ff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, 0x0}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:12 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:12 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2352.876394] Killed process 27579 (syz-executor.5) total-vm:72984kB, anon-rss:6324kB, file-rss:34816kB, shmem-rss:0kB [ 2352.894200] oom_reaper: reaped process 27579 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:39:12 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:13 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, 0x0}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:13 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:13 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, 0x0}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:13 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:13 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2353.677594] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 2353.699922] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2353.705761] CPU: 0 PID: 20702 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2353.713665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2353.723021] Call Trace: [ 2353.725627] dump_stack+0x142/0x197 [ 2353.729279] dump_header+0x177/0x6cd [ 2353.732992] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2353.738082] ? ___ratelimit+0x55/0x537 [ 2353.741955] oom_kill_process.cold+0x10/0xadd [ 2353.746436] ? oom_unkillable_task+0x294/0x390 [ 2353.751005] ? lock_downgrade+0x740/0x740 [ 2353.755139] out_of_memory+0x2ee/0x1180 [ 2353.759108] ? lock_acquire+0x16f/0x430 [ 2353.763515] ? __lock_is_held+0xb6/0x140 [ 2353.767589] ? oom_killer_disable+0x1d0/0x1d0 [ 2353.772083] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2353.777017] __alloc_pages_slowpath+0x2251/0x2930 [ 2353.781860] ? warn_alloc+0xf0/0xf0 [ 2353.785481] ? __might_sleep+0x93/0xb0 [ 2353.789362] __alloc_pages_nodemask+0x62c/0x7a0 [ 2353.794018] ? lock_downgrade+0x740/0x740 [ 2353.798150] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2353.803155] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2353.808764] alloc_pages_current+0xec/0x1e0 [ 2353.813091] ion_page_pool_alloc+0x11f/0x1c0 [ 2353.817501] ion_system_heap_allocate+0x138/0x910 [ 2353.822358] ? ion_alloc+0x19b/0x860 [ 2353.826069] ? rcu_read_lock_sched_held+0x110/0x130 [ 2353.831072] ? ion_system_heap_free+0x250/0x250 [ 2353.835732] ion_alloc+0x222/0x860 [ 2353.839262] ? ion_dma_buf_release+0x50/0x50 [ 2353.843658] ? kasan_check_write+0x14/0x20 [ 2353.847879] ? _copy_from_user+0x99/0x110 [ 2353.852011] ion_ioctl+0x105/0x217 [ 2353.855535] ? ion_alloc.cold+0x40/0x40 [ 2353.859501] ? ion_alloc.cold+0x40/0x40 [ 2353.863473] do_vfs_ioctl+0x7ae/0x1060 [ 2353.867358] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2353.872106] ? lock_downgrade+0x740/0x740 [ 2353.876237] ? ioctl_preallocate+0x1c0/0x1c0 [ 2353.880629] ? __fget+0x237/0x370 [ 2353.884076] ? security_file_ioctl+0x89/0xb0 [ 2353.888471] SyS_ioctl+0x8f/0xc0 [ 2353.891826] ? do_vfs_ioctl+0x1060/0x1060 [ 2353.895957] do_syscall_64+0x1e8/0x640 [ 2353.900086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2353.904916] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2353.910102] RIP: 0033:0x45a909 [ 2353.913282] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.921203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2353.928648] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2353.935901] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2353.943153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2353.950407] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2353.980660] Mem-Info: [ 2353.983133] active_anon:283034 inactive_anon:191 isolated_anon:0 [ 2353.983133] active_file:1517 inactive_file:5188 isolated_file:0 [ 2353.983133] unevictable:0 dirty:34 writeback:0 unstable:0 [ 2353.983133] slab_reclaimable:15660 slab_unreclaimable:110744 [ 2353.983133] mapped:57334 shmem:379 pagetables:7993 bounce:0 [ 2353.983133] free:947686 free_pcp:30 free_cma:0 [ 2354.023944] Node 0 active_anon:1131968kB inactive_anon:764kB active_file:56kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208932kB dirty:28kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 649216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2354.062043] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2354.109749] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2354.114857] Node 0 DMA32 free:36372kB min:36380kB low:45472kB high:54564kB active_anon:1131864kB inactive_anon:764kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15872kB pagetables:31888kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 2354.162635] lowmem_reserve[]: 0 0 0 0 0 [ 2354.169817] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2354.218462] lowmem_reserve[]: 0 0 0 0 0 [ 2354.222560] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 4*16kB (UE) 9*32kB (UE) 6*64kB (UE) 8*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11508kB [ 2354.246616] Node 0 DMA32: 2906*4kB (UME) 829*8kB (ME) 402*16kB (UME) 1173*32kB (UME) 599*64kB (UM) 229*128kB (UM) 141*256kB (UM) 19*512kB (U) 0*1024kB 4*2048kB (U) 0*4096kB = 183888kB 00:39:14 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:14 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2354.289531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2354.309618] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2354.318907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2354.328776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2354.345011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2354.365342] 7072 total pagecache pages [ 2354.370935] 0 pages in swap cache [ 2354.375324] Swap cache stats: add 0, delete 0, find 0/0 [ 2354.384013] Free swap = 0kB [ 2354.395184] Total swap = 0kB [ 2354.403037] 1965979 pages RAM [ 2354.409902] 0 pages HighMem/MovableOnly [ 2354.413901] 335858 pages reserved [ 2354.417354] 0 pages cma reserved [ 2354.425039] Out of memory: Kill process 25416 (syz-executor.0) score 1007 or sacrifice child [ 2354.437493] Killed process 25416 (syz-executor.0) total-vm:72984kB, anon-rss:6328kB, file-rss:34688kB, shmem-rss:0kB [ 2354.459459] oom_reaper: reaped process 25416 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:39:15 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, 0x0}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(0x0, &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2355.527887] warn_alloc: 4 callbacks suppressed [ 2355.527892] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 00:39:15 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:15 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2355.587541] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2355.614054] CPU: 0 PID: 20754 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2355.622504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2355.631878] Call Trace: [ 2355.634498] dump_stack+0x142/0x197 [ 2355.638222] warn_alloc.cold+0x96/0x1af [ 2355.638233] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2355.638253] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2355.638265] __alloc_pages_slowpath+0x23c6/0x2930 [ 2355.638284] ? save_trace+0x290/0x290 [ 2355.638300] ? warn_alloc+0xf0/0xf0 [ 2355.638320] ? __might_sleep+0x93/0xb0 [ 2355.638332] __alloc_pages_nodemask+0x62c/0x7a0 [ 2355.638343] ? lock_downgrade+0x740/0x740 [ 2355.638354] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2355.638370] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2355.638386] alloc_pages_current+0xec/0x1e0 [ 2355.638402] ion_page_pool_alloc+0x11f/0x1c0 [ 2355.638413] ion_system_heap_allocate+0x138/0x910 [ 2355.638422] ? ion_alloc+0x19b/0x860 [ 2355.638433] ? rcu_read_lock_sched_held+0x110/0x130 [ 2355.638446] ? ion_system_heap_free+0x250/0x250 [ 2355.638460] ion_alloc+0x222/0x860 [ 2355.638480] ? ion_dma_buf_release+0x50/0x50 [ 2355.638495] ? kasan_check_write+0x14/0x20 [ 2355.638506] ? _copy_from_user+0x99/0x110 [ 2355.638517] ion_ioctl+0x105/0x217 [ 2355.638527] ? ion_alloc.cold+0x40/0x40 [ 2355.638540] ? ion_alloc.cold+0x40/0x40 [ 2355.638551] do_vfs_ioctl+0x7ae/0x1060 [ 2355.638563] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2355.638572] ? lock_downgrade+0x740/0x740 [ 2355.638584] ? ioctl_preallocate+0x1c0/0x1c0 [ 2355.638596] ? __fget+0x237/0x370 [ 2355.638612] ? security_file_ioctl+0x89/0xb0 [ 2355.638624] SyS_ioctl+0x8f/0xc0 [ 2355.638634] ? do_vfs_ioctl+0x1060/0x1060 [ 2355.638647] do_syscall_64+0x1e8/0x640 [ 2355.638655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2355.638670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2355.638678] RIP: 0033:0x45a909 [ 2355.638684] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2355.638693] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2355.638703] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2355.817531] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2355.824828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 00:39:15 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(0x0, &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2355.832203] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2355.988615] warn_alloc_show_mem: 1 callbacks suppressed [ 2355.988619] Mem-Info: [ 2356.006914] active_anon:281459 inactive_anon:194 isolated_anon:0 [ 2356.006914] active_file:1513 inactive_file:5188 isolated_file:0 [ 2356.006914] unevictable:0 dirty:108 writeback:0 unstable:0 [ 2356.006914] slab_reclaimable:15676 slab_unreclaimable:110833 [ 2356.006914] mapped:57291 shmem:379 pagetables:7911 bounce:0 [ 2356.006914] free:851042 free_pcp:257 free_cma:0 [ 2356.045019] Node 0 active_anon:1125592kB inactive_anon:768kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:28kB writeback:0kB shmem:1508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 645120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2356.081716] Node 0 DMA free:13620kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2356.113133] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2356.118376] Node 0 DMA32 free:95980kB min:36380kB low:45472kB high:54564kB active_anon:1125412kB inactive_anon:768kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:32kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15808kB pagetables:31676kB bounce:0kB free_pcp:1116kB local_pcp:408kB free_cma:0kB [ 2356.152156] lowmem_reserve[]: 0 0 0 0 0 [ 2356.156286] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2356.185042] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2356.190693] lowmem_reserve[]: [ 2356.197905] syz-executor.2 cpuset= [ 2356.199367] 0 [ 2356.201726] syz2 mems_allowed=0-1 [ 2356.210180] 0 0 0 0 [ 2356.211573] CPU: 1 PID: 20740 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2356.215241] Node 0 [ 2356.221084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2356.221087] Call Trace: [ 2356.221104] dump_stack+0x142/0x197 [ 2356.221117] warn_alloc.cold+0x96/0x1af [ 2356.221126] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2356.221142] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2356.221153] __alloc_pages_slowpath+0x23c6/0x2930 [ 2356.221169] ? save_trace+0x290/0x290 [ 2356.221182] ? warn_alloc+0xf0/0xf0 [ 2356.221202] ? __might_sleep+0x93/0xb0 [ 2356.221213] __alloc_pages_nodemask+0x62c/0x7a0 [ 2356.221223] ? lock_downgrade+0x740/0x740 [ 2356.221234] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2356.221247] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2356.221262] alloc_pages_current+0xec/0x1e0 [ 2356.221278] ion_page_pool_alloc+0x11f/0x1c0 [ 2356.221289] ion_system_heap_allocate+0x138/0x910 [ 2356.221298] ? ion_alloc+0x19b/0x860 [ 2356.221309] ? rcu_read_lock_sched_held+0x110/0x130 [ 2356.221322] ? ion_system_heap_free+0x250/0x250 [ 2356.221336] ion_alloc+0x222/0x860 [ 2356.221350] ? ion_dma_buf_release+0x50/0x50 [ 2356.221363] ? kasan_check_write+0x14/0x20 [ 2356.221376] ? _copy_from_user+0x99/0x110 [ 2356.223610] DMA: [ 2356.233137] ion_ioctl+0x105/0x217 [ 