 [ 503.774377] SyS_ioctl+0x8f/0xc0 [ 503.777734] ? do_vfs_ioctl+0x1060/0x1060 [ 503.781919] do_syscall_64+0x1e8/0x640 [ 503.785798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.790639] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 503.795816] RIP: 0033:0x45b349 [ 503.798993] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.806688] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 503.813948] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 503.821256] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 503.828603] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 503.835868] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 503.844186] Mem-Info: [ 503.846619] active_anon:488893 inactive_anon:583 isolated_anon:0 [ 503.846619] active_file:3985 inactive_file:7036 isolated_file:0 [ 503.846619] unevictable:0 dirty:75 writeback:0 unstable:0 [ 503.846619] slab_reclaimable:22574 slab_unreclaimable:159176 [ 503.846619] mapped:58398 shmem:636 pagetables:95114 bounce:0 [ 503.846619] free:664986 free_pcp:417 free_cma:0 [ 503.880383] Node 0 active_anon:1566024kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1357824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 503.908159] Node 1 active_anon:389548kB inactive_anon:1328kB active_file:15928kB inactive_file:28144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:296kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 503.936225] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.962975] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 503.968017] Node 0 DMA32 free:22264kB min:36380kB low:45472kB high:54564kB active_anon:1561668kB inactive_anon:1000kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18048kB pagetables:40980kB bounce:0kB free_pcp:560kB local_pcp:236kB free_cma:0kB [ 504.001986] lowmem_reserve[]: 0 0 0 0 0 [ 504.005975] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.031448] lowmem_reserve[]: 0 0 0 0 0 [ 504.035435] Node 1 Normal free:2627280kB min:53508kB low:66884kB high:80260kB active_anon:389548kB inactive_anon:1328kB active_file:15928kB inactive_file:28144kB unevictable:0kB writepending:300kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:102112kB pagetables:339236kB bounce:0kB free_pcp:1224kB local_pcp:660kB free_cma:0kB [ 504.065885] lowmem_reserve[]: 0 0 0 0 0 [ 504.069914] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 504.086168] Node 0 DMA32: 824*4kB (ME) 185*8kB (UME) 106*16kB (UME) 366*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22280kB [ 504.100222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.112278] Node 1 Normal: 44*4kB (UM) 16*8kB (UE) 42*16kB (UME) 74*32kB (UME) 23*64kB (UE) 8*128kB (UME) 2*256kB (ME) 1*512kB (E) 1*1024kB (U) 1*2048kB (M) 639*4096kB (M) = 2627280kB [ 504.129030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.138444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.147093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.155980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 504.164650] 11662 total pagecache pages [ 504.168622] 0 pages in swap cache [ 504.172114] Swap cache stats: add 0, delete 0, find 0/0 [ 504.177569] Free swap = 0kB [ 504.180637] Total swap = 0kB [ 504.183738] 1965979 pages RAM [ 504.186828] 0 pages HighMem/MovableOnly [ 504.190871] 335868 pages reserved [ 504.194316] 0 pages cma reserved [ 504.216154] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 504.228081] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 504.233566] CPU: 0 PID: 25462 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 504.241472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.250828] Call Trace: [ 504.253421] dump_stack+0x142/0x197 [ 504.257181] warn_alloc.cold+0x96/0x1af [ 504.261152] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 504.265990] ? __alloc_pages_direct_compact+0xbc/0x380 [ 504.271281] __alloc_pages_slowpath+0x23c6/0x2930 [ 504.276137] ? save_trace+0x290/0x290 [ 504.279947] ? warn_alloc+0xf0/0xf0 [ 504.283570] ? __might_sleep+0x93/0xb0 [ 504.287560] __alloc_pages_nodemask+0x62c/0x7a0 [ 504.292222] ? lock_downgrade+0x740/0x740 [ 504.296387] ? __alloc_pages_slowpath+0x2930/0x2930 [ 504.301405] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 504.307034] alloc_pages_current+0xec/0x1e0 [ 504.311379] ion_page_pool_alloc+0x11f/0x1c0 [ 504.315802] ion_system_heap_allocate+0x138/0x910 [ 504.320646] ? ion_system_heap_free+0x250/0x250 [ 504.325324] ion_alloc+0x68c/0x860 [ 504.328874] ? ion_dma_buf_release+0x50/0x50 [ 504.333282] ? kasan_check_write+0x14/0x20 [ 504.337515] ? _copy_from_user+0x99/0x110 [ 504.341681] ion_ioctl+0x105/0x217 [ 504.345345] ? ion_alloc.cold+0x40/0x40 [ 504.349320] ? ion_alloc.cold+0x40/0x40 [ 504.353299] do_vfs_ioctl+0x7ae/0x1060 [ 504.357175] ? selinux_file_mprotect+0x5d0/0x5d0 [ 504.361939] ? lock_downgrade+0x740/0x740 [ 504.366183] ? ioctl_preallocate+0x1c0/0x1c0 [ 504.370598] ? __fget+0x237/0x370 [ 504.374129] ? security_file_ioctl+0x89/0xb0 [ 504.378552] SyS_ioctl+0x8f/0xc0 [ 504.381914] ? do_vfs_ioctl+0x1060/0x1060 [ 504.386050] do_syscall_64+0x1e8/0x640 [ 504.389934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 504.394772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 504.400082] RIP: 0033:0x45b349 [ 504.403269] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.410972] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 504.418232] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 504.425499] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 504.432840] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 504.440138] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 505.044152] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 505.057412] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 505.062868] CPU: 0 PID: 25462 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 505.070751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.080110] Call Trace: [ 505.082702] dump_stack+0x142/0x197 [ 505.086489] dump_header+0x177/0x6cd [ 505.090223] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 505.095415] ? ___ratelimit+0x55/0x537 [ 505.099296] oom_kill_process.cold+0x10/0xadd [ 505.103792] ? rcu_read_unlock_special+0x639/0xd40 [ 505.108728] ? lock_downgrade+0x740/0x740 [ 505.112878] out_of_memory+0x2ee/0x1180 [ 505.116852] ? lock_acquire+0x16f/0x430 [ 505.120826] ? oom_killer_disable+0x1d0/0x1d0 [ 505.125418] ? __alloc_pages_slowpath+0xca4/0x2930 [ 505.130340] __alloc_pages_slowpath+0x2251/0x2930 [ 505.135181] ? warn_alloc+0xf0/0xf0 [ 505.138820] ? __might_sleep+0x93/0xb0 [ 505.142704] __alloc_pages_nodemask+0x62c/0x7a0 [ 505.147595] ? lock_downgrade+0x740/0x740 [ 505.151790] ? __alloc_pages_slowpath+0x2930/0x2930 [ 505.156805] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 505.162430] alloc_pages_current+0xec/0x1e0 [ 505.166759] ion_page_pool_alloc+0x11f/0x1c0 [ 505.171155] ion_system_heap_allocate+0x138/0x910 [ 505.176172] ? ion_system_heap_free+0x250/0x250 [ 505.180845] ion_alloc+0x68c/0x860 [ 505.184386] ? ion_dma_buf_release+0x50/0x50 [ 505.189143] ? kasan_check_write+0x14/0x20 [ 505.193374] ? _copy_from_user+0x99/0x110 [ 505.197507] ion_ioctl+0x105/0x217 [ 505.201045] ? ion_alloc.cold+0x40/0x40 [ 505.205032] ? ion_alloc.cold+0x40/0x40 [ 505.209000] do_vfs_ioctl+0x7ae/0x1060 [ 505.212922] ? selinux_file_mprotect+0x5d0/0x5d0 [ 505.217673] ? lock_downgrade+0x740/0x740 [ 505.221817] ? ioctl_preallocate+0x1c0/0x1c0 [ 505.226338] ? __fget+0x237/0x370 [ 505.229867] ? security_file_ioctl+0x89/0xb0 [ 505.234258] SyS_ioctl+0x8f/0xc0 [ 505.237617] ? do_vfs_ioctl+0x1060/0x1060 [ 505.241812] do_syscall_64+0x1e8/0x640 [ 505.245707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 505.250557] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 505.255743] RIP: 0033:0x45b349 [ 505.258915] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.266619] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 505.273884] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 505.281150] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 505.288421] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 505.295677] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 505.306695] Mem-Info: [ 505.309138] active_anon:488893 inactive_anon:583 isolated_anon:0 [ 505.309138] active_file:3985 inactive_file:7045 isolated_file:0 [ 505.309138] unevictable:0 dirty:8 writeback:0 unstable:0 [ 505.309138] slab_reclaimable:22576 slab_unreclaimable:159247 [ 505.309138] mapped:58398 shmem:636 pagetables:95114 bounce:0 [ 505.309138] free:663869 free_pcp:109 free_cma:0 [ 505.343378] Node 0 active_anon:1566024kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1357824kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 505.371328] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.398049] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 505.403143] Node 0 DMA32 free:18184kB min:36380kB low:45472kB high:54564kB active_anon:1561668kB inactive_anon:1000kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18048kB pagetables:40980kB bounce:0kB free_pcp:436kB local_pcp:120kB free_cma:0kB [ 505.434148] lowmem_reserve[]: 0 0 0 0 0 [ 505.438222] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.464006] lowmem_reserve[]: 0 0 0 0 0 [ 505.468031] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 505.483707] Node 0 DMA32: 824*4kB (UM) 181*8kB (M) 106*16kB (ME) 367*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18184kB [ 505.497173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.509158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.518177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 505.526930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.536127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 505.545041] 11671 total pagecache pages [ 505.549035] 0 pages in swap cache [ 505.552540] Swap cache stats: add 0, delete 0, find 0/0 [ 505.557936] Free swap = 0kB [ 505.561467] Total swap = 0kB [ 505.564482] 1965979 pages RAM [ 505.567570] 0 pages HighMem/MovableOnly [ 505.571590] 335868 pages reserved [ 505.575037] 0 pages cma reserved [ 505.578386] Out of memory: Kill process 8144 (syz-executor.2) score 1007 or sacrifice child [ 505.586999] Killed process 8144 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 505.598978] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 505.606638] oom_reaper: reaped process 8144 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 505.610447] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 505.625796] CPU: 0 PID: 25462 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 505.633762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.643108] Call Trace: [ 505.645694] dump_stack+0x142/0x197 [ 505.649587] warn_alloc.cold+0x96/0x1af [ 505.653561] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 505.658408] ? wait_for_completion+0x420/0x420 [ 505.662992] __alloc_pages_slowpath+0x23c6/0x2930 [ 505.667837] ? warn_alloc+0xf0/0xf0 [ 505.671483] ? __might_sleep+0x93/0xb0 [ 505.675362] __alloc_pages_nodemask+0x62c/0x7a0 [ 505.680472] ? lock_downgrade+0x740/0x740 [ 505.684614] ? __alloc_pages_slowpath+0x2930/0x2930 [ 505.689619] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 505.695346] alloc_pages_current+0xec/0x1e0 [ 505.699668] ion_page_pool_alloc+0x11f/0x1c0 [ 505.704070] ion_system_heap_allocate+0x138/0x910 [ 505.708906] ? ion_system_heap_free+0x250/0x250 [ 505.713669] ion_alloc+0x68c/0x860 [ 505.717204] ? ion_dma_buf_release+0x50/0x50 [ 505.721611] ? kasan_check_write+0x14/0x20 [ 505.725829] ? _copy_from_user+0x99/0x110 [ 505.729972] ion_ioctl+0x105/0x217 [ 505.733498] ? ion_alloc.cold+0x40/0x40 [ 505.737569] ? ion_alloc.cold+0x40/0x40 [ 505.741589] do_vfs_ioctl+0x7ae/0x1060 [ 505.745480] ? selinux_file_mprotect+0x5d0/0x5d0 [ 505.751881] ? lock_downgrade+0x740/0x740 [ 505.756028] ? ioctl_preallocate+0x1c0/0x1c0 [ 505.760497] ? __fget+0x237/0x370 [ 505.763943] ? security_file_ioctl+0x89/0xb0 [ 505.768351] SyS_ioctl+0x8f/0xc0 [ 505.771701] ? do_vfs_ioctl+0x1060/0x1060 [ 505.775847] do_syscall_64+0x1e8/0x640 [ 505.780086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 505.785003] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 505.790307] RIP: 0033:0x45b349 [ 505.793484] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.801286] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 505.808549] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 505.815812] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 505.823072] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 505.830331] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 505.838401] warn_alloc_show_mem: 1 callbacks suppressed [ 505.838404] Mem-Info: [ 505.846738] active_anon:487697 inactive_anon:583 isolated_anon:0 [ 505.846738] active_file:3985 inactive_file:7051 isolated_file:0 [ 505.846738] unevictable:0 dirty:19 writeback:0 unstable:0 [ 505.846738] slab_reclaimable:22576 slab_unreclaimable:159248 [ 505.846738] mapped:58398 shmem:636 pagetables:95059 bounce:0 [ 505.846738] free:665041 free_pcp:470 free_cma:0 [ 505.880729] Node 0 active_anon:1561808kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1353728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 505.908953] Node 1 active_anon:388980kB inactive_anon:1328kB active_file:15928kB inactive_file:28204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:72kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 505.937411] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.965006] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 505.970085] Node 0 DMA32 free:22344kB min:36380kB low:45472kB high:54564kB active_anon:1557452kB inactive_anon:1000kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18016kB pagetables:40872kB bounce:0kB free_pcp:700kB local_pcp:120kB free_cma:0kB [ 505.999441] lowmem_reserve[]: 0 0 0 0 0 [ 506.003613] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.029102] lowmem_reserve[]: 0 0 0 0 0 [ 506.033156] Node 1 Normal free:2628112kB min:53508kB low:66884kB high:80260kB active_anon:388980kB inactive_anon:1328kB active_file:15928kB inactive_file:28204kB unevictable:0kB writepending:80kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:102048kB pagetables:339124kB bounce:0kB free_pcp:1364kB local_pcp:660kB free_cma:0kB [ 506.063879] lowmem_reserve[]: 0 0 0 0 0 [ 506.067878] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 506.084256] Node 0 DMA32: 824*4kB (UM) 185*8kB (UM) 106*16kB (ME) 368*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22344kB [ 506.098677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 506.109450] Node 1 Normal: 112*4kB (UM) 66*8kB (UM) 49*16kB (UME) 79*32kB (UME) 23*64kB (UE) 8*128kB (UME) 2*256kB (ME) 1*512kB (E) 1*1024kB (U) 1*2048kB (M) 639*4096kB (M) = 2628224kB [ 506.126175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.135104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:04:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x0]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:20 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:20 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 506.144268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.153178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 506.161922] 11677 total pagecache pages [ 506.165893] 0 pages in swap cache [ 506.169351] Swap cache stats: add 0, delete 0, find 0/0 [ 506.174784] Free swap = 0kB [ 506.177810] Total swap = 0kB [ 506.180888] 1965979 pages RAM [ 506.184118] 0 pages HighMem/MovableOnly [ 506.188113] 335868 pages reserved [ 506.191637] 0 pages cma reserved 22:04:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:20 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x8]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 506.277321] audit: type=1804 audit(1580076260.066:1837): pid=25502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/571/file0" dev="sda1" ino=21557 res=1 22:04:20 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 506.575373] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 506.594980] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 506.612486] CPU: 1 PID: 25520 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 506.620406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.629771] Call Trace: [ 506.632373] dump_stack+0x142/0x197 [ 506.636013] warn_alloc.cold+0x96/0x1af [ 506.640007] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 506.644876] ? __alloc_pages_direct_compact+0xbc/0x380 [ 506.650170] __alloc_pages_slowpath+0x23c6/0x2930 [ 506.655031] ? save_trace+0x290/0x290 [ 506.658845] ? warn_alloc+0xf0/0xf0 [ 506.662502] ? __might_sleep+0x93/0xb0 [ 506.666397] __alloc_pages_nodemask+0x62c/0x7a0 [ 506.671086] ? lock_downgrade+0x740/0x740 [ 506.675253] ? __alloc_pages_slowpath+0x2930/0x2930 [ 506.680283] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 506.685922] alloc_pages_current+0xec/0x1e0 [ 506.690263] ion_page_pool_alloc+0x11f/0x1c0 [ 506.695113] ion_system_heap_allocate+0x138/0x910 [ 506.699961] ? ion_alloc+0x19b/0x860 [ 506.703687] ? rcu_read_lock_sched_held+0x110/0x130 [ 506.709502] ? ion_system_heap_free+0x250/0x250 [ 506.714186] ion_alloc+0x222/0x860 [ 506.717746] ? ion_dma_buf_release+0x50/0x50 [ 506.722200] ? kasan_check_write+0x14/0x20 [ 506.726723] ? _copy_from_user+0x99/0x110 [ 506.730881] ion_ioctl+0x105/0x217 [ 506.734435] ? ion_alloc.cold+0x40/0x40 [ 506.738427] ? ion_alloc.cold+0x40/0x40 [ 506.742510] do_vfs_ioctl+0x7ae/0x1060 [ 506.746409] ? selinux_file_mprotect+0x5d0/0x5d0 [ 506.751290] ? lock_downgrade+0x740/0x740 [ 506.755442] ? ioctl_preallocate+0x1c0/0x1c0 [ 506.759873] ? __fget+0x237/0x370 [ 506.763343] ? security_file_ioctl+0x89/0xb0 [ 506.767769] SyS_ioctl+0x8f/0xc0 [ 506.771147] ? do_vfs_ioctl+0x1060/0x1060 22:04:20 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 506.775313] do_syscall_64+0x1e8/0x640 [ 506.779214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 506.784070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 506.789259] RIP: 0033:0x45b349 [ 506.792555] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.800269] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 