2356.233146] ? ion_alloc.cold+0x40/0x40 [ 2356.233159] ? ion_alloc.cold+0x40/0x40 [ 2356.233173] do_vfs_ioctl+0x7ae/0x1060 [ 2356.236223] 7*4kB [ 2356.239847] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2356.239857] ? lock_downgrade+0x740/0x740 [ 2356.239866] ? ioctl_preallocate+0x1c0/0x1c0 [ 2356.239877] ? __fget+0x237/0x370 [ 2356.243902] (UE) [ 2356.248742] ? security_file_ioctl+0x89/0xb0 [ 2356.254025] 1*8kB [ 2356.258842] SyS_ioctl+0x8f/0xc0 [ 2356.262738] (E) [ 2356.266333] ? do_vfs_ioctl+0x1060/0x1060 [ 2356.270223] 1*16kB [ 2356.274939] do_syscall_64+0x1e8/0x640 [ 2356.279064] (E) [ 2356.284072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2356.284089] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2356.284096] RIP: 0033:0x45a909 [ 2356.284102] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 [ 2356.289859] 2*32kB [ 2356.294242] ORIG_RAX: 0000000000000010 [ 2356.298772] (UE) [ 2356.303604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2356.303608] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 00:39:16 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(0x0, &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:16 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2356.303613] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2356.303618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2356.303627] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2356.462989] 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10548kB [ 2356.503204] Node 0 DMA32: 1271*4kB (UME) 1285*8kB (UME) 583*16kB (UME) 394*32kB (UM) 26*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38964kB [ 2356.539191] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2356.602831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2356.618414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2356.645513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2356.660520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2356.677490] 7082 total pagecache pages [ 2356.681704] 0 pages in swap cache [ 2356.685232] Swap cache stats: add 0, delete 0, find 0/0 [ 2356.690881] Free swap = 0kB 00:39:16 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:16 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(0x0, &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(0x0, &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2356.690885] Total swap = 0kB [ 2356.690892] 1965979 pages RAM [ 2356.690895] 0 pages HighMem/MovableOnly [ 2356.690899] 335858 pages reserved [ 2356.690901] 0 pages cma reserved 00:39:16 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:16 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:16 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:17 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:17 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, 0x0, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, 0x0, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 4: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:17 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:17 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:17 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2358.019619] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2358.020281] syz-executor.2: [ 2358.031867] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2358.035644] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2358.042934] CPU: 0 PID: 20834 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2358.055535] syz-executor.2 cpuset= [ 2358.059634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.059639] Call Trace: [ 2358.059657] dump_stack+0x142/0x197 [ 2358.059674] warn_alloc.cold+0x96/0x1af [ 2358.059684] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2358.059702] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2358.059713] __alloc_pages_slowpath+0x23c6/0x2930 [ 2358.059731] ? save_trace+0x290/0x290 [ 2358.059745] ? warn_alloc+0xf0/0xf0 [ 2358.059762] ? __might_sleep+0x93/0xb0 [ 2358.065202] syz2 [ 2358.073210] __alloc_pages_nodemask+0x62c/0x7a0 [ 2358.080665] mems_allowed=0-1 [ 2358.083633] ? lock_downgrade+0x740/0x740 [ 2358.083648] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2358.083664] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2358.083679] alloc_pages_current+0xec/0x1e0 [ 2358.140589] ion_page_pool_alloc+0x11f/0x1c0 [ 2358.145267] ion_system_heap_allocate+0x138/0x910 [ 2358.150527] ? ion_alloc+0x19b/0x860 [ 2358.154259] ? rcu_read_lock_sched_held+0x110/0x130 [ 2358.159429] ? ion_system_heap_free+0x250/0x250 [ 2358.164123] ion_alloc+0x222/0x860 [ 2358.167672] ? ion_dma_buf_release+0x50/0x50 [ 2358.172091] ? kasan_check_write+0x14/0x20 [ 2358.176489] ? _copy_from_user+0x99/0x110 [ 2358.180668] ion_ioctl+0x105/0x217 [ 2358.184224] ? ion_alloc.cold+0x40/0x40 [ 2358.188213] ? ion_alloc.cold+0x40/0x40 [ 2358.192372] do_vfs_ioctl+0x7ae/0x1060 [ 2358.196416] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2358.201191] ? lock_downgrade+0x740/0x740 [ 2358.205356] ? ioctl_preallocate+0x1c0/0x1c0 [ 2358.209880] ? __fget+0x237/0x370 [ 2358.213344] ? security_file_ioctl+0x89/0xb0 [ 2358.217963] SyS_ioctl+0x8f/0xc0 [ 2358.221419] ? do_vfs_ioctl+0x1060/0x1060 [ 2358.225702] do_syscall_64+0x1e8/0x640 [ 2358.229826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2358.234769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2358.240482] RIP: 0033:0x45a909 [ 2358.243678] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2358.251669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2358.259338] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2358.266874] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2358.274204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2358.282523] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2358.292294] CPU: 1 PID: 20847 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2358.293638] warn_alloc_show_mem: 1 callbacks suppressed [ 2358.293641] Mem-Info: [ 2358.300641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2358.300645] Call Trace: [ 2358.300664] dump_stack+0x142/0x197 [ 2358.300678] warn_alloc.cold+0x96/0x1af [ 2358.300687] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2358.300703] ? __alloc_pages_direct_compact+0x290/0x380 [ 2358.300715] __alloc_pages_slowpath+0x23c6/0x2930 [ 2358.300733] ? save_trace+0x290/0x290 [ 2358.306246] active_anon:281476 inactive_anon:194 isolated_anon:0 [ 2358.306246] active_file:1516 inactive_file:5200 isolated_file:0 [ 2358.306246] unevictable:0 dirty:127 writeback:0 unstable:0 [ 2358.306246] slab_reclaimable:15689 slab_unreclaimable:110477 [ 2358.306246] mapped:57294 shmem:379 pagetables:7935 bounce:0 [ 2358.306246] free:986638 free_pcp:59 free_cma:0 [ 2358.308614] ? warn_alloc+0xf0/0xf0 [ 2358.308637] ? __might_sleep+0x93/0xb0 [ 2358.319055] Node 0 active_anon:1125328kB inactive_anon:772kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:16kB writeback:0kB shmem:1512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 641024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2358.321294] __alloc_pages_nodemask+0x62c/0x7a0 [ 2358.321307] ? lock_downgrade+0x740/0x740 [ 2358.321318] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2358.321332] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2358.321346] alloc_pages_current+0xec/0x1e0 [ 2358.325201] Node 0 [ 2358.329164] ion_page_pool_alloc+0x11f/0x1c0 [ 2358.329176] ion_system_heap_allocate+0x138/0x910 [ 2358.329186] ? ion_alloc+0x19b/0x860 [ 2358.334754] DMA free:10552kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2358.339849] ? rcu_read_lock_sched_held+0x110/0x130 [ 2358.339864] ? ion_system_heap_free+0x250/0x250 [ 2358.339877] ion_alloc+0x222/0x860 [ 2358.339890] ? ion_dma_buf_release+0x50/0x50 [ 2358.339905] ? kasan_check_write+0x14/0x20 [ 2358.344867] lowmem_reserve[]: [ 2358.348555] ? _copy_from_user+0x99/0x110 [ 2358.348568] ion_ioctl+0x105/0x217 [ 2358.348590] ? ion_alloc.cold+0x40/0x40 [ 2358.383349] 0 [ 2358.386559] ? ion_alloc.cold+0x40/0x40 [ 2358.386570] do_vfs_ioctl+0x7ae/0x1060 [ 2358.386583] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2358.390599] 2569 [ 2358.419076] ? lock_downgrade+0x740/0x740 [ 2358.419094] ? ioctl_preallocate+0x1c0/0x1c0 [ 2358.419106] ? __fget+0x237/0x370 [ 2358.419120] ? security_file_ioctl+0x89/0xb0 [ 2358.419132] SyS_ioctl+0x8f/0xc0 [ 2358.419141] ? do_vfs_ioctl+0x1060/0x1060 [ 2358.419155] do_syscall_64+0x1e8/0x640 [ 2358.424917] 2569 [ 2358.428852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2358.428870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2358.428879] RIP: 0033:0x45a909 [ 2358.435127] 2569 [ 2358.439520] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2358.439529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2358.439534] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2358.439540] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2358.439545] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2358.439550] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2358.620663] 2569 [ 2358.637286] Node 0 DMA32 free:84996kB min:36380kB low:45472kB high:54564kB active_anon:1125328kB inactive_anon:772kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:16kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15744kB pagetables:31424kB bounce:0kB free_pcp:520kB local_pcp:104kB free_cma:0kB [ 2358.668200] lowmem_reserve[]: 0 0 0 0 0 [ 2358.668225] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2358.668246] lowmem_reserve[]: 0 0 0 0 0 [ 2358.702778] Node 0 DMA: 4*4kB (UE) 3*8kB (UE) 9*16kB (UE) 10*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10552kB [ 2358.722736] Node 0 DMA32: 1301*4kB (ME) 981*8kB (UME) 1106*16kB (UME) 1724*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85916kB [ 2358.737957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2358.753521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2358.763204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2358.775269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2358.784970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2358.797725] 7094 total pagecache pages [ 2358.801862] 0 pages in swap cache [ 2358.805414] Swap cache stats: add 0, delete 0, find 0/0 [ 2358.814405] Free swap = 0kB [ 2358.817828] Total swap = 0kB [ 2358.820971] 1965979 pages RAM [ 2358.824346] 0 pages HighMem/MovableOnly [ 2358.828393] 335858 pages reserved [ 2358.836261] 0 pages cma reserved 00:39:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:19 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 4: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:19 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:19 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 4: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:19 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:19 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2360.414525] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2360.414983] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2360.431422] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2360.449992] CPU: 0 PID: 20916 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2360.450099] syz-executor.0 cpuset= [ 2360.459321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2360.459326] Call Trace: [ 2360.459343] dump_stack+0x142/0x197 [ 2360.459358] warn_alloc.cold+0x96/0x1af [ 2360.459367] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2360.459386] ? __alloc_pages_direct_compact+0x290/0x380 [ 2360.459400] __alloc_pages_slowpath+0x23c6/0x2930 [ 2360.459420] ? save_trace+0x290/0x290 [ 2360.459442] ? warn_alloc+0xf0/0xf0 [ 2360.459459] ? __might_sleep+0x93/0xb0 [ 2360.463197] syz0 [ 2360.472824] __alloc_pages_nodemask+0x62c/0x7a0 [ 2360.476574] mems_allowed=0-1 [ 2360.479136] ? lock_downgrade+0x740/0x740 [ 2360.479150] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2360.479164] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2360.479178] alloc_pages_current+0xec/0x1e0 [ 2360.540476] ion_page_pool_alloc+0x11f/0x1c0 [ 2360.544979] ion_system_heap_allocate+0x138/0x910 [ 2360.549972] ? ion_alloc+0x19b/0x860 [ 2360.553973] ? rcu_read_lock_sched_held+0x110/0x130 [ 2360.559160] ? ion_system_heap_free+0x250/0x250 [ 2360.564293] ion_alloc+0x222/0x860 [ 2360.568094] ? ion_dma_buf_release+0x50/0x50 [ 2360.572941] ? kasan_check_write+0x14/0x20 [ 2360.577813] ? _copy_from_user+0x99/0x110 [ 2360.582250] ion_ioctl+0x105/0x217 [ 2360.585887] ? ion_alloc.cold+0x40/0x40 [ 2360.590148] ? ion_alloc.cold+0x40/0x40 [ 2360.594318] do_vfs_ioctl+0x7ae/0x1060 [ 2360.598447] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2360.603556] ? lock_downgrade+0x740/0x740 [ 2360.608310] ? ioctl_preallocate+0x1c0/0x1c0 [ 2360.612904] ? __fget+0x237/0x370 [ 2360.616457] ? security_file_ioctl+0x89/0xb0 [ 2360.621066] SyS_ioctl+0x8f/0xc0 [ 2360.624822] ? do_vfs_ioctl+0x1060/0x1060 [ 2360.629073] do_syscall_64+0x1e8/0x640 [ 2360.633109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2360.638227] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2360.643713] RIP: 0033:0x45a909 [ 2360.647061] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.655282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2360.663136] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2360.671383] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2360.679074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2360.686497] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2360.693789] CPU: 1 PID: 20928 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2360.702612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2360.712403] Call Trace: [ 2360.715200] dump_stack+0x142/0x197 [ 2360.716775] warn_alloc_show_mem: 1 callbacks suppressed [ 2360.716779] Mem-Info: [ 2360.719471] warn_alloc.cold+0x96/0x1af [ 2360.719480] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2360.719497] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2360.719508] __alloc_pages_slowpath+0x23c6/0x2930 [ 2360.719526] ? save_trace+0x290/0x290 [ 2360.725877] active_anon:280971 inactive_anon:194 isolated_anon:0 [ 2360.725877] active_file:1523 inactive_file:5214 isolated_file:0 [ 2360.725877] unevictable:0 dirty:117 writeback:0 unstable:0 [ 2360.725877] slab_reclaimable:15070 slab_unreclaimable:111968 [ 2360.725877] mapped:57294 shmem:379 pagetables:7935 bounce:0 [ 2360.725877] free:979337 free_pcp:90 free_cma:0 [ 2360.728627] ? warn_alloc+0xf0/0xf0 [ 2360.728648] ? __might_sleep+0x93/0xb0 [ 2360.732734] Node 0 active_anon:1123340kB inactive_anon:776kB active_file:36kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:32kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2360.737694] __alloc_pages_nodemask+0x62c/0x7a0 [ 2360.737707] ? lock_downgrade+0x740/0x740 [ 2360.737716] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2360.737729] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2360.737744] alloc_pages_current+0xec/0x1e0 [ 2360.743731] Node 0 [ 2360.748459] ion_page_pool_alloc+0x11f/0x1c0 [ 2360.748472] ion_system_heap_allocate+0x138/0x910 [ 2360.752700] DMA free:10552kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2360.787914] ? ion_alloc+0x19b/0x860 [ 2360.787926] ? rcu_read_lock_sched_held+0x110/0x130 [ 2360.787937] ? ion_system_heap_free+0x250/0x250 [ 2360.787948] ion_alloc+0x222/0x860 [ 2360.787961] ? ion_dma_buf_release+0x50/0x50 [ 2360.787975] ? kasan_check_write+0x14/0x20 [ 2360.787989] ? _copy_from_user+0x99/0x110 [ 2360.791833] lowmem_reserve[]: [ 2360.796003] ion_ioctl+0x105/0x217 [ 2360.796015] ? ion_alloc.cold+0x40/0x40 [ 2360.796033] ? ion_alloc.cold+0x40/0x40 [ 2360.824875] 0 [ 2360.829669] do_vfs_ioctl+0x7ae/0x1060 [ 2360.829684] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2360.829694] ? lock_downgrade+0x740/0x740 [ 2360.829705] ? ioctl_preallocate+0x1c0/0x1c0 [ 2360.834249] 2569 [ 2360.839241] ? __fget+0x237/0x370 [ 2360.839257] ? security_file_ioctl+0x89/0xb0 [ 2360.839269] SyS_ioctl+0x8f/0xc0 [ 2360.839282] ? do_vfs_ioctl+0x1060/0x1060 [ 2360.845125] 2569 [ 2360.849516] do_syscall_64+0x1e8/0x640 [ 2360.849526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2360.849542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2360.849552] RIP: 0033:0x45a909 [ 2360.852053] 2569 [ 2360.856675] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2360.856686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2360.856691] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2360.856696] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2360.856700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2360.856705] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2361.001555] 2569 [ 2361.042781] Node 0 DMA32 free:161356kB min:36380kB low:45472kB high:54564kB active_anon:1123380kB inactive_anon:768kB active_file:36kB inactive_file:120kB unevictable:0kB writepending:72kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15808kB pagetables:31640kB bounce:0kB free_pcp:636kB local_pcp:0kB free_cma:0kB [ 2361.073760] lowmem_reserve[]: 0 0 0 0 0 [ 2361.077771] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2361.104808] lowmem_reserve[]: 0 0 0 0 0 [ 2361.109073] Node 0 DMA: 8*4kB (UE) 1*8kB (E) 3*16kB (UE) 11*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10552kB [ 2361.125574] Node 0 DMA32: 7189*4kB (UME) 8070*8kB (UME) 3362*16kB (UME) 383*32kB (UM) 24*64kB (UE) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 160900kB [ 2361.142354] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2361.153332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2361.162664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2361.171738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2361.180770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2361.190102] 7124 total pagecache pages [ 2361.194008] 0 pages in swap cache [ 2361.197667] Swap cache stats: add 0, delete 0, find 0/0 [ 2361.203176] Free swap = 0kB [ 2361.206207] Total swap = 0kB [ 2361.209603] 1965979 pages RAM [ 2361.212741] 0 pages HighMem/MovableOnly 00:39:21 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:21 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x0, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 4: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:21 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2361.217689] 335858 pages reserved [ 2361.221359] 0 pages cma reserved 00:39:21 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x0, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x6, 0xa132, 0xffffffffffffffff, 0x0) [ 2361.392495] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2361.434665] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2361.475567] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2361.483958] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2361.494265] CPU: 0 PID: 20952 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2361.502513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.512272] Call Trace: [ 2361.514975] dump_stack+0x142/0x197 [ 2361.518970] warn_alloc.cold+0x96/0x1af [ 2361.523271] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2361.528641] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2361.534369] __alloc_pages_slowpath+0x23c6/0x2930 [ 2361.539486] ? save_trace+0x290/0x290 [ 2361.539503] ? warn_alloc+0xf0/0xf0 [ 2361.539523] ? __might_sleep+0x93/0xb0 [ 2361.539535] __alloc_pages_nodemask+0x62c/0x7a0 [ 2361.539545] ? lock_downgrade+0x740/0x740 [ 2361.539556] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2361.539572] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2361.570943] alloc_pages_current+0xec/0x1e0 [ 2361.570963] ion_page_pool_alloc+0x11f/0x1c0 [ 2361.579848] ion_system_heap_allocate+0x138/0x910 [ 2361.584813] ? ion_alloc+0x19b/0x860 [ 2361.588820] ? rcu_read_lock_sched_held+0x110/0x130 [ 2361.593876] ? ion_system_heap_free+0x250/0x250 [ 2361.598881] ion_alloc+0x222/0x860 [ 2361.602569] ? ion_dma_buf_release+0x50/0x50 [ 2361.602587] ? kasan_check_write+0x14/0x20 [ 2361.602599] ? _copy_from_user+0x99/0x110 [ 2361.602611] ion_ioctl+0x105/0x217 [ 2361.619706] ? ion_alloc.cold+0x40/0x40 [ 2361.623720] ? ion_alloc.cold+0x40/0x40 [ 2361.627819] do_vfs_ioctl+0x7ae/0x1060 [ 2361.631735] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2361.636684] ? lock_downgrade+0x740/0x740 [ 2361.640946] ? ioctl_preallocate+0x1c0/0x1c0 [ 2361.645406] ? __fget+0x237/0x370 [ 2361.648974] ? security_file_ioctl+0x89/0xb0 [ 2361.653410] SyS_ioctl+0x8f/0xc0 [ 2361.657002] ? do_vfs_ioctl+0x1060/0x1060 [ 2361.657015] do_syscall_64+0x1e8/0x640 [ 2361.657025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2361.657043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 00:39:21 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:21 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2361.657051] RIP: 0033:0x45a909 [ 2361.657056] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.657069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2361.694130] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2361.701778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2361.709322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2361.716748] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2361.731864] CPU: 0 PID: 20950 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2361.740066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.749439] Call Trace: [ 2361.752051] dump_stack+0x142/0x197 [ 2361.756053] warn_alloc.cold+0x96/0x1af [ 2361.760045] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2361.763864] audit: type=1400 audit(2361.700:375): avc: denied { map } for pid=20960 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=330489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 2361.765002] ? __alloc_pages_direct_compact+0x290/0x380 [ 2361.765018] __alloc_pages_slowpath+0x23c6/0x2930 [ 2361.765036] ? save_trace+0x290/0x290 [ 2361.765050] ? warn_alloc+0xf0/0xf0 [ 2361.812758] ? __might_sleep+0x93/0xb0 [ 2361.816847] __alloc_pages_nodemask+0x62c/0x7a0 [ 2361.821559] ? lock_downgrade+0x740/0x740 [ 2361.826149] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2361.831471] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2361.837298] alloc_pages_current+0xec/0x1e0 [ 2361.841624] ion_page_pool_alloc+0x11f/0x1c0 [ 2361.846309] ion_system_heap_allocate+0x138/0x910 [ 2361.851151] ? ion_alloc+0x19b/0x860 [ 2361.854952] ? rcu_read_lock_sched_held+0x110/0x130 [ 2361.860190] ? ion_system_heap_free+0x250/0x250 [ 2361.864859] ion_alloc+0x222/0x860 [ 2361.868431] ? ion_dma_buf_release+0x50/0x50 [ 2361.872830] ? kasan_check_write+0x14/0x20 [ 2361.877433] ? _copy_from_user+0x99/0x110 [ 2361.881691] ion_ioctl+0x105/0x217 [ 2361.885229] ? ion_alloc.cold+0x40/0x40 [ 2361.889284] ? ion_alloc.cold+0x40/0x40 [ 2361.893262] do_vfs_ioctl+0x7ae/0x1060 [ 2361.897451] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2361.902209] ? lock_downgrade+0x740/0x740 [ 2361.906663] ? ioctl_preallocate+0x1c0/0x1c0 [ 2361.911071] ? __fget+0x237/0x370 [ 2361.914775] ? security_file_ioctl+0x89/0xb0 [ 2361.919186] SyS_ioctl+0x8f/0xc0 [ 2361.922649] ? do_vfs_ioctl+0x1060/0x1060 [ 2361.926821] do_syscall_64+0x1e8/0x640 [ 2361.930705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2361.935552] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2361.940860] RIP: 0033:0x45a909 [ 2361.944045] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.951747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2361.959242] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2361.966693] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2361.974268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2361.982005] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2362.043847] warn_alloc_show_mem: 1 callbacks suppressed [ 2362.043851] Mem-Info: [ 2362.072051] active_anon:280995 inactive_anon:192 isolated_anon:0 [ 2362.072051] active_file:1523 inactive_file:5223 isolated_file:0 [ 2362.072051] unevictable:0 dirty:137 writeback:0 unstable:0 [ 2362.072051] slab_reclaimable:14999 slab_unreclaimable:112450 [ 2362.072051] mapped:57288 