506.807544] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 506.814966] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 506.822243] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 506.829518] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 506.846033] audit: type=1804 audit(1580076260.646:1838): pid=25525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/572/file0" dev="sda1" ino=21705 res=1 [ 507.142837] Mem-Info: [ 507.145446] active_anon:488088 inactive_anon:580 isolated_anon:0 [ 507.145446] active_file:3989 inactive_file:7062 isolated_file:0 [ 507.145446] unevictable:0 dirty:141 writeback:0 unstable:0 [ 507.145446] slab_reclaimable:22612 slab_unreclaimable:159612 [ 507.145446] mapped:58442 shmem:636 pagetables:95343 bounce:0 [ 507.145446] free:667377 free_pcp:197 free_cma:0 [ 507.232574] Node 0 active_anon:1561808kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1353728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 507.271117] Node 0 DMA free:10428kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.316906] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 507.336503] Node 0 DMA32 free:36380kB min:36380kB low:45472kB high:54564kB active_anon:1557452kB inactive_anon:1000kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18016kB pagetables:40872kB bounce:0kB free_pcp:872kB local_pcp:676kB free_cma:0kB [ 507.374049] lowmem_reserve[]: 0 0 0 0 0 [ 507.378214] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.409250] lowmem_reserve[]: 0 0 0 0 0 [ 507.413836] Node 0 DMA: 3*4kB (ME) 6*8kB (UE) 10*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10428kB [ 507.430962] Node 0 DMA32: 2077*4kB (UME) 210*8kB (UM) 662*16kB (UME) 491*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36292kB [ 507.444881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 507.455774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.464695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.473928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.482845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.491625] 11691 total pagecache pages [ 507.495602] 0 pages in swap cache [ 507.499041] Swap cache stats: add 0, delete 0, find 0/0 [ 507.504463] Free swap = 0kB [ 507.507479] Total swap = 0kB [ 507.510545] 1965979 pages RAM [ 507.513642] 0 pages HighMem/MovableOnly [ 507.517727] 335868 pages reserved [ 507.521912] 0 pages cma reserved [ 507.535752] oom_reaper: reaped process 25520 (syz-executor.0), now anon-rss:0kB, file-rss:16kB, shmem-rss:0kB [ 507.796124] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 507.809362] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 507.815600] CPU: 1 PID: 25520 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 507.823488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.832981] Call Trace: [ 507.835568] dump_stack+0x142/0x197 [ 507.839195] dump_header+0x177/0x6cd [ 507.842914] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 507.848021] ? ___ratelimit+0x55/0x537 [ 507.851921] oom_kill_process.cold+0x10/0xadd [ 507.856416] ? rcu_read_unlock_special+0x895/0xd40 [ 507.861454] ? lock_downgrade+0x740/0x740 [ 507.865608] out_of_memory+0x2ee/0x1180 [ 507.869630] ? lock_acquire+0x16f/0x430 [ 507.873604] ? oom_killer_disable+0x1d0/0x1d0 [ 507.878104] ? __alloc_pages_slowpath+0xca4/0x2930 [ 507.883059] __alloc_pages_slowpath+0x2251/0x2930 [ 507.887925] ? warn_alloc+0xf0/0xf0 [ 507.891558] ? __might_sleep+0x93/0xb0 [ 507.895441] __alloc_pages_nodemask+0x62c/0x7a0 [ 507.900136] ? lock_downgrade+0x740/0x740 [ 507.905336] ? __alloc_pages_slowpath+0x2930/0x2930 [ 507.910351] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 507.916025] alloc_pages_current+0xec/0x1e0 [ 507.920451] ion_page_pool_alloc+0x11f/0x1c0 [ 507.924873] ion_system_heap_allocate+0x138/0x910 [ 507.929788] ? ion_alloc+0x19b/0x860 [ 507.933658] ? rcu_read_lock_sched_held+0x110/0x130 [ 507.938716] ? ion_system_heap_free+0x250/0x250 [ 507.943387] ion_alloc+0x222/0x860 [ 507.946924] ? ion_dma_buf_release+0x50/0x50 [ 507.951326] ? kasan_check_write+0x14/0x20 [ 507.955549] ? _copy_from_user+0x99/0x110 [ 507.959697] ion_ioctl+0x105/0x217 [ 507.963236] ? ion_alloc.cold+0x40/0x40 [ 507.967228] ? ion_alloc.cold+0x40/0x40 [ 507.971317] do_vfs_ioctl+0x7ae/0x1060 [ 507.975203] ? selinux_file_mprotect+0x5d0/0x5d0 [ 507.980042] ? lock_downgrade+0x740/0x740 [ 507.984207] ? ioctl_preallocate+0x1c0/0x1c0 [ 507.988663] ? __fget+0x237/0x370 [ 507.992132] ? security_file_ioctl+0x89/0xb0 [ 507.996534] SyS_ioctl+0x8f/0xc0 [ 507.999888] ? do_vfs_ioctl+0x1060/0x1060 [ 508.004036] do_syscall_64+0x1e8/0x640 [ 508.007930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 508.012778] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 508.018075] RIP: 0033:0x45b349 [ 508.021447] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.029158] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 508.036548] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 508.043813] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 508.051095] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 508.058560] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 508.066127] Mem-Info: [ 508.068541] active_anon:488051 inactive_anon:583 isolated_anon:0 [ 508.068541] active_file:3992 inactive_file:7065 isolated_file:0 [ 508.068541] unevictable:0 dirty:14 writeback:0 unstable:0 [ 508.068541] slab_reclaimable:22617 slab_unreclaimable:159651 [ 508.068541] mapped:58398 shmem:636 pagetables:95338 bounce:0 [ 508.068541] free:662898 free_pcp:218 free_cma:0 [ 508.103086] Node 0 active_anon:1561808kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1353728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 508.130728] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.157472] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 508.162566] Node 0 DMA32 free:18188kB min:36380kB low:45472kB high:54564kB active_anon:1557452kB inactive_anon:1000kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:18016kB pagetables:40872kB bounce:0kB free_pcp:872kB local_pcp:676kB free_cma:0kB [ 508.192454] lowmem_reserve[]: 0 0 0 0 0 [ 508.196457] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.221883] lowmem_reserve[]: 0 0 0 0 0 [ 508.225915] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 508.241629] Node 0 DMA32: 869*4kB (ME) 189*8kB (UM) 93*16kB (ME) 366*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 508.255110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.265911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.275010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.283682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.292695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.301443] 11696 total pagecache pages [ 508.305419] 0 pages in swap cache [ 508.308860] Swap cache stats: add 0, delete 0, find 0/0 [ 508.314293] Free swap = 0kB [ 508.317467] Total swap = 0kB [ 508.320550] 1965979 pages RAM [ 508.323648] 0 pages HighMem/MovableOnly [ 508.327676] 335868 pages reserved [ 508.331189] 0 pages cma reserved [ 508.334607] Out of memory: Kill process 8231 (syz-executor.2) score 1007 or sacrifice child [ 508.343524] Killed process 8231 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 508.356719] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 508.362762] oom_reaper: reaped process 8231 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 508.371302] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 508.385333] CPU: 1 PID: 25520 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 508.393273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.402623] Call Trace: [ 508.405213] dump_stack+0x142/0x197 [ 508.408883] warn_alloc.cold+0x96/0x1af [ 508.412861] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 508.417762] ? wait_for_completion+0x420/0x420 [ 508.422351] __alloc_pages_slowpath+0x23c6/0x2930 [ 508.427255] ? warn_alloc+0xf0/0xf0 [ 508.430873] ? __might_sleep+0x93/0xb0 [ 508.434750] __alloc_pages_nodemask+0x62c/0x7a0 [ 508.439426] ? lock_downgrade+0x740/0x740 [ 508.443573] ? __alloc_pages_slowpath+0x2930/0x2930 [ 508.448643] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 508.454268] alloc_pages_current+0xec/0x1e0 [ 508.458590] ion_page_pool_alloc+0x11f/0x1c0 [ 508.463248] ion_system_heap_allocate+0x138/0x910 [ 508.468074] ? ion_alloc+0x19b/0x860 [ 508.471785] ? rcu_read_lock_sched_held+0x110/0x130 [ 508.476878] ? ion_system_heap_free+0x250/0x250 [ 508.481551] ion_alloc+0x222/0x860 [ 508.485082] ? ion_dma_buf_release+0x50/0x50 [ 508.489490] ? kasan_check_write+0x14/0x20 [ 508.493821] ? _copy_from_user+0x99/0x110 [ 508.497964] ion_ioctl+0x105/0x217 [ 508.501493] ? ion_alloc.cold+0x40/0x40 [ 508.505552] ? ion_alloc.cold+0x40/0x40 [ 508.509524] do_vfs_ioctl+0x7ae/0x1060 [ 508.513454] ? selinux_file_mprotect+0x5d0/0x5d0 [ 508.518207] ? lock_downgrade+0x740/0x740 [ 508.522450] ? ioctl_preallocate+0x1c0/0x1c0 [ 508.526851] ? __fget+0x237/0x370 [ 508.530294] ? security_file_ioctl+0x89/0xb0 [ 508.534795] SyS_ioctl+0x8f/0xc0 [ 508.538160] ? do_vfs_ioctl+0x1060/0x1060 [ 508.542299] do_syscall_64+0x1e8/0x640 [ 508.546237] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 508.551125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 508.556309] RIP: 0033:0x45b349 [ 508.559484] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.567287] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 508.574552] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 508.581817] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 508.589088] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 508.596491] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 508.604767] Mem-Info: [ 508.607219] active_anon:486999 inactive_anon:583 isolated_anon:0 [ 508.607219] active_file:3992 inactive_file:7065 isolated_file:0 [ 508.607219] unevictable:0 dirty:14 writeback:0 unstable:0 [ 508.607219] slab_reclaimable:22617 slab_unreclaimable:159371 [ 508.607219] mapped:58398 shmem:636 pagetables:95311 bounce:0 [ 508.607219] free:664239 free_pcp:532 free_cma:0 [ 508.641586] Node 0 active_anon:1557600kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1349632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 508.655197] NOHZ: local_softirq_pending 08 [ 508.669321] Node 1 active_anon:390396kB inactive_anon:1328kB active_file:15960kB inactive_file:28256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:48kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 508.701484] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.728339] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 508.733556] Node 0 DMA32 free:22692kB min:36380kB low:45472kB high:54564kB active_anon:1553244kB inactive_anon:1000kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:17984kB pagetables:40764kB bounce:0kB free_pcp:868kB local_pcp:672kB free_cma:0kB [ 508.762752] lowmem_reserve[]: 0 0 0 0 0 [ 508.766767] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.792114] lowmem_reserve[]: 0 0 0 0 0 [ 508.796124] Node 1 Normal free:2623996kB min:53508kB low:66884kB high:80260kB active_anon:390396kB inactive_anon:1328kB active_file:15960kB inactive_file:28256kB unevictable:0kB writepending:48kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:102400kB pagetables:340240kB bounce:0kB free_pcp:1260kB local_pcp:716kB free_cma:0kB [ 508.826765] lowmem_reserve[]: 0 0 0 0 0 [ 508.830826] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 508.846541] Node 0 DMA32: 883*4kB (UME) 212*8kB (UME) 97*16kB (UME) 371*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 22748kB [ 508.860650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.871547] Node 1 Normal: 15*4kB (UE) 66*8kB (UME) 41*16kB (UM) 28*32kB (UE) 7*64kB (U) 8*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (UM) 0*2048kB 639*4096kB (M) = 2624028kB [ 508.887568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.896445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.905246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.914138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.922785] 11696 total pagecache pages [ 508.926761] 0 pages in swap cache [ 508.930255] Swap cache stats: add 0, delete 0, find 0/0 [ 508.935668] Free swap = 0kB [ 508.938772] Total swap = 0kB [ 508.941862] 1965979 pages RAM [ 508.945028] 0 pages HighMem/MovableOnly [ 508.948998] 335868 pages reserved [ 508.952548] 0 pages cma reserved [ 508.974467] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 508.985920] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 508.991369] CPU: 1 PID: 25520 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 508.999248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.008609] Call Trace: [ 509.011199] dump_stack+0x142/0x197 [ 509.014831] warn_alloc.cold+0x96/0x1af [ 509.018792] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 509.023814] ? __alloc_pages_direct_compact+0xbc/0x380 [ 509.029097] __alloc_pages_slowpath+0x23c6/0x2930 [ 509.033936] ? save_trace+0x290/0x290 [ 509.037737] ? warn_alloc+0xf0/0xf0 [ 509.041706] ? __might_sleep+0x93/0xb0 [ 509.045607] __alloc_pages_nodemask+0x62c/0x7a0 [ 509.050279] ? lock_downgrade+0x740/0x740 [ 509.054561] ? __alloc_pages_slowpath+0x2930/0x2930 [ 509.059569] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 509.065183] alloc_pages_current+0xec/0x1e0 [ 509.069500] ion_page_pool_alloc+0x11f/0x1c0 [ 509.073959] ion_system_heap_allocate+0x138/0x910 [ 509.078797] ? ion_system_heap_free+0x250/0x250 [ 509.083458] ion_alloc+0x68c/0x860 [ 509.086999] ? ion_dma_buf_release+0x50/0x50 [ 509.091509] ? kasan_check_write+0x14/0x20 [ 509.095744] ? _copy_from_user+0x99/0x110 [ 509.099968] ion_ioctl+0x105/0x217 [ 509.103505] ? ion_alloc.cold+0x40/0x40 [ 509.107474] ? ion_alloc.cold+0x40/0x40 [ 509.111439] do_vfs_ioctl+0x7ae/0x1060 [ 509.115320] ? selinux_file_mprotect+0x5d0/0x5d0 [ 509.120072] ? lock_downgrade+0x740/0x740 [ 509.124820] ? ioctl_preallocate+0x1c0/0x1c0 [ 509.129216] ? __fget+0x237/0x370 [ 509.132668] ? security_file_ioctl+0x89/0xb0 [ 509.137077] SyS_ioctl+0x8f/0xc0 [ 509.140431] ? do_vfs_ioctl+0x1060/0x1060 [ 509.144710] do_syscall_64+0x1e8/0x640 [ 509.148597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.153549] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 509.158749] RIP: 0033:0x45b349 [ 509.161934] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.169678] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 509.176946] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 509.184310] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 509.191574] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 509.198839] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 509.248579] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 509.261674] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 509.267161] CPU: 1 PID: 25520 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 509.275108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.284456] Call Trace: [ 509.287095] dump_stack+0x142/0x197 [ 509.290727] dump_header+0x177/0x6cd [ 509.294530] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 509.299638] ? ___ratelimit+0x55/0x537 [ 509.303881] oom_kill_process.cold+0x10/0xadd [ 509.308584] ? oom_unkillable_task+0x294/0x390 [ 509.313186] ? lock_downgrade+0x740/0x740 [ 509.317700] out_of_memory+0x2ee/0x1180 [ 509.321785] ? lock_acquire+0x16f/0x430 [ 509.325863] ? __lock_is_held+0xb6/0x140 [ 509.330085] ? oom_killer_disable+0x1d0/0x1d0 [ 509.334579] ? __alloc_pages_slowpath+0xca4/0x2930 [ 509.339635] __alloc_pages_slowpath+0x2251/0x2930 [ 509.344564] ? warn_alloc+0xf0/0xf0 [ 509.348248] ? __might_sleep+0x93/0xb0 [ 509.352132] __alloc_pages_nodemask+0x62c/0x7a0 [ 509.356905] ? lock_downgrade+0x740/0x740 [ 509.361166] ? __alloc_pages_slowpath+0x2930/0x2930 [ 509.366524] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 509.372247] alloc_pages_current+0xec/0x1e0 [ 509.376576] ion_page_pool_alloc+0x11f/0x1c0 [ 509.381040] ion_system_heap_allocate+0x138/0x910 [ 509.386125] ? ion_system_heap_free+0x250/0x250 [ 509.390791] ion_alloc+0x68c/0x860 [ 509.394332] ? ion_dma_buf_release+0x50/0x50 [ 509.398759] ? kasan_check_write+0x14/0x20 [ 509.403026] ? _copy_from_user+0x99/0x110 [ 509.407211] ion_ioctl+0x105/0x217 [ 509.410752] ? ion_alloc.cold+0x40/0x40 [ 509.414723] ? ion_alloc.cold+0x40/0x40 [ 509.418807] do_vfs_ioctl+0x7ae/0x1060 [ 509.422694] ? selinux_file_mprotect+0x5d0/0x5d0 [ 509.427520] ? lock_downgrade+0x740/0x740 [ 509.431666] ? ioctl_preallocate+0x1c0/0x1c0 [ 509.436064] ? __fget+0x237/0x370 [ 509.439509] ? security_file_ioctl+0x89/0xb0 [ 509.444095] SyS_ioctl+0x8f/0xc0 [ 509.447524] ? do_vfs_ioctl+0x1060/0x1060 [ 509.451666] do_syscall_64+0x1e8/0x640 [ 509.455582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.460536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 509.465716] RIP: 0033:0x45b349 [ 509.468890] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.476589] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 509.483848] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 509.491205] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 509.498576] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 509.505957] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 509.513730] Mem-Info: [ 509.516337] active_anon:486999 inactive_anon:583 isolated_anon:0 [ 509.516337] active_file:3992 inactive_file:7079 isolated_file:0 [ 509.516337] unevictable:0 dirty:29 writeback:0 unstable:0 [ 509.516337] slab_reclaimable:22619 slab_unreclaimable:159373 [ 509.516337] mapped:58398 shmem:636 pagetables:95311 bounce:0 [ 509.516337] free:663130 free_pcp:76 free_cma:0 [ 509.550027] Node 0 active_anon:1557600kB inactive_anon:1004kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1349632kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 509.578066] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.605214] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 509.610443] Node 0 DMA32 free:18156kB min:36380kB low:45472kB high:54564kB active_anon:1553244kB inactive_anon:1000kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:17984kB pagetables:40764kB bounce:0kB free_pcp:304kB local_pcp:120kB free_cma:0kB [ 509.639715] lowmem_reserve[]: 0 0 0 0 0 [ 509.643796] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.669289] lowmem_reserve[]: 0 0 0 0 0 [ 509.673362] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 509.689071] Node 0 DMA32: 887*4kB (UME) 192*8kB (UME) 97*16kB (UME) 360*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 509.703073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.713887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.723068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.731697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.740622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.749193] 11714 total pagecache pages [ 509.753241] 0 pages in swap cache [ 509.756746] Swap cache stats: add 0, delete 0, find 0/0 [ 509.762165] Free swap = 0kB [ 509.765302] Total swap = 0kB [ 509.768436] 1965979 pages RAM [ 509.772289] 0 pages HighMem/MovableOnly [ 509.776260] 335868 pages reserved [ 509.779705] 0 pages cma reserved [ 509.783171] Out of memory: Kill process 8265 (syz-executor.2) score 1007 or sacrifice child [ 509.791788] Killed process 8269 (syz-executor.2) total-vm:72588kB, anon-rss:4248kB, file-rss:34688kB, shmem-rss:0kB [ 509.808970] oom_reaper: reaped process 8269 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 509.811355] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 509.830946] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 509.836353] CPU: 0 PID: 25520 Comm: syz-executor.0 Not tainted 4.14.167-syzkaller #0 [ 509.844222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.853568] Call Trace: [ 509.856155] dump_stack+0x142/0x197 [ 509.859768] warn_alloc.cold+0x96/0x1af [ 509.863901] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 509.868803] ? wait_for_completion+0x420/0x420 [ 509.873390] __alloc_pages_slowpath+0x23c6/0x2930 [ 509.878244] ? warn_alloc+0xf0/0xf0 [ 509.881869] ? __might_sleep+0x93/0xb0 [ 509.886080] __alloc_pages_nodemask+0x62c/0x7a0 [ 509.890745] ? lock_downgrade+0x740/0x740 [ 509.894896] ? __alloc_pages_slowpath+0x2930/0x2930 [ 509.900023] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 509.905717] alloc_pages_current+0xec/0x1e0 [ 509.910041] ion_page_pool_alloc+0x11f/0x1c0 [ 509.914451] ion_system_heap_allocate+0x138/0x910 [ 509.919295] ? ion_system_heap_free+0x250/0x250 [ 509.923971] ion_alloc+0x68c/0x860 [ 509.927503] ? ion_dma_buf_release+0x50/0x50 [ 509.931916] ? kasan_check_write+0x14/0x20 [ 509.936267] ? _copy_from_user+0x99/0x110 [ 509.940405] ion_ioctl+0x105/0x217 [ 509.943946] ? ion_alloc.cold+0x40/0x40 [ 509.947909] ? ion_alloc.cold+0x40/0x40 [ 509.951881] do_vfs_ioctl+0x7ae/0x1060 [ 509.955809] ? selinux_file_mprotect+0x5d0/0x5d0 [ 509.960560] ? lock_downgrade+0x740/0x740 [ 509.964708] ? ioctl_preallocate+0x1c0/0x1c0 [ 509.969105] ? __fget+0x237/0x370 [ 509.972566] ? security_file_ioctl+0x89/0xb0 [ 509.976974] SyS_ioctl+0x8f/0xc0 [ 509.980337] ? do_vfs_ioctl+0x1060/0x1060 [ 509.984482] do_syscall_64+0x1e8/0x640 [ 509.988384] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.993231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 509.998420] RIP: 0033:0x45b349 [ 510.001594] RSP: 002b:00007fb26b9bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.009427] RAX: ffffffffffffffda RBX: 00007fb26b9bf6d4 RCX: 000000000045b349 [ 510.016688] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 510.024058] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 510.031507] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 510.038879] R13: 0000000000000360 R14: 00000000004c4806 R15: 000000000075bf2c [ 510.046967] warn_alloc_show_mem: 1 callbacks suppressed [ 510.046977] Mem-Info: [ 510.054937] active_anon:486469 inactive_anon:583 isolated_anon:0 [ 510.054937] active_file:3993 inactive_file:7078 isolated_file:0 [ 510.054937] unevictable:0 dirty:35 writeback:0 unstable:0 [ 510.054937] slab_reclaimable:22619 slab_unreclaimable:159373 [ 510.054937] mapped:58398 shmem:636 pagetables:95285 bounce:0 [ 510.054937] free:663650 free_pcp:425 free_cma:0 [ 510.089445] Node 0 active_anon:1555480kB inactive_anon:1004kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:8kB writeback:0kB shmem:1216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1347584kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 510.117425] Node 1 active_anon:390396kB inactive_anon:1328kB active_file:15960kB inactive_file:28312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:136kB writeback:0kB shmem:1328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 510.145386] Node 0 DMA free:10368kB min:216kB low:268kB high:320kB active_anon:4356kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.172722] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 510.177775] Node 0 DMA32 free:20236kB min:36380kB low:45472kB high:54564kB active_anon:1551124kB inactive_anon:1000kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2634344kB mlocked:0kB kernel_stack:17952kB pagetables:40660kB bounce:0kB free_pcp:512kB local_pcp:184kB free_cma:0kB [ 510.207300] lowmem_reserve[]: 0 0 0 0 0 [ 510.211347] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 510.236969] lowmem_reserve[]: 0 0 0 0 0 [ 510.241234] Node 1 Normal free:2624132kB min:53508kB low:66884kB high:80260kB active_anon:390396kB inactive_anon:1328kB active_file:15960kB inactive_file:28312kB unevictable:0kB writepending:144kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:102400kB pagetables:340240kB bounce:0kB free_pcp:1192kB local_pcp:496kB free_cma:0kB [ 510.271660] lowmem_reserve[]: 0 0 0 0 0 [ 510.275703] Node 0 DMA: 4*4kB (UME) 2*8kB (UE) 8*16kB (UME) 5*32kB (UME) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10368kB [ 510.291368] Node 0 DMA32: 887*4kB (UME) 194*8kB (UME) 97*16kB (UME) 361*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 20252kB [ 510.305859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 510.316640] Node 1 Normal: 15*4kB (UE) 67*8kB (UME) 41*16kB (UM) 28*32kB (UE) 7*64kB (U) 9*128kB (UE) 2*256kB (ME) 1*512kB (E) 2*1024kB (UM) 0*2048kB 639*4096kB (M) = 2624164kB [ 510.332707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.341635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 22:04:24 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:04:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:24 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x8]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:24 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 510.350293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.359136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 510.367787] 11720 total pagecache pages [ 510.371835] 0 pages in swap cache [ 510.375335] Swap cache stats: add 0, delete 0, find 0/0 [ 510.381211] Free swap = 0kB [ 510.384246] Total swap = 0kB [ 510.387248] 1965979 pages RAM [ 510.390417] 0 pages HighMem/MovableOnly [ 510.394390] 335868 pages reserved [ 510.397831] 0 pages cma reserved 22:04:24 executing program 4: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 510.524676] audit: type=1804 audit(1580076264.326:1839): pid=25560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/573/file0" dev="sda1" ino=20432 res=1 22:04:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x8]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:24 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:24 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 510.948835] audit: type=1804 audit(1580076264.746:1840): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/574/file0" dev="sda1" ino=21747 res=1 22:04:24 executing program 4: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:25 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:04:25 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x0]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 4: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:25 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 511.540105] audit: type=1804 audit(1580076265.336:1841): pid=25611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/575/file0" dev="sda1" ino=21435 res=1 22:04:25 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:25 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:04:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x0]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:25 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:25 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 512.216132] audit: type=1804 audit(1580076266.016:1842): pid=25647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/576/file0" dev="sda1" ino=21151 res=1 22:04:26 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x0]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:26 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:26 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 512.651423] audit: type=1804 audit(1580076266.456:1843): pid=25673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/577/file0" dev="sda1" ino=21868 res=1 22:04:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 22:04:26 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:26 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 22:04:26 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 513.164426] audit: type=1804 audit(1580076266.966:1844): pid=25703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/578/file0" dev="sda1" ino=21866 res=1 22:04:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:27 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 22:04:27 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:27 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 513.821875] audit: type=1804 audit(1580076267.626:1845): pid=25735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/579/file0" dev="sda1" ino=21880 res=1 22:04:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580), 0x0, 0x0) 22:04:27 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:27 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:28 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x3e, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580), 0x0, 0x0) [ 514.482727] audit: type=1804 audit(1580076268.276:1846): pid=25770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/580/file0" dev="sda1" ino=21897 res=1 22:04:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:28 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:28 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580), 0x0, 0x0) 22:04:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:28 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 514.896709] audit: type=1804 audit(1580076268.696:1847): pid=25788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/581/file0" dev="sda1" ino=21910 res=1 22:04:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:29 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:29 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 515.526877] audit: type=1804 audit(1580076269.326:1848): pid=25819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/582/file0" dev="sda1" ino=21913 res=1 22:04:29 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:29 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:29 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:29 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 516.174543] audit: type=1804 audit(1580076269.976:1849): pid=25847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/583/file0" dev="sda1" ino=21925 res=1 22:04:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:30 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 516.735596] audit: type=1804 audit(1580076270.536:1850): pid=25874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/584/file0" dev="sda1" ino=21920 res=1 22:04:31 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:31 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0), 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 517.422602] audit: type=1804 audit(1580076271.226:1851): pid=25902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/585/file0" dev="sda1" ino=21926 res=1 22:04:31 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0xff, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0), 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 517.992748] audit: type=1804 audit(1580076271.796:1852): pid=25929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/586/file0" dev="sda1" ino=21947 res=1 22:04:31 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:32 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0), 0x0, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:32 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 518.693445] audit: type=1804 audit(1580076272.486:1853): pid=25959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/587/file0" dev="sda1" ino=21958 res=1 22:04:32 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{0x0}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:32 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 519.136067] audit: type=1804 audit(1580076272.936:1854): pid=25983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/588/file0" dev="sda1" ino=21962 res=1 22:04:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{0x0}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:33 executing program 0: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:33 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x0, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{0x0}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:33 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 519.917800] audit: type=1804 audit(1580076273.716:1855): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/589/file0" dev="sda1" ino=21977 res=1 22:04:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:33 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:34 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 520.394639] audit: type=1804 audit(1580076274.196:1856): pid=26042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/590/file0" dev="sda1" ino=21988 res=1 22:04:34 executing program 0: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:34 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:34 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:35 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c442", 0x2}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 521.247195] audit: type=1804 audit(1580076275.046:1857): pid=26066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/591/file0" dev="sda1" ino=21999 res=1 22:04:35 executing program 0: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:35 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c442", 0x2}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0x1, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:35 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:35 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:35 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 522.023692] audit: type=1804 audit(1580076275.826:1858): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/592/file0" dev="sda1" ino=22005 res=1 22:04:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c442", 0x2}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:36 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x0, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:36 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:36 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:36 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286", 0x3}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) [ 522.687692] audit: type=1804 audit(1580076276.486:1859): pid=26139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/593/file0" dev="sda1" ino=22006 res=1 22:04:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:36 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x0, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286", 0x3}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:36 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 523.078011] audit: type=1804 audit(1580076276.876:1860): pid=26163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/594/file0" dev="sda1" ino=22025 res=1 22:04:37 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286", 0x3}], 0x1, &(0x7f0000000000)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) 22:04:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0x0, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:37 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x0, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:37 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0xe) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 523.645956] audit: type=1804 audit(1580076277.446:1861): pid=26186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/595/file0" dev="sda1" ino=22033 res=1 22:04:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1}}], 0x1, 0x0) 22:04:37 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:37 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x0, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 524.199090] audit: type=1804 audit(1580076277.986:1862): pid=26208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/596/file0" dev="sda1" ino=22043 res=1 22:04:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1}}], 0x1, 0x0) 22:04:38 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000200)) ptrace(0x10, r0) ptrace(0x2, r0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 524.686159] audit: type=1804 audit(1580076278.486:1863): pid=26232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/597/file0" dev="sda1" ino=22049 res=1 22:04:38 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x0, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x2080, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000200)) ptrace(0x10, r0) ptrace(0x2, r0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:38 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1}}], 0x1, 0x0) [ 525.104144] audit: type=1804 audit(1580076278.906:1864): pid=26255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/598/file0" dev="sda1" ino=22015 res=1 22:04:39 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)}}], 0x1, 0x0) 22:04:39 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:39 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000200)) ptrace(0x10, r0) ptrace(0x2, r0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:39 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x0, 0x1, 0xff, 0x3e, 0x0, 0x289]}, &(0x7f0000000340)=0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)}}], 0x1, 0x0) [ 525.782980] audit: type=1804 audit(1580076279.576:1865): pid=26282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/599/file0" dev="sda1" ino=22060 res=1 22:04:39 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:39 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) [ 526.181600] audit: type=1804 audit(1580076279.976:1866): pid=26305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/600/file0" dev="sda1" ino=22056 res=1 22:04:40 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:40 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 22:04:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000b40)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="c44286b0", 0x4}], 0x1, &(0x7f0000000000)}}], 0x1, 0x0) 22:04:40 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:40 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 22:04:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x0, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:40 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:40 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x58, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}}}]}]}, 0x58}}, 0x0) [ 527.004847] audit: type=1804 audit(1580076280.806:1867): pid=26342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir647932512/syzkaller.12GCp8/601/file0" dev="sda1" ino=22069 res=1 22:04:41 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 22:04:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000200)) ptrace(0x10, r2) ptrace(0x2, r2) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000300)={0x5, [0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)}, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x0, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 22:04:41 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) memfd_create(&(0x7f00000001c0)=')\\\x10\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fd~\x9e\xf3\x84/\xe4\x19\xe5=\x16\xcfe\xb2`q\xc6Z\x88\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xf9\xccN<\xc6\xbb\x93\xb1\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84|\xbe\x06\x00\x00\x00\x00\x00\x00\x00)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\x106\xfd\xd1\xcfq\x02\xfe?R46g\xee\xa4\xb6\xa9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f\\\x1c\xf9\x92\xf8j\x1b\x00'/193, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000200)) ptrace(0x10, r1) ptrace(0x2, r1) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x8000000200036158, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)={0x6, [0x2080, 0x1, 0xff, 0x3e, 0x8, 0x289]}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) [ 527.526199] ODEBUG: free active (active state 1) object type: rcu_head hint: (null) [ 527.536717] ------------[ cut here ]------------ [ 527.541500] WARNING: CPU: 1 PID: 26361 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 527.550600] Kernel panic - not syncing: panic_on_warn set ... [ 527.550600] [ 527.557973] CPU: 1 PID: 26361 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0 [ 527.565874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.575860] Call Trace: [ 527.578457] dump_stack+0x142/0x197 [ 527.582091] panic+0x1f9/0x42d [ 527.585292] ? add_taint.cold+0x16/0x16 [ 527.589282] ? debug_print_object.cold+0xa7/0xdb [ 527.594045] ? __warn.cold+0x14/0x2f [ 527.597779] ? debug_print_object.cold+0xa7/0xdb [ 527.602569] __warn.cold+0x2f/0x2f [ 527.606124] ? ist_end_non_atomic+0x10/0x10 [ 527.610460] ? debug_print_object.cold+0xa7/0xdb [ 527.615334] report_bug+0x216/0x254 [ 527.618979] do_error_trap+0x1bb/0x310 [ 527.622877] ? math_error+0x360/0x360 [ 527.626726] ? vprintk_emit+0x171/0x600 [ 527.630716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 527.635575] do_invalid_op+0x1b/0x20 [ 527.639303] invalid_op+0x1b/0x40 [ 527.642772] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 527.648132] RSP: 0018:ffff8881ec95f110 EFLAGS: 00010086 [ 527.653500] RAX: 0000000000000051 RBX: 0000000000000003 RCX: 0000000000000000 [ 527.660791] RDX: 0000000000032b1e RSI: ffffffff814b6655 RDI: ffffed103d92be18 [ 527.668067] RBP: ffff8881ec95f138 R08: 0000000000000051 R09: 0000000000000000 [ 527.677772] R10: 0000000000000000 R11: ffff88804344e540 R12: ffffffff86cb86e0 [ 527.685048] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880a49a8d90 [ 527.692448] ? vprintk_func+0x65/0x159 [ 527.696353] debug_check_no_obj_freed+0x3f5/0x7b7 [ 527.701214] ? free_obj_work+0x6d0/0x6d0 [ 527.705282] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 527.710747] kfree+0xbd/0x270 [ 527.713857] free_tcf+0x13c/0x190 [ 527.717315] __tcf_idr_release+0x213/0x260 [ 527.721566] tcf_sample_init+0x7f2/0x960 [ 527.725635] ? tcf_sample_act+0x9f0/0x9f0 [ 527.729790] ? rcu_read_lock_sched_held+0x110/0x130 [ 527.734815] ? _raw_read_unlock+0x2d/0x50 [ 527.738972] tcf_action_init_1+0x53c/0xaa0 [ 527.743220] ? tcf_action_dump_old+0x80/0x80 [ 527.747657] ? lock_downgrade+0x740/0x740 [ 527.751942] ? nla_parse+0x186/0x240 [ 527.755674] tcf_action_init+0x2ab/0x480 [ 527.759738] ? tcf_action_init_1+0xaa0/0xaa0 [ 527.764166] ? memset+0x32/0x40 [ 527.767450] ? nla_parse+0x186/0x240 [ 527.771171] tc_ctl_action+0x30a/0x548 [ 527.775064] ? tca_action_gd+0x840/0x840 [ 527.779154] ? tca_action_gd+0x840/0x840 [ 527.783248] rtnetlink_rcv_msg+0x3da/0xb70 [ 527.787469] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 527.792048] ? netlink_deliver_tap+0x93/0x8f0 [ 527.796651] netlink_rcv_skb+0x14f/0x3c0 [ 527.800788] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 527.805354] ? lock_downgrade+0x740/0x740 [ 527.809496] ? netlink_ack+0x9a0/0x9a0 [ 527.813391] ? netlink_deliver_tap+0xba/0x8f0 [ 527.817928] rtnetlink_rcv+0x1d/0x30 [ 527.821640] netlink_unicast+0x44d/0x650 [ 527.825828] ? netlink_attachskb+0x6a0/0x6a0 [ 527.830450] ? security_netlink_send+0x81/0xb0 [ 527.835022] netlink_sendmsg+0x7c4/0xc60 [ 527.839239] ? netlink_unicast+0x650/0x650 [ 527.843581] ? security_socket_sendmsg+0x89/0xb0 [ 527.848320] ? netlink_unicast+0x650/0x650 [ 527.852552] sock_sendmsg+0xce/0x110 [ 527.856248] ___sys_sendmsg+0x70a/0x840 [ 527.860216] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 527.864968] ? __fget+0x210/0x370 [ 527.868404] ? find_held_lock+0x35/0x130 [ 527.872512] ? __fget+0x210/0x370 [ 527.875963] ? lock_downgrade+0x740/0x740 [ 527.880105] ? __fget+0x237/0x370 [ 527.883553] ? __fget_light+0x172/0x1f0 [ 527.887576] ? __fdget+0x1b/0x20 [ 527.891048] ? sockfd_lookup_light+0xb4/0x160 [ 527.895539] __sys_sendmsg+0xb9/0x140 [ 527.899367] ? SyS_shutdown+0x170/0x170 [ 527.903575] ? put_timespec64+0xb4/0x100 [ 527.907620] ? SyS_clock_gettime+0xf8/0x180 [ 527.911935] SyS_sendmsg+0x2d/0x50 [ 527.915476] ? __sys_sendmsg+0x140/0x140 [ 527.919528] do_syscall_64+0x1e8/0x640 [ 527.923411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 527.928321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 527.933616] RIP: 0033:0x45b349 [ 527.936815] RSP: 002b:00007fea7f50ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.944519] RAX: ffffffffffffffda RBX: 00007fea7f50b6d4 RCX: 000000000045b349 [ 527.951791] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 527.959055] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 527.966319] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 527.973581] R13: 00000000000009c2 R14: 00000000004cb338 R15: 000000000075bf2c [ 527.980853] [ 527.980856] ====================================================== [ 527.980859] WARNING: possible circular locking dependency detected [ 527.980860] 4.14.167-syzkaller #0 Not tainted [ 527.980863] ------------------------------------------------------ [ 527.980865] syz-executor.4/26361 is trying to acquire lock: [ 527.980866] ((console_sem).lock){-.-.}, at: [] down_trylock+0x13/0x70 [ 527.980871] [ 527.980873] but task is already holding lock: [ 527.980874] (&obj_hash[i].lock){-.-.}, at: [] debug_check_no_obj_freed+0x12d/0x7b7 [ 527.980879] [ 527.980881] which lock already depends on the new lock. [ 527.980882] [ 527.980883] [ 527.980885] the existing dependency chain (in reverse order) is: [ 527.980886] [ 527.980887] -> #5 (&obj_hash[i].lock){-.-.}: [ 527.980892] lock_acquire+0x16f/0x430 [ 527.980894] _raw_spin_lock_irqsave+0x95/0xcd [ 527.980896] debug_object_activate+0x10b/0x450 [ 527.980897] enqueue_hrtimer+0x27/0x3b0 [ 527.980899] hrtimer_start_range_ns+0x50a/0x10d0 [ 527.980901] schedule_hrtimeout_range_clock+0x17c/0x340 [ 527.980903] schedule_hrtimeout+0x25/0x30 [ 527.980904] wait_task_inactive+0x4ac/0x580 [ 527.980906] __kthread_bind_mask+0x24/0xc0 [ 527.980907] kthread_bind_mask+0x23/0x30 [ 527.980909] create_worker+0x31b/0x530 [ 527.980911] workqueue_init+0x57b/0x68a [ 527.980912] kernel_init_freeable+0x2af/0x532 [ 527.980914] kernel_init+0x12/0x162 [ 527.980915] ret_from_fork+0x24/0x30 [ 527.980916] [ 527.980917] -> #4 (hrtimer_bases.lock){-.-.}: [ 527.980922] lock_acquire+0x16f/0x430 [ 527.980924] _raw_spin_lock_irqsave+0x95/0xcd [ 527.980926] lock_hrtimer_base.isra.0+0x75/0x130 [ 527.980928] hrtimer_start_range_ns+0x7a/0x10d0 [ 527.980929] enqueue_task_rt+0x972/0xe40 [ 527.980931] __sched_setscheduler.constprop.0+0xc59/0x2340 [ 527.980933] _sched_setscheduler+0x10e/0x180 [ 527.980935] sched_setscheduler+0xe/0x10 [ 527.980936] watchdog_enable+0x10b/0x160 [ 527.980938] smpboot_thread_fn+0x444/0x960 [ 527.980940] kthread+0x319/0x430 [ 527.980941] ret_from_fork+0x24/0x30 [ 527.980942] [ 527.980943] -> #3 (&rt_b->rt_runtime_lock){-.-.}: [ 527.980948] lock_acquire+0x16f/0x430 [ 527.980950] _raw_spin_lock+0x2f/0x40 [ 527.980951] enqueue_task_rt+0x524/0xe40 [ 527.980953] __sched_setscheduler.constprop.0+0xc59/0x2340 [ 527.980955] _sched_setscheduler+0x10e/0x180 [ 527.980956] sched_setscheduler+0xe/0x10 [ 527.980958] watchdog_enable+0x10b/0x160 [ 527.980960] smpboot_thread_fn+0x444/0x960 [ 527.980961] kthread+0x319/0x430 [ 527.980963] ret_from_fork+0x24/0x30 [ 527.980963] [ 527.980964] -> #2 (&rq->lock){-.-.}: [ 527.980969] lock_acquire+0x16f/0x430 [ 527.980971] _raw_spin_lock+0x2f/0x40 [ 527.980972] task_fork_fair+0x63/0x5b0 [ 527.980974] sched_fork+0x3a6/0xc10 [ 527.980975] copy_process.part.0+0x15b7/0x6a70 [ 527.980977] _do_fork+0x19e/0xce0 [ 527.980979] kernel_thread+0x34/0x40 [ 527.980980] rest_init+0x24/0x1e2 [ 527.980981] start_kernel+0x6df/0x6fd [ 527.980983] x86_64_start_reservations+0x29/0x2b [ 527.980985] x86_64_start_kernel+0x77/0x7b [ 527.980987] secondary_startup_64+0xa5/0xb0 [ 527.980988] [ 527.980988] -> #1 (&p->pi_lock){-.-.}: [ 527.980993] lock_acquire+0x16f/0x430 [ 527.980995] _raw_spin_lock_irqsave+0x95/0xcd [ 527.980997] try_to_wake_up+0x79/0xf90 [ 527.980998] wake_up_process+0x10/0x20 [ 527.981000] __up.isra.0+0x136/0x1a0 [ 527.981001] up+0x9c/0xe0 [ 527.981003] __up_console_sem+0xad/0x1b0 [ 527.981004] console_unlock+0x59d/0xed0 [ 527.981006] vprintk_emit+0x1f9/0x600 [ 527.981008] vprintk_default+0x28/0x30 [ 527.981009] vprintk_func+0x5d/0x159 [ 527.981010] printk+0x9e/0xbc [ 527.981012] kauditd_hold_skb.cold+0x3e/0x4d [ 527.981014] kauditd_send_queue+0xfe/0x140 [ 527.981015] kauditd_thread+0x644/0x860 [ 527.981017] kthread+0x319/0x430 [ 527.981018] ret_from_fork+0x24/0x30 [ 527.981019] [ 527.981020] -> #0 ((console_sem).lock){-.-.}: [ 527.981025] __lock_acquire+0x2cb3/0x4620 [ 527.981027] lock_acquire+0x16f/0x430 [ 527.981028] _raw_spin_lock_irqsave+0x95/0xcd [ 527.981030] down_trylock+0x13/0x70 [ 527.981032] __down_trylock_console_sem+0x9c/0x200 [ 527.981033] console_trylock+0x17/0x80 [ 527.981035] vprintk_emit+0x1eb/0x600 [ 527.981036] vprintk_default+0x28/0x30 [ 527.981038] vprintk_func+0x5d/0x159 [ 527.981039] printk+0x9e/0xbc [ 527.981041] debug_print_object.cold+0xa7/0xdb [ 527.981043] debug_check_no_obj_freed+0x3f5/0x7b7 [ 527.981044] kfree+0xbd/0x270 [ 527.981045] free_tcf+0x13c/0x190 [ 527.981047] __tcf_idr_release+0x213/0x260 [ 527.981049] tcf_sample_init+0x7f2/0x960 [ 527.981050] tcf_action_init_1+0x53c/0xaa0 [ 527.981052] tcf_action_init+0x2ab/0x480 [ 527.981054] tc_ctl_action+0x30a/0x548 [ 527.981055] rtnetlink_rcv_msg+0x3da/0xb70 [ 527.981057] netlink_rcv_skb+0x14f/0x3c0 [ 527.981059] rtnetlink_rcv+0x1d/0x30 [ 527.981060] netlink_unicast+0x44d/0x650 [ 527.981062] netlink_sendmsg+0x7c4/0xc60 [ 527.981064] sock_sendmsg+0xce/0x110 [ 527.981065] ___sys_sendmsg+0x70a/0x840 [ 527.981067] __sys_sendmsg+0xb9/0x140 [ 527.981068] SyS_sendmsg+0x2d/0x50 [ 527.981070] do_syscall_64+0x1e8/0x640 [ 527.981072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 527.981073] [ 527.981075] other info that might help us debug this: [ 527.981076] [ 527.981077] Chain exists of: [ 527.981078] (console_sem).lock --> hrtimer_bases.lock --> &obj_hash[i].lock [ 527.981085] [ 527.981086] Possible unsafe locking scenario: [ 527.981087] [ 527.981089] CPU0 CPU1 [ 527.981090] ---- ---- [ 527.981091] lock(&obj_hash[i].lock); [ 527.981095] lock(hrtimer_bases.lock); [ 527.981098] lock(&obj_hash[i].lock); [ 527.981101] lock((console_sem).lock); [ 527.981104] [ 527.981105] *** DEADLOCK *** [ 527.981106] [ 527.981108] 2 locks held by syz-executor.4/26361: [ 527.981109] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x339/0xb70 [ 527.981114] #1: (&obj_hash[i].lock){-.-.}, at: [] debug_check_no_obj_freed+0x12d/0x7b7 [ 527.981120] [ 527.981121] stack backtrace: [ 527.981124] CPU: 1 PID: 26361 Comm: syz-executor.4 Not tainted 4.14.167-syzkaller #0 [ 527.981127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.981128] Call Trace: [ 527.981130] dump_stack+0x142/0x197 [ 527.981131] ? vprintk_func+0x65/0x159 [ 527.981133] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 527.981134] __lock_acquire+0x2cb3/0x4620 [ 527.981136] ? string+0x184/0x1d0 [ 527.981137] ? trace_hardirqs_on+0x10/0x10 [ 527.981139] ? format_decode+0x1d8/0x930 [ 527.981140] ? kvm_clock_read+0x23/0x40 [ 527.981142] ? kvm_sched_clock_read+0x9/0x20 [ 527.981143] lock_acquire+0x16f/0x430 [ 527.981145] ? down_trylock+0x13/0x70 [ 527.981146] ? vprintk_emit+0x109/0x600 [ 527.981148] _raw_spin_lock_irqsave+0x95/0xcd [ 527.981149] ? down_trylock+0x13/0x70 [ 527.981151] ? vprintk_emit+0x1eb/0x600 [ 527.981152] down_trylock+0x13/0x70 [ 527.981153] ? vprintk_emit+0x1eb/0x600 [ 527.981155] __down_trylock_console_sem+0x9c/0x200 [ 527.981157] console_trylock+0x17/0x80 [ 527.981158] vprintk_emit+0x1eb/0x600 [ 527.981160] vprintk_default+0x28/0x30 [ 527.981161] vprintk_func+0x5d/0x159 [ 527.981162] printk+0x9e/0xbc [ 527.981164] ? show_regs_print_info+0x63/0x63 [ 527.981165] ? lock_acquire+0x16f/0x430 [ 527.981167] ? debug_check_no_obj_freed+0x12d/0x7b7 [ 527.981169] debug_print_object.cold+0xa7/0xdb [ 527.981170] debug_check_no_obj_freed+0x3f5/0x7b7 [ 527.981172] ? free_obj_work+0x6d0/0x6d0 [ 527.981174] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 527.981175] kfree+0xbd/0x270 [ 527.981176] free_tcf+0x13c/0x190 [ 527.981178] __tcf_idr_release+0x213/0x260 [ 527.981179] tcf_sample_init+0x7f2/0x960 [ 527.981181] ? tcf_sample_act+0x9f0/0x9f0 [ 527.981183] ? rcu_read_lock_sched_held+0x110/0x130 [ 527.981184] ? _raw_read_unlock+0x2d/0x50 [ 527.981186] tcf_action_init_1+0x53c/0xaa0 [ 527.981187] ? tcf_action_dump_old+0x80/0x80 [ 527.981189] ? lock_downgrade+0x740/0x740 [ 527.981190] ? nla_parse+0x186/0x240 [ 527.981192] tcf_action_init+0x2ab/0x480 [ 527.981194] ? tcf_action_init_1+0xaa0/0xaa0 [ 527.981195] ? memset+0x32/0x40 [ 527.981196] ? nla_parse+0x186/0x240 [ 527.981198] tc_ctl_action+0x30a/0x548 [ 527.981199] ? tca_action_gd+0x840/0x840 [ 527.981201] ? tca_action_gd+0x840/0x840 [ 527.981202] rtnetlink_rcv_msg+0x3da/0xb70 [ 527.981204] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 527.981206] ? netlink_deliver_tap+0x93/0x8f0 [ 527.981207] netlink_rcv_skb+0x14f/0x3c0 [ 527.981209] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 527.981211] ? lock_downgrade+0x740/0x740 [ 527.981212] ? netlink_ack+0x9a0/0x9a0 [ 527.981214] ? netlink_deliver_tap+0xba/0x8f0 [ 527.981215] rtnetlink_rcv+0x1d/0x30 [ 527.981217] netlink_unicast+0x44d/0x650 [ 527.981219] ? netlink_attachskb+0x6a0/0x6a0 [ 527.981220] ? security_netlink_send+0x81/0xb0 [ 527.981222] netlink_sendmsg+0x7c4/0xc60 [ 527.981224] ? netlink_unicast+0x650/0x650 [ 527.981225] ? security_socket_sendmsg+0x89/0xb0 [ 527.981227] ? netlink_unicast+0x650/0x650 [ 527.981228] sock_sendmsg+0xce/0x110 [ 527.981230] ___sys_sendmsg+0x70a/0x840 [ 527.981232] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 527.981233] ? __fget+0x210/0x370 [ 527.981234] ? find_held_lock+0x35/0x130 [ 527.981236] ? __fget+0x210/0x370 [ 527.981237] ? lock_downgrade+0x740/0x740 [ 527.981239] ? __fget+0x237/0x370 [ 527.981240] ? __fget_light+0x172/0x1f0 [ 527.981242] ? __fdget+0x1b/0x20 [ 527.981243] ? sockfd_lookup_light+0xb4/0x160 [ 527.981245] __sys_sendmsg+0xb9/0x140 [ 527.981246] ? SyS_shutdown+0x170/0x170 [ 527.981248] ? put_timespec64+0xb4/0x100 [ 527.981249] ? SyS_clock_gettime+0xf8/0x180 [ 527.981251] SyS_sendmsg+0x2d/0x50 [ 527.981252] ? __sys_sendmsg+0x140/0x140 [ 527.981254] do_syscall_64+0x1e8/0x640 [ 527.981255] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 527.981257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 527.981258] RIP: 0033:0x45b349 [ 527.981260] RSP: 002b:00007fea7f50ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.981264] RAX: ffffffffffffffda RBX: 00007fea7f50b6d4 RCX: 000000000045b349 [ 527.981267] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 527.981269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 527.981272] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 527.981274] R13: 00000000000009c2 R14: 00000000004cb338 R15: 000000000075bf2c [ 529.120263] Shutting down cpus with NMI [ 530.180914] Kernel Offset: disabled [ 530.184543] Rebooting in 86400 seconds..