shmem:379 pagetables:7947 bounce:0 [ 2362.072051] free:921641 free_pcp:346 free_cma:0 [ 2362.121531] Node 0 active_anon:1123436kB inactive_anon:768kB active_file:36kB inactive_file:144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:108kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2362.184477] Node 0 DMA free:10580kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2362.224221] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2362.229825] Node 0 DMA32 free:143720kB min:36380kB low:45472kB high:54564kB active_anon:1123436kB inactive_anon:768kB active_file:36kB inactive_file:144kB unevictable:0kB writepending:108kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15808kB pagetables:31732kB bounce:0kB free_pcp:1532kB local_pcp:692kB free_cma:0kB [ 2362.265508] lowmem_reserve[]: 0 0 0 0 0 [ 2362.270246] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2362.309055] lowmem_reserve[]: 0 0 0 0 0 [ 2362.325016] Node 0 DMA: 7*4kB (UE) 3*8kB (UE) 6*16kB (UE) 10*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10580kB [ 2362.344841] Node 0 DMA32: 4073*4kB (UME) 1064*8kB (UME) 2485*16kB (UME) 1327*32kB (UME) 22*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 108436kB [ 2362.364537] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2362.375691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2362.388720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2362.397731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2362.410716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2362.422718] 7133 total pagecache pages [ 2362.426996] 0 pages in swap cache [ 2362.432600] Swap cache stats: add 0, delete 0, find 0/0 [ 2362.438138] Free swap = 0kB [ 2362.445046] Total swap = 0kB [ 2362.448382] 1965979 pages RAM [ 2362.451642] 0 pages HighMem/MovableOnly [ 2362.455636] 335858 pages reserved [ 2362.459170] 0 pages cma reserved 00:39:22 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:22 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:22 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x0, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:22 executing program 4: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000140)="02", 0x1}, {&(0x7f0000000200)="0237001999d3e4747c52c7340a8ac2172e8bbe30969623567fe895bd773758be0bdd3fa6c235d919f860d1d32affb90926369d9d0ac06d6ea65a981395772b49923fff69e1eb1871978a298bf5dd3754a52717686eb9f86993b8b011b216faf171", 0x61}], 0x2) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x160) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) 00:39:22 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2362.820346] audit: type=1800 audit(2362.790:376): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=689 res=0 00:39:22 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x0, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:22 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2362.933523] audit: type=1804 audit(2362.840:377): pid=20991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir808142644/syzkaller.THxh3Z/1031/file0/file0" dev="loop2" ino=689 res=1 00:39:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000140)="02", 0x1}, {&(0x7f0000000200)="0237001999d3e4747c52c7340a8ac2172e8bbe30969623567fe895bd773758be0bdd3fa6c235d919f860d1d32affb90926369d9d0ac06d6ea65a981395772b49923fff69e1eb1871978a298bf5dd3754a52717686eb9f86993b8b011b216faf171", 0x61}], 0x2) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x160) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) 00:39:23 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x0, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:23 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2363.152832] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2363.165335] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2363.201911] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2363.217430] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2363.226575] CPU: 0 PID: 20985 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2363.234505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2363.243875] Call Trace: [ 2363.246480] dump_stack+0x142/0x197 [ 2363.250233] warn_alloc.cold+0x96/0x1af [ 2363.254234] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2363.259097] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2363.264388] __alloc_pages_slowpath+0x23c6/0x2930 [ 2363.269255] ? save_trace+0x290/0x290 [ 2363.273068] ? warn_alloc+0xf0/0xf0 [ 2363.276709] ? __might_sleep+0x93/0xb0 [ 2363.280610] __alloc_pages_nodemask+0x62c/0x7a0 [ 2363.285408] ? lock_downgrade+0x740/0x740 [ 2363.289576] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2363.296067] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 00:39:23 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x0, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2363.301714] alloc_pages_current+0xec/0x1e0 [ 2363.306184] ion_page_pool_alloc+0x11f/0x1c0 [ 2363.306195] ion_system_heap_allocate+0x138/0x910 [ 2363.306210] ? ion_alloc+0x19b/0x860 [ 2363.315460] ? rcu_read_lock_sched_held+0x110/0x130 [ 2363.315477] ? ion_system_heap_free+0x250/0x250 [ 2363.315493] ion_alloc+0x222/0x860 [ 2363.315509] ? ion_dma_buf_release+0x50/0x50 [ 2363.315526] ? kasan_check_write+0x14/0x20 [ 2363.315537] ? _copy_from_user+0x99/0x110 [ 2363.315548] ion_ioctl+0x105/0x217 [ 2363.329052] ? ion_alloc.cold+0x40/0x40 [ 2363.329069] ? ion_alloc.cold+0x40/0x40 [ 2363.329082] do_vfs_ioctl+0x7ae/0x1060 [ 2363.329094] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2363.356900] ? lock_downgrade+0x740/0x740 [ 2363.356917] ? ioctl_preallocate+0x1c0/0x1c0 [ 2363.356929] ? __fget+0x237/0x370 [ 2363.356947] ? security_file_ioctl+0x89/0xb0 [ 2363.356960] SyS_ioctl+0x8f/0xc0 [ 2363.356969] ? do_vfs_ioctl+0x1060/0x1060 [ 2363.356985] do_syscall_64+0x1e8/0x640 [ 2363.393876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2363.393894] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2363.401855] audit: type=1800 audit(2363.360:378): pid=21016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16710 res=0 [ 2363.404024] RIP: 0033:0x45a909 [ 2363.404031] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.404042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2363.404048] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2363.404054] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2363.404060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2363.404065] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2363.427257] warn_alloc_show_mem: 1 callbacks suppressed [ 2363.427261] Mem-Info: [ 2363.427281] active_anon:282686 inactive_anon:199 isolated_anon:0 [ 2363.427281] active_file:1543 inactive_file:5216 isolated_file:0 [ 2363.427281] unevictable:0 dirty:69 writeback:0 unstable:0 [ 2363.427281] slab_reclaimable:14949 slab_unreclaimable:112751 [ 2363.427281] mapped:57384 shmem:389 pagetables:8063 bounce:0 [ 2363.427281] free:893883 free_pcp:146 free_cma:0 [ 2363.427298] Node 0 active_anon:1129664kB inactive_anon:792kB active_file:116kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:40kB writeback:0kB shmem:1552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 645120kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2363.427302] Node 0 DMA free:10544kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.427321] lowmem_reserve[]: 0 2569 2569 [ 2363.452741] CPU: 1 PID: 20990 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2363.460742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2363.460747] Call Trace: [ 2363.460766] dump_stack+0x142/0x197 [ 2363.460784] warn_alloc.cold+0x96/0x1af [ 2363.604424] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2363.604438] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2363.604448] __alloc_pages_slowpath+0x23c6/0x2930 [ 2363.604462] ? save_trace+0x290/0x290 [ 2363.604473] ? warn_alloc+0xf0/0xf0 [ 2363.604488] ? __might_sleep+0x93/0xb0 [ 2363.604496] __alloc_pages_nodemask+0x62c/0x7a0 [ 2363.604504] ? lock_downgrade+0x740/0x740 [ 2363.604511] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2363.604523] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2363.604534] alloc_pages_current+0xec/0x1e0 [ 2363.604545] ion_page_pool_alloc+0x11f/0x1c0 [ 2363.604553] ion_system_heap_allocate+0x138/0x910 [ 2363.604560] ? ion_alloc+0x19b/0x860 [ 2363.604568] ? rcu_read_lock_sched_held+0x110/0x130 [ 2363.604576] ? ion_system_heap_free+0x250/0x250 [ 2363.604586] ion_alloc+0x222/0x860 [ 2363.604597] ? ion_dma_buf_release+0x50/0x50 [ 2363.604608] ? kasan_check_write+0x14/0x20 [ 2363.604616] ? _copy_from_user+0x99/0x110 [ 2363.604624] ion_ioctl+0x105/0x217 [ 2363.604631] ? ion_alloc.cold+0x40/0x40 [ 2363.604641] ? ion_alloc.cold+0x40/0x40 [ 2363.604650] do_vfs_ioctl+0x7ae/0x1060 [ 2363.604659] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2363.604665] ? lock_downgrade+0x740/0x740 [ 2363.604672] ? ioctl_preallocate+0x1c0/0x1c0 [ 2363.604681] ? __fget+0x237/0x370 [ 2363.604693] ? security_file_ioctl+0x89/0xb0 [ 2363.604701] SyS_ioctl+0x8f/0xc0 [ 2363.604708] ? do_vfs_ioctl+0x1060/0x1060 [ 2363.604717] do_syscall_64+0x1e8/0x640 [ 2363.604723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2363.604734] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2363.604741] RIP: 0033:0x45a909 [ 2363.604745] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.604752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2363.604756] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2363.604760] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2363.604764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2363.604768] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2363.635372] 2569 2569 [ 2363.635385] Node 0 DMA32 free:38744kB min:36380kB low:45472kB high:54564kB active_anon:1127456kB inactive_anon:792kB active_file:116kB inactive_file:80kB unevictable:0kB writepending:36kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15872kB pagetables:31688kB bounce:0kB free_pcp:812kB local_pcp:304kB free_cma:0kB [ 2363.635407] lowmem_reserve[]: 0 0 0 0 0 [ 2363.635429] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2363.635448] lowmem_reserve[]: 0 0 0 0 0 [ 2363.635470] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 10*32kB (UE) 1*64kB (E) 3*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10552kB [ 2363.644983] audit: type=1804 audit(2363.590:379): pid=21016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir808142644/syzkaller.THxh3Z/1032/file0" dev="sda1" ino=16710 res=1 [ 2363.896669] Node 0 [ 2363.926077] DMA32: [ 2363.948545] 1936*4kB (UME) 866*8kB (UME) 217*16kB (UME) 105*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 2*1024kB (U) 6*2048kB (UM) 0*4096kB = 36416kB [ 2363.958028] oom_reaper: reaped process 20990 (syz-executor.1), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 2363.970329] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2363.988360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.997652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.022895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.033316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.042648] 7134 total pagecache pages [ 2364.046606] 0 pages in swap cache [ 2364.048039] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2364.050501] Swap cache stats: add 0, delete 0, find 0/0 [ 2364.051732] 0 [ 2364.061350] Free swap = 0kB [ 2364.067146] , order=0, oom_score_adj=1000 [ 2364.068767] Total swap = 0kB [ 2364.068776] 1965979 pages RAM [ 2364.068779] 0 pages HighMem/MovableOnly [ 2364.068784] 335858 pages reserved [ 2364.076317] syz-executor.1 cpuset= [ 2364.078672] 0 pages cma reserved [ 2364.087259] syz1 [ 2364.117569] mems_allowed=0-1 [ 2364.129332] CPU: 0 PID: 20990 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2364.137261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2364.146641] Call Trace: [ 2364.149339] dump_stack+0x142/0x197 [ 2364.152994] dump_header+0x177/0x6cd [ 2364.156729] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2364.161874] ? ___ratelimit+0x55/0x537 [ 2364.165909] oom_kill_process.cold+0x10/0xadd [ 2364.170880] ? oom_unkillable_task+0x294/0x390 [ 2364.175494] ? lock_downgrade+0x740/0x740 [ 2364.179755] out_of_memory+0x2ee/0x1180 [ 2364.183750] ? lock_acquire+0x16f/0x430 [ 2364.187714] ? __lock_is_held+0xb6/0x140 [ 2364.191791] ? oom_killer_disable+0x1d0/0x1d0 [ 2364.200400] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2364.205465] __alloc_pages_slowpath+0x2251/0x2930 [ 2364.210331] ? warn_alloc+0xf0/0xf0 [ 2364.214096] ? __might_sleep+0x93/0xb0 [ 2364.218072] __alloc_pages_nodemask+0x62c/0x7a0 [ 2364.222810] ? lock_downgrade+0x740/0x740 [ 2364.226959] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2364.232062] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2364.237690] alloc_pages_current+0xec/0x1e0 [ 2364.242011] ion_page_pool_alloc+0x11f/0x1c0 [ 2364.246440] ion_system_heap_allocate+0x138/0x910 [ 2364.251366] ? ion_alloc+0x19b/0x860 [ 2364.255112] ? rcu_read_lock_sched_held+0x110/0x130 [ 2364.261124] ? ion_system_heap_free+0x250/0x250 [ 2364.265852] ion_alloc+0x222/0x860 [ 2364.269481] ? ion_dma_buf_release+0x50/0x50 [ 2364.273943] ? kasan_check_write+0x14/0x20 [ 2364.278171] ? _copy_from_user+0x99/0x110 [ 2364.282317] ion_ioctl+0x105/0x217 [ 2364.286046] ? ion_alloc.cold+0x40/0x40 [ 2364.290123] ? ion_alloc.cold+0x40/0x40 [ 2364.294102] do_vfs_ioctl+0x7ae/0x1060 [ 2364.298195] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2364.303106] ? lock_downgrade+0x740/0x740 [ 2364.307258] ? ioctl_preallocate+0x1c0/0x1c0 [ 2364.311666] ? __fget+0x237/0x370 [ 2364.315126] ? security_file_ioctl+0x89/0xb0 [ 2364.319539] SyS_ioctl+0x8f/0xc0 [ 2364.322916] ? do_vfs_ioctl+0x1060/0x1060 [ 2364.328494] do_syscall_64+0x1e8/0x640 [ 2364.332612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2364.337459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2364.342818] RIP: 0033:0x45a909 [ 2364.346000] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.353739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2364.362307] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2364.369570] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2364.376835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2364.384100] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2364.393177] Mem-Info: [ 2364.395923] active_anon:281494 inactive_anon:193 isolated_anon:0 [ 2364.395923] active_file:1516 inactive_file:5208 isolated_file:0 [ 2364.395923] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2364.395923] slab_reclaimable:14936 slab_unreclaimable:112975 [ 2364.395923] mapped:57292 shmem:379 pagetables:7960 bounce:0 [ 2364.395923] free:942812 free_pcp:1 free_cma:0 [ 2364.430900] Node 0 active_anon:1125288kB inactive_anon:760kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:1504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 641024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2364.458874] Node 0 DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.485833] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2364.491145] Node 0 DMA32 free:19392kB min:36380kB low:45472kB high:54564kB active_anon:1125288kB inactive_anon:760kB active_file:4kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15808kB pagetables:31672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.520638] lowmem_reserve[]: 0 0 0 0 0 [ 2364.524860] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2364.550460] lowmem_reserve[]: 0 0 0 0 0 [ 2364.554604] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10380kB [ 2364.569812] Node 0 DMA32: 5626*4kB (UME) 903*8kB (UME) 161*16kB (UME) 476*32kB (UM) 667*64kB (UME) 11*128kB (UM) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 93168kB [ 2364.585438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2364.596577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.605737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.614618] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2364.623713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2364.633314] 7102 total pagecache pages [ 2364.637398] 0 pages in swap cache [ 2364.641006] Swap cache stats: add 0, delete 0, find 0/0 [ 2364.646535] Free swap = 0kB [ 2364.650487] Total swap = 0kB [ 2364.653623] 1965979 pages RAM [ 2364.656849] 0 pages HighMem/MovableOnly [ 2364.661087] 335858 pages reserved [ 2364.664687] 0 pages cma reserved [ 2364.668258] Out of memory: Kill process 28935 (syz-executor.0) score 1007 or sacrifice child [ 2364.677149] Killed process 28935 (syz-executor.0) total-vm:72984kB, anon-rss:6328kB, file-rss:34688kB, shmem-rss:0kB [ 2364.697274] oom_reaper: reaped process 28935 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 2364.707609] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2364.720797] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2364.726389] CPU: 0 PID: 20990 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2364.735401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2364.744762] Call Trace: [ 2364.747363] dump_stack+0x142/0x197 [ 2364.751351] warn_alloc.cold+0x96/0x1af [ 2364.755336] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2364.760193] ? wait_for_completion+0x420/0x420 [ 2364.764788] __alloc_pages_slowpath+0x23c6/0x2930 [ 2364.769656] ? warn_alloc+0xf0/0xf0 [ 2364.773291] ? __might_sleep+0x93/0xb0 [ 2364.777180] __alloc_pages_nodemask+0x62c/0x7a0 [ 2364.781856] ? lock_downgrade+0x740/0x740 [ 2364.786003] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2364.791567] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2364.797240] alloc_pages_current+0xec/0x1e0 [ 2364.801580] ion_page_pool_alloc+0x11f/0x1c0 [ 2364.805997] ion_system_heap_allocate+0x138/0x910 [ 2364.810843] ? ion_alloc+0x19b/0x860 [ 2364.814561] ? rcu_read_lock_sched_held+0x110/0x130 [ 2364.819590] ? ion_system_heap_free+0x250/0x250 [ 2364.824272] ion_alloc+0x222/0x860 [ 2364.827821] ? ion_dma_buf_release+0x50/0x50 [ 2364.832240] ? kasan_check_write+0x14/0x20 [ 2364.836494] ? _copy_from_user+0x99/0x110 [ 2364.840653] ion_ioctl+0x105/0x217 [ 2364.844570] ? ion_alloc.cold+0x40/0x40 [ 2364.848547] ? ion_alloc.cold+0x40/0x40 [ 2364.852529] do_vfs_ioctl+0x7ae/0x1060 [ 2364.856428] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2364.861189] ? lock_downgrade+0x740/0x740 [ 2364.865347] ? ioctl_preallocate+0x1c0/0x1c0 [ 2364.869772] ? __fget+0x237/0x370 [ 2364.873223] ? security_file_ioctl+0x89/0xb0 [ 2364.878869] SyS_ioctl+0x8f/0xc0 [ 2364.882221] ? do_vfs_ioctl+0x1060/0x1060 [ 2364.886353] do_syscall_64+0x1e8/0x640 [ 2364.890223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2364.895055] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2364.900227] RIP: 0033:0x45a909 [ 2364.903397] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2364.911102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2364.918426] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2364.926911] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2364.935650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2364.942903] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2364.960554] warn_alloc_show_mem: 1 callbacks suppressed [ 2364.960557] Mem-Info: [ 2364.969238] active_anon:279385 inactive_anon:193 isolated_anon:0 [ 2364.969238] active_file:1516 inactive_file:5208 isolated_file:0 [ 2364.969238] unevictable:0 dirty:18 writeback:0 unstable:0 [ 2364.969238] slab_reclaimable:14936 slab_unreclaimable:112896 [ 2364.969238] mapped:57242 shmem:379 pagetables:7923 bounce:0 [ 2364.969238] free:949720 free_pcp:407 free_cma:0 [ 2365.003246] Node 0 active_anon:1116952kB inactive_anon:760kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:1504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 641024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2365.031494] Node 1 active_anon:588kB inactive_anon:12kB active_file:6060kB inactive_file:20816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20064kB dirty:68kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2365.059501] Node 0 DMA free:10380kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.085857] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2365.091838] Node 0 DMA32 free:47048kB min:36380kB low:45472kB high:54564kB active_anon:1116864kB inactive_anon:764kB active_file:40kB inactive_file:28kB unevictable:0kB writepending:28kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15744kB pagetables:31420kB bounce:0kB free_pcp:1040kB local_pcp:420kB free_cma:0kB [ 2365.121803] lowmem_reserve[]: 0 0 0 0 0 [ 2365.125800] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2365.151282] lowmem_reserve[]: 0 0 0 0 0 [ 2365.155292] Node 1 Normal free:3742792kB min:53508kB low:66884kB high:80260kB active_anon:564kB inactive_anon:16kB active_file:6060kB inactive_file:20844kB unevictable:0kB writepending:160kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:64kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 2365.184155] lowmem_reserve[]: 0 0 0 0 0 [ 2365.188152] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10380kB [ 2365.203119] Node 0 DMA32: 2090*4kB (UME) 959*8kB (UME) 176*16kB (UME) 67*32kB (UM) 252*64kB (UME) 11*128kB (UM) 6*256kB (U) 0*512kB 0*1024kB 4*2048kB (M) 0*4096kB = 48256kB [ 2365.218759] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2365.230089] Node 1 Normal: 80*4kB (UME) 53*8kB (UME) 33*16kB (UME) 17*32kB (UM) 11*64kB (UME) 3*128kB (UME) 1*256kB (U) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (U) 911*4096kB (UM) = 3742808kB [ 2365.247557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2365.256429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 00:39:25 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:25 executing program 4: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:25 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x0, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:25 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(0x0, 0x1) 00:39:25 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) fcntl$dupfd(r0, 0x0, r2) 00:39:25 executing program 0: r0 = open(&(0x7f0000000300)='./bus\x00', 0xc15c2, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x800002, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 2365.265039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2365.274010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2365.282625] 7124 total pagecache pages [ 2365.286509] 0 pages in swap cache [ 2365.289990] Swap cache stats: add 0, delete 0, find 0/0 [ 2365.295343] Free swap = 0kB [ 2365.298347] Total swap = 0kB [ 2365.301388] 1965979 pages RAM [ 2365.304489] 0 pages HighMem/MovableOnly [ 2365.308457] 335858 pages reserved [ 2365.311976] 0 pages cma reserved 00:39:25 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7fffffa7) keyctl$chown(0x4, 0x0, 0x0, 0x0) 00:39:25 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(0x0, 0x1) 00:39:25 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:25 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(0x0, 0x1) [ 2365.669191] audit: type=1800 audit(2365.630:380): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16773 res=0 00:39:25 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2365.833949] audit: type=1804 audit(2365.670:381): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir808142644/syzkaller.THxh3Z/1034/file0/file0" dev="sda1" ino=16773 res=1 [ 2366.382096] audit: type=1804 audit(2366.350:382): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir808142644/syzkaller.THxh3Z/1034/file0/file0" dev="sda1" ino=16773 res=1 [ 2366.419225] audit: type=1804 audit(2366.380:383): pid=21072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir808142644/syzkaller.THxh3Z/1034/file0/file0" dev="sda1" ino=16773 res=1 00:39:26 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:26 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x0) 00:39:26 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000400), &(0x7f0000000600)={'enc=', 'oaep', ' hash=', {'michael_mic\x00'}}, 0x0, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400fffff229c2053707635954fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:39:26 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:26 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") timer_getoverrun(0x0) 00:39:26 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x0) [ 2366.619742] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 00:39:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(0x0, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2366.707945] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 00:39:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000b142d2210e76616ef10931c001a0000"], 0x14}}, 0x0) 00:39:26 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x50000}]}) 00:39:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(0x0, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:26 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x0) [ 2366.884501] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2366.947882] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2366.991451] CPU: 1 PID: 21084 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2366.999411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2367.008804] Call Trace: [ 2367.011434] dump_stack+0x142/0x197 [ 2367.015078] warn_alloc.cold+0x96/0x1af [ 2367.019061] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2367.023925] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2367.029218] __alloc_pages_slowpath+0x23c6/0x2930 [ 2367.034073] ? save_trace+0x290/0x290 [ 2367.034090] ? warn_alloc+0xf0/0xf0 [ 2367.034108] ? __might_sleep+0x93/0xb0 [ 2367.041518] __alloc_pages_nodemask+0x62c/0x7a0 [ 2367.041535] ? lock_downgrade+0x740/0x740 [ 2367.041544] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2367.041558] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2367.041572] alloc_pages_current+0xec/0x1e0 [ 2367.041588] ion_page_pool_alloc+0x11f/0x1c0 [ 2367.074314] ion_system_heap_allocate+0x138/0x910 [ 2367.079205] ? ion_alloc+0x19b/0x860 [ 2367.082964] ? rcu_read_lock_sched_held+0x110/0x130 [ 2367.088000] ? ion_system_heap_free+0x250/0x250 [ 2367.092682] ion_alloc+0x222/0x860 [ 2367.096210] ? ion_dma_buf_release+0x50/0x50 [ 2367.100613] ? kasan_check_write+0x14/0x20 [ 2367.104849] ? _copy_from_user+0x99/0x110 [ 2367.108983] ion_ioctl+0x105/0x217 [ 2367.112510] ? ion_alloc.cold+0x40/0x40 [ 2367.116477] ? ion_alloc.cold+0x40/0x40 [ 2367.120435] do_vfs_ioctl+0x7ae/0x1060 [ 2367.124328] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2367.129079] ? lock_downgrade+0x740/0x740 [ 2367.133210] ? ioctl_preallocate+0x1c0/0x1c0 [ 2367.137602] ? __fget+0x237/0x370 [ 2367.141045] ? security_file_ioctl+0x89/0xb0 [ 2367.145437] SyS_ioctl+0x8f/0xc0 [ 2367.148786] ? do_vfs_ioctl+0x1060/0x1060 [ 2367.152917] do_syscall_64+0x1e8/0x640 [ 2367.156801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2367.161637] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2367.166809] RIP: 0033:0x45a909 [ 2367.170327] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2367.178021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2367.185273] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2367.192533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2367.199802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2367.207058] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2367.257929] Mem-Info: [ 2367.260613] active_anon:279935 inactive_anon:192 isolated_anon:0 [ 2367.260613] active_file:1536 inactive_file:5258 isolated_file:0 [ 2367.260613] unevictable:0 dirty:153 writeback:0 unstable:0 [ 2367.260613] slab_reclaimable:14868 slab_unreclaimable:113263 [ 2367.260613] mapped:57323 shmem:379 pagetables:7936 bounce:0 [ 2367.260613] free:944410 free_pcp:262 free_cma:0 [ 2367.302029] Node 0 active_anon:1119148kB inactive_anon:768kB active_file:72kB inactive_file:184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208920kB dirty:64kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2367.330580] Node 0 DMA free:10524kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2367.369555] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2367.374697] Node 0 DMA32 free:205424kB min:36380kB low:45472kB high:54564kB active_anon:1119148kB inactive_anon:768kB active_file:72kB inactive_file:184kB unevictable:0kB writepending:64kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15808kB pagetables:31384kB bounce:0kB free_pcp:1288kB local_pcp:596kB free_cma:0kB [ 2367.408249] lowmem_reserve[]: 0 0 0 0 0 [ 2367.412428] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2367.438386] lowmem_reserve[]: 0 0 0 0 0 [ 2367.442530] Node 0 DMA: 7*4kB (UE) 4*8kB (UE) 4*16kB (UE) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10524kB [ 2367.458017] Node 0 DMA32: 8044*4kB (UME) 7497*8kB (UME) 3482*16kB (UME) 1728*32kB (UM) 12*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 205976kB [ 2367.473151] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2367.484327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2367.493426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2367.502281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2367.511499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2367.520263] 7172 total pagecache pages [ 2367.524215] 0 pages in swap cache [ 2367.527737] Swap cache stats: add 0, delete 0, find 0/0 [ 2367.533240] Free swap = 0kB [ 2367.536315] Total swap = 0kB [ 2367.539394] 1965979 pages RAM [ 2367.543046] 0 pages HighMem/MovableOnly [ 2367.547069] 335858 pages reserved [ 2367.550639] 0 pages cma reserved 00:39:27 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:27 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:27 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(0x0, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:27 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:27 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd0, 0x181980) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x9, 0x2, 0x1}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000300)='unconfined_u:\xf3ystem_r:insmod_\x89$s0-s0:c0.c1023\x00bj*\x98\x1c\xc0L\t\x1e\xd6\x82\xc7\xa6\x81mW\x8dN\x97}\x88\x9d\xf307!\x04|=9\x82\xb5\xc8*\xe8\xffv5\xca\r\xff\x8e\xb5\x82\xf60\x901\b\xd8V\xe9\xbc\xd6S)\xf8@R\xda>\x1d\xaf\x05\xbd\xfc! \x9a\xf3\x99\x06\xa98\xe2\xc6U\xeb\xe0e\xd0\xd6\xec\x03a\x8a\xf2C\xf4\x13\xd7Q\xb5\xb0O\x81\x94\x1f\x92\xaf\xab7\x89X\x190x{\x0f\xe3\xeb\x15\xec\xdc\x8b\xa2\x9b\xf4\x90\xf7\xf9\bmHh\x90(\x1c\xe1\":\x92\xaa\x99', 0xb4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0x800, 0x9, r3, 0x0, 0xee00, 0x0, 0x7ff, 0xffffffff}) r4 = syz_open_procfs(r3, &(0x7f0000000100)='fd/4\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r4, &(0x7f0000000180)="8fa01dfdff11a56b9ca6859d9f936e64ed442d43c4abe05ac15daf4cbd8353d4fa658bbe589f2b123dcc24902621eec959140ce3d9e7200adf412ce0c645815975f0c78f2a28127a1d5a002d55181d8c21fdd7c803cf9672a71f008d69c72e971b9dd2ef731a485804357687705b9d6dd1d6a317ce58e3f07f0380cbef97126f39bef66d2ec9b1ca8adc213fb1", 0x0, 0xa}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x9}}}}, 0x30}}, 0x0) 00:39:27 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:27 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:27 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2367.773030] SELinux: Context unconfined_u:óystem_r:insmod_‰$s0-s0:c0.c1023 is not valid (left unmapped). 00:39:27 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd0, 0x181980) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x9, 0x2, 0x1}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000300)='unconfined_u:\xf3ystem_r:insmod_\x89$s0-s0:c0.c1023\x00bj*\x98\x1c\xc0L\t\x1e\xd6\x82\xc7\xa6\x81mW\x8dN\x97}\x88\x9d\xf307!\x04|=9\x82\xb5\xc8*\xe8\xffv5\xca\r\xff\x8e\xb5\x82\xf60\x901\b\xd8V\xe9\xbc\xd6S)\xf8@R\xda>\x1d\xaf\x05\xbd\xfc! \x9a\xf3\x99\x06\xa98\xe2\xc6U\xeb\xe0e\xd0\xd6\xec\x03a\x8a\xf2C\xf4\x13\xd7Q\xb5\xb0O\x81\x94\x1f\x92\xaf\xab7\x89X\x190x{\x0f\xe3\xeb\x15\xec\xdc\x8b\xa2\x9b\xf4\x90\xf7\xf9\bmHh\x90(\x1c\xe1\":\x92\xaa\x99', 0xb4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0x800, 0x9, r3, 0x0, 0xee00, 0x0, 0x7ff, 0xffffffff}) r4 = syz_open_procfs(r3, &(0x7f0000000100)='fd/4\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r4, &(0x7f0000000180)="8fa01dfdff11a56b9ca6859d9f936e64ed442d43c4abe05ac15daf4cbd8353d4fa658bbe589f2b123dcc24902621eec959140ce3d9e7200adf412ce0c645815975f0c78f2a28127a1d5a002d55181d8c21fdd7c803cf9672a71f008d69c72e971b9dd2ef731a485804357687705b9d6dd1d6a317ce58e3f07f0380cbef97126f39bef66d2ec9b1ca8adc213fb1", 0x0, 0xa}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x9}}}}, 0x30}}, 0x0) 00:39:27 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:27 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2368.352936] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2368.364700] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2368.370408] CPU: 0 PID: 21141 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2368.377309] syz-executor.0: [ 2368.378306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2368.378310] Call Trace: [ 2368.378325] dump_stack+0x142/0x197 [ 2368.378340] warn_alloc.cold+0x96/0x1af [ 2368.381432] page allocation failure: order:4 [ 2368.390712] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2368.390733] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2368.390747] __alloc_pages_slowpath+0x23c6/0x2930 [ 2368.390767] ? save_trace+0x290/0x290 [ 2368.390783] ? warn_alloc+0xf0/0xf0 [ 2368.390800] ? __might_sleep+0x93/0xb0 [ 2368.390810] __alloc_pages_nodemask+0x62c/0x7a0 [ 2368.390821] ? lock_downgrade+0x740/0x740 [ 2368.390831] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2368.390844] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2368.390857] alloc_pages_current+0xec/0x1e0 [ 2368.390872] ion_page_pool_alloc+0x11f/0x1c0 [ 2368.390883] ion_system_heap_allocate+0x138/0x910 [ 2368.390891] ? ion_alloc+0x19b/0x860 [ 2368.390901] ? rcu_read_lock_sched_held+0x110/0x130 [ 2368.390911] ? ion_system_heap_free+0x250/0x250 [ 2368.390926] ion_alloc+0x222/0x860 [ 2368.397467] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2368.401075] ? ion_dma_buf_release+0x50/0x50 [ 2368.401091] ? kasan_check_write+0x14/0x20 [ 2368.401102] ? _copy_from_user+0x99/0x110 [ 2368.401113] ion_ioctl+0x105/0x217 [ 2368.401124] ? ion_alloc.cold+0x40/0x40 [ 2368.405556] 0 [ 2368.410382] ? ion_alloc.cold+0x40/0x40 [ 2368.410394] do_vfs_ioctl+0x7ae/0x1060 [ 2368.410406] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2368.410416] ? lock_downgrade+0x740/0x740 [ 2368.410426] ? ioctl_preallocate+0x1c0/0x1c0 [ 2368.410437] ? __fget+0x237/0x370 [ 2368.410452] ? security_file_ioctl+0x89/0xb0 [ 2368.410464] SyS_ioctl+0x8f/0xc0 [ 2368.410474] ? do_vfs_ioctl+0x1060/0x1060 [ 2368.410487] do_syscall_64+0x1e8/0x640 [ 2368.410495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2368.410512] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2368.410519] RIP: 0033:0x45a909 [ 2368.410523] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.410532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2368.410538] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2368.410545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2368.419845] syz-executor.0 cpuset= [ 2368.420629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2368.420635] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2368.422279] Mem-Info: [ 2368.424483] syz0 [ 2368.428224] active_anon:279947 inactive_anon:194 isolated_anon:0 [ 2368.428224] active_file:1537 inactive_file:5294 isolated_file:0 [ 2368.428224] unevictable:0 dirty:178 writeback:0 unstable:0 [ 2368.428224] slab_reclaimable:14847 slab_unreclaimable:113175 [ 2368.428224] mapped:57361 shmem:379 pagetables:7938 bounce:0 [ 2368.428224] free:954825 free_pcp:33 free_cma:0 [ 2368.435493] mems_allowed=0-1 [ 2368.437105] Node 0 active_anon:1119308kB inactive_anon:776kB active_file:76kB inactive_file:328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208920kB dirty:100kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2368.441762] CPU: 1 PID: 21125 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2368.446334] Node 0 [ 2368.451659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2368.451663] Call Trace: [ 2368.451681] dump_stack+0x142/0x197 [ 2368.451697] warn_alloc.cold+0x96/0x1af [ 2368.451706] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2368.451723] ? __alloc_pages_direct_compact+0x290/0x380 [ 2368.451735] __alloc_pages_slowpath+0x23c6/0x2930 [ 2368.451751] ? save_trace+0x290/0x290 [ 2368.451764] ? warn_alloc+0xf0/0xf0 [ 2368.456234] DMA free:10524kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2368.460478] ? __might_sleep+0x93/0xb0 [ 2368.460492] __alloc_pages_nodemask+0x62c/0x7a0 [ 2368.460504] ? lock_downgrade+0x740/0x740 [ 2368.460514] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2368.460529] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2368.465444] lowmem_reserve[]: [ 2368.469575] alloc_pages_current+0xec/0x1e0 [ 2368.469592] ion_page_pool_alloc+0x11f/0x1c0 [ 2368.469603] ion_system_heap_allocate+0x138/0x910 [ 2368.469612] ? ion_alloc+0x19b/0x860 [ 2368.469624] ? rcu_read_lock_sched_held+0x110/0x130 [ 2368.474706] 0 [ 2368.479274] ? ion_system_heap_free+0x250/0x250 [ 2368.479289] ion_alloc+0x222/0x860 [ 2368.479305] ? ion_dma_buf_release+0x50/0x50 [ 2368.479320] ? kasan_check_write+0x14/0x20 [ 2368.482963] 2569 [ 2368.489936] ? _copy_from_user+0x99/0x110 [ 2368.489948] ion_ioctl+0x105/0x217 [ 2368.489959] ? ion_alloc.cold+0x40/0x40 [ 2368.489974] ? ion_alloc.cold+0x40/0x40 [ 2368.489986] do_vfs_ioctl+0x7ae/0x1060 [ 2368.489999] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2368.494475] 2569 [ 2368.498604] ? lock_downgrade+0x740/0x740 [ 2368.498616] ? ioctl_preallocate+0x1c0/0x1c0 [ 2368.498629] ? __fget+0x237/0x370 [ 2368.498646] ? security_file_ioctl+0x89/0xb0 [ 2368.502887] 2569 [ 2368.506301] SyS_ioctl+0x8f/0xc0 [ 2368.506312] ? do_vfs_ioctl+0x1060/0x1060 [ 2368.506325] do_syscall_64+0x1e8/0x640 [ 2368.506332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2368.506348] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2368.510393] 2569 [ 2368.512004] RIP: 0033:0x45a909 [ 2368.512009] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.512020] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2368.512026] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2368.512031] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2368.512037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2368.512041] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff 00:39:28 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd0, 0x181980) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x9, 0x2, 0x1}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000300)='unconfined_u:\xf3ystem_r:insmod_\x89$s0-s0:c0.c1023\x00bj*\x98\x1c\xc0L\t\x1e\xd6\x82\xc7\xa6\x81mW\x8dN\x97}\x88\x9d\xf307!\x04|=9\x82\xb5\xc8*\xe8\xffv5\xca\r\xff\x8e\xb5\x82\xf60\x901\b\xd8V\xe9\xbc\xd6S)\xf8@R\xda>\x1d\xaf\x05\xbd\xfc! \x9a\xf3\x99\x06\xa98\xe2\xc6U\xeb\xe0e\xd0\xd6\xec\x03a\x8a\xf2C\xf4\x13\xd7Q\xb5\xb0O\x81\x94\x1f\x92\xaf\xab7\x89X\x190x{\x0f\xe3\xeb\x15\xec\xdc\x8b\xa2\x9b\xf4\x90\xf7\xf9\bmHh\x90(\x1c\xe1\":\x92\xaa\x99', 0xb4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0x800, 0x9, r3, 0x0, 0xee00, 0x0, 0x7ff, 0xffffffff}) r4 = syz_open_procfs(r3, &(0x7f0000000100)='fd/4\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r4, &(0x7f0000000180)="8fa01dfdff11a56b9ca6859d9f936e64ed442d43c4abe05ac15daf4cbd8353d4fa658bbe589f2b123dcc24902621eec959140ce3d9e7200adf412ce0c645815975f0c78f2a28127a1d5a002d55181d8c21fdd7c803cf9672a71f008d69c72e971b9dd2ef731a485804357687705b9d6dd1d6a317ce58e3f07f0380cbef97126f39bef66d2ec9b1ca8adc213fb1", 0x0, 0xa}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x9}}}}, 0x30}}, 0x0) 00:39:28 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:28 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:28 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2368.951562] Node 0 DMA32 free:37252kB min:36380kB low:45472kB high:54564kB active_anon:1119232kB inactive_anon:772kB active_file:156kB inactive_file:128kB unevictable:0kB writepending:0kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15776kB pagetables:31600kB bounce:0kB free_pcp:800kB local_pcp:688kB free_cma:0kB [ 2368.991020] lowmem_reserve[]: 0 0 0 0 0 [ 2369.002520] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:39:29 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2369.082008] lowmem_reserve[]: 0 0 0 0 0 [ 2369.097640] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 4*16kB (UE) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10484kB 00:39:29 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2369.153030] Node 0 DMA32: 1648*4kB (ME) 838*8kB (UME) 194*16kB (UME) 628*32kB (UM) 1022*64kB (U) 323*128kB (U) 14*256kB (U) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 155024kB [ 2369.229771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2369.284907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2369.319430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2369.338120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2369.355007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2369.367453] 7189 total pagecache pages [ 2369.374228] 0 pages in swap cache [ 2369.377745] Swap cache stats: add 0, delete 0, find 0/0 [ 2369.385212] Free swap = 0kB [ 2369.388665] Total swap = 0kB [ 2369.395188] 1965979 pages RAM [ 2369.398363] 0 pages HighMem/MovableOnly [ 2369.404969] 335858 pages reserved [ 2369.408479] 0 pages cma reserved 00:39:29 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:29 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:29 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:29 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2369.797284] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2369.809330] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2369.809452] syz-executor.0 cpuset= [ 2369.824630] syz-executor.1 cpuset= [ 2369.827303] syz0 mems_allowed=0-1 [ 2369.836015] CPU: 1 PID: 21168 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2369.836431] syz1 [ 2369.843892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2369.850643] mems_allowed=0-1 [ 2369.855200] Call Trace: [ 2369.855217] dump_stack+0x142/0x197 [ 2369.855232] warn_alloc.cold+0x96/0x1af [ 2369.868530] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2369.873370] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2369.878638] __alloc_pages_slowpath+0x23c6/0x2930 [ 2369.883474] ? save_trace+0x290/0x290 [ 2369.887262] ? warn_alloc+0xf0/0xf0 [ 2369.890882] ? __might_sleep+0x93/0xb0 [ 2369.894764] __alloc_pages_nodemask+0x62c/0x7a0 [ 2369.899416] ? lock_downgrade+0x740/0x740 [ 2369.903556] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2369.908563] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2369.914178] alloc_pages_current+0xec/0x1e0 [ 2369.918486] ion_page_pool_alloc+0x11f/0x1c0 [ 2369.922887] ion_system_heap_allocate+0x138/0x910 [ 2369.927712] ? ion_alloc+0x19b/0x860 [ 2369.931410] ? rcu_read_lock_sched_held+0x110/0x130 [ 2369.936419] ? ion_system_heap_free+0x250/0x250 [ 2369.941087] ion_alloc+0x222/0x860 [ 2369.944617] ? ion_dma_buf_release+0x50/0x50 [ 2369.949011] ? kasan_check_write+0x14/0x20 [ 2369.953247] ? _copy_from_user+0x99/0x110 [ 2369.957379] ion_ioctl+0x105/0x217 [ 2369.960906] ? ion_alloc.cold+0x40/0x40 [ 2369.964875] ? ion_alloc.cold+0x40/0x40 [ 2369.968979] do_vfs_ioctl+0x7ae/0x1060 [ 2369.972877] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2369.977639] ? lock_downgrade+0x740/0x740 [ 2369.981790] ? ioctl_preallocate+0x1c0/0x1c0 [ 2369.986202] ? __fget+0x237/0x370 [ 2369.989649] ? security_file_ioctl+0x89/0xb0 [ 2369.994048] SyS_ioctl+0x8f/0xc0 [ 2369.997405] ? do_vfs_ioctl+0x1060/0x1060 [ 2370.001542] do_syscall_64+0x1e8/0x640 [ 2370.005414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2370.010257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2370.015440] RIP: 0033:0x45a909 [ 2370.018617] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.026315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2370.033566] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2370.040825] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2370.048078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2370.055342] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2370.062639] CPU: 0 PID: 21189 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2370.070532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2370.070537] Call Trace: [ 2370.070552] dump_stack+0x142/0x197 [ 2370.070566] warn_alloc.cold+0x96/0x1af [ 2370.070574] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2370.070593] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2370.070605] __alloc_pages_slowpath+0x23c6/0x2930 [ 2370.095053] ? save_trace+0x290/0x290 [ 2370.095073] ? warn_alloc+0xf0/0xf0 [ 2370.095094] ? __might_sleep+0x93/0xb0 [ 2370.105083] warn_alloc_show_mem: 1 callbacks suppressed [ 2370.105086] Mem-Info: [ 2370.105214] __alloc_pages_nodemask+0x62c/0x7a0 [ 2370.109174] active_anon:279407 inactive_anon:195 isolated_anon:0 [ 2370.109174] active_file:1532 inactive_file:5273 isolated_file:0 [ 2370.109174] unevictable:0 dirty:107 writeback:0 unstable:0 [ 2370.109174] slab_reclaimable:14808 slab_unreclaimable:113161 [ 2370.109174] mapped:57346 shmem:379 pagetables:7928 bounce:0 [ 2370.109174] free:884581 free_pcp:77 free_cma:0 [ 2370.112612] ? lock_downgrade+0x740/0x740 [ 2370.112622] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2370.112635] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2370.112650] alloc_pages_current+0xec/0x1e0 [ 2370.112666] ion_page_pool_alloc+0x11f/0x1c0 [ 2370.112677] ion_system_heap_allocate+0x138/0x910 [ 2370.112687] ? ion_alloc+0x19b/0x860 [ 2370.112698] ? rcu_read_lock_sched_held+0x110/0x130 [ 2370.112709] ? ion_system_heap_free+0x250/0x250 [ 2370.112721] ion_alloc+0x222/0x860 [ 2370.123667] Node 0 active_anon:1117012kB inactive_anon:780kB active_file:44kB inactive_file:232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208936kB dirty:44kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2370.124386] ? ion_dma_buf_release+0x50/0x50 [ 2370.129192] Node 0 [ 2370.162710] ? kasan_check_write+0x14/0x20 [ 2370.162722] ? _copy_from_user+0x99/0x110 [ 2370.162734] ion_ioctl+0x105/0x217 [ 2370.162744] ? ion_alloc.cold+0x40/0x40 [ 2370.162757] ? ion_alloc.cold+0x40/0x40 [ 2370.162766] do_vfs_ioctl+0x7ae/0x1060 [ 2370.162777] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2370.162786] ? lock_downgrade+0x740/0x740 [ 2370.162796] ? ioctl_preallocate+0x1c0/0x1c0 [ 2370.162808] ? __fget+0x237/0x370 [ 2370.162825] ? security_file_ioctl+0x89/0xb0 [ 2370.162838] SyS_ioctl+0x8f/0xc0 [ 2370.162848] ? do_vfs_ioctl+0x1060/0x1060 [ 2370.162861] do_syscall_64+0x1e8/0x640 [ 2370.162870] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2370.162889] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2370.162897] RIP: 0033:0x45a909 [ 2370.162903] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.162914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2370.162920] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2370.162926] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2370.162932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2370.162938] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2370.281786] DMA free:10524kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2370.290906] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2370.391687] Node 0 DMA32 free:138480kB min:36380kB low:45472kB high:54564kB active_anon:1116904kB inactive_anon:772kB active_file:44kB inactive_file:232kB unevictable:0kB writepending:44kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15712kB pagetables:31372kB bounce:0kB free_pcp:620kB local_pcp:96kB free_cma:0kB [ 2370.421962] lowmem_reserve[]: 0 0 0 0 0 [ 2370.426063] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2370.451989] lowmem_reserve[]: 0 0 0 0 0 [ 2370.456072] Node 0 DMA: 7*4kB (UE) 4*8kB (UE) 4*16kB (UE) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10524kB [ 2370.472022] Node 0 DMA32: 2580*4kB (ME) 2385*8kB (UME) 3583*16kB (UME) 1554*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 138504kB [ 2370.486754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2370.498840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2370.507882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2370.516951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2370.525947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2370.534998] 7186 total pagecache pages [ 2370.538947] 0 pages in swap cache [ 2370.542756] Swap cache stats: add 0, delete 0, find 0/0 [ 2370.548196] Free swap = 0kB [ 2370.551426] Total swap = 0kB [ 2370.554502] 1965979 pages RAM [ 2370.557657] 0 pages HighMem/MovableOnly [ 2370.561736] 335858 pages reserved [ 2370.565220] 0 pages cma reserved 00:39:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:30 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:30 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:30 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:30 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:30 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:30 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:30 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:30 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:30 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:30 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:30 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:31 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:31 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:31 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:31 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:31 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:31 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:31 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2371.246210] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2371.266414] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2371.282375] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2371.288046] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2371.297632] CPU: 0 PID: 21245 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2371.306091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2371.316179] Call Trace: [ 2371.318801] dump_stack+0x142/0x197 [ 2371.322457] warn_alloc.cold+0x96/0x1af [ 2371.326456] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2371.331324] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2371.336635] __alloc_pages_slowpath+0x23c6/0x2930 [ 2371.341504] ? save_trace+0x290/0x290 [ 2371.345340] ? warn_alloc+0xf0/0xf0 [ 2371.349011] ? __might_sleep+0x93/0xb0 [ 2371.353015] __alloc_pages_nodemask+0x62c/0x7a0 [ 2371.357717] ? lock_downgrade+0x740/0x740 [ 2371.361889] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2371.366929] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2371.372600] alloc_pages_current+0xec/0x1e0 [ 2371.376959] ion_page_pool_alloc+0x11f/0x1c0 [ 2371.381382] ion_system_heap_allocate+0x138/0x910 [ 2371.386235] ? ion_alloc+0x19b/0x860 [ 2371.389964] ? rcu_read_lock_sched_held+0x110/0x130 [ 2371.394998] ? ion_system_heap_free+0x250/0x250 [ 2371.399653] ion_alloc+0x222/0x860 [ 2371.403183] ? ion_dma_buf_release+0x50/0x50 [ 2371.407578] ? kasan_check_write+0x14/0x20 [ 2371.411798] ? _copy_from_user+0x99/0x110 [ 2371.415928] ion_ioctl+0x105/0x217 [ 2371.419469] ? ion_alloc.cold+0x40/0x40 [ 2371.423452] ? ion_alloc.cold+0x40/0x40 [ 2371.427414] do_vfs_ioctl+0x7ae/0x1060 [ 2371.431284] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2371.436039] ? lock_downgrade+0x740/0x740 [ 2371.440209] ? ioctl_preallocate+0x1c0/0x1c0 [ 2371.444614] ? __fget+0x237/0x370 [ 2371.448061] ? security_file_ioctl+0x89/0xb0 [ 2371.452495] SyS_ioctl+0x8f/0xc0 [ 2371.455882] ? do_vfs_ioctl+0x1060/0x1060 [ 2371.460027] do_syscall_64+0x1e8/0x640 [ 2371.463918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2371.468763] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2371.473947] RIP: 0033:0x45a909 [ 2371.477123] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.484822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2371.492082] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2371.499347] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2371.506616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2371.513880] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2371.523189] warn_alloc_show_mem: 1 callbacks suppressed [ 2371.523193] Mem-Info: [ 2371.531763] active_anon:279431 inactive_anon:192 isolated_anon:0 [ 2371.531763] active_file:1546 inactive_file:5271 isolated_file:0 [ 2371.531763] unevictable:0 dirty:129 writeback:0 unstable:0 [ 2371.531763] slab_reclaimable:14783 slab_unreclaimable:113297 [ 2371.531763] mapped:57331 shmem:379 pagetables:7951 bounce:0 [ 2371.531763] free:876438 free_pcp:158 free_cma:0 [ 2371.565660] Node 0 active_anon:1117256kB inactive_anon:768kB active_file:44kB inactive_file:280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208936kB dirty:80kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 632832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2371.565667] Node 0 DMA free:10524kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2371.565688] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2371.565708] Node 0 DMA32 free:197244kB min:36380kB low:45472kB high:54564kB active_anon:1117256kB inactive_anon:768kB active_file:44kB inactive_file:280kB unevictable:0kB writepending:80kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15968kB pagetables:31740kB bounce:0kB free_pcp:632kB local_pcp:116kB free_cma:0kB [ 2371.565731] lowmem_reserve[]: 0 0 0 0 0 [ 2371.565753] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2371.565773] lowmem_reserve[]: 0 0 0 0 0 [ 2371.565795] Node 0 DMA: 7*4kB (UE) 4*8kB (UE) 4*16kB (UE) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10524kB [ 2371.565882] Node 0 DMA32: 8093*4kB (UME) 7620*8kB (UME) 3372*16kB (UME) 1558*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 197140kB [ 2371.565939] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 2371.625990] CPU: 1 PID: 21221 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2371.655846] 0*32kB [ 2371.658676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2371.658681] Call Trace: [ 2371.658697] dump_stack+0x142/0x197 [ 2371.658712] warn_alloc.cold+0x96/0x1af [ 2371.684040] 0*64kB [ 2371.687914] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2371.703018] 0*128kB [ 2371.717013] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2371.717026] __alloc_pages_slowpath+0x23c6/0x2930 [ 2371.721597] 0*256kB [ 2371.729476] ? save_trace+0x290/0x290 [ 2371.731704] 0*512kB [ 2371.741050] ? warn_alloc+0xf0/0xf0 [ 2371.741070] ? __might_sleep+0x93/0xb0 [ 2371.743624] 0*1024kB [ 2371.747233] __alloc_pages_nodemask+0x62c/0x7a0 [ 2371.751212] 0*2048kB [ 2371.753431] ? lock_downgrade+0x740/0x740 [ 2371.758252] 0*4096kB [ 2371.760568] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2371.760583] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2371.760598] alloc_pages_current+0xec/0x1e0 [ 2371.766186] = 0kB [ 2371.766197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2371.771023] ion_page_pool_alloc+0x11f/0x1c0 [ 2371.771034] ion_system_heap_allocate+0x138/0x910 [ 2371.773334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2371.777114] ? ion_alloc+0x19b/0x860 [ 2371.779434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2371.783177] ? rcu_read_lock_sched_held+0x110/0x130 [ 2371.783191] ? ion_system_heap_free+0x250/0x250 [ 2371.783204] ion_alloc+0x222/0x860 [ 2371.783219] ? ion_dma_buf_release+0x50/0x50 [ 2371.783235] ? kasan_check_write+0x14/0x20 [ 2371.787112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2371.789515] ? _copy_from_user+0x99/0x110 [ 2371.789528] ion_ioctl+0x105/0x217 [ 2371.789538] ? ion_alloc.cold+0x40/0x40 [ 2371.789552] ? ion_alloc.cold+0x40/0x40 [ 2371.789565] do_vfs_ioctl+0x7ae/0x1060 [ 2371.794227] 7195 total pagecache pages [ 2371.796640] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2371.800815] 0 pages in swap cache [ 2371.803155] ? lock_downgrade+0x740/0x740 [ 2371.808144] Swap cache stats: add 0, delete 0, find 0/0 [ 2371.813753] ? ioctl_preallocate+0x1c0/0x1c0 [ 2371.813765] ? __fget+0x237/0x370 [ 2371.813780] ? security_file_ioctl+0x89/0xb0 [ 2371.818069] Free swap = 0kB [ 2371.820122] SyS_ioctl+0x8f/0xc0 [ 2371.820132] ? do_vfs_ioctl+0x1060/0x1060 [ 2371.820144] do_syscall_64+0x1e8/0x640 [ 2371.828949] Total swap = 0kB [ 2371.828957] 1965979 pages RAM [ 2371.833345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2371.833363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2371.833371] RIP: 0033:0x45a909 [ 2371.838276] 0 pages HighMem/MovableOnly [ 2371.846851] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.846862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2371.846867] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2371.846871] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2371.846876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2371.846881] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2371.992501] 335858 pages reserved [ 2372.034820] 0 pages cma reserved 00:39:32 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:32 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:32 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 0: write$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6#\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x703}) fchdir(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x7, &(0x7f0000000040)={@remote}, 0x14) 00:39:32 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:32 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:32 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:32 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, 0x0) 00:39:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 00:39:32 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, 0x0) 00:39:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:32 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:33 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:33 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:33 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:33 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, 0x0) 00:39:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:33 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:33 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000c0050ff", 0x2e}], 0x1}, 0x0) 00:39:33 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:33 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:33 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) renameat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='./file0\x00') 00:39:33 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2373.714538] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2373.755412] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2373.784912] CPU: 1 PID: 21337 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2373.792889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2373.802299] Call Trace: [ 2373.804916] dump_stack+0x142/0x197 [ 2373.808572] warn_alloc.cold+0x96/0x1af [ 2373.812542] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2373.817637] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2373.822900] __alloc_pages_slowpath+0x23c6/0x2930 [ 2373.827736] ? save_trace+0x290/0x290 [ 2373.831527] ? warn_alloc+0xf0/0xf0 [ 2373.835178] ? __might_sleep+0x93/0xb0 [ 2373.839052] __alloc_pages_nodemask+0x62c/0x7a0 [ 2373.843726] ? lock_downgrade+0x740/0x740 [ 2373.847869] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2373.852873] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2373.858490] alloc_pages_current+0xec/0x1e0 [ 2373.862807] ion_page_pool_alloc+0x11f/0x1c0 [ 2373.867198] ion_system_heap_allocate+0x138/0x910 [ 2373.872027] ? ion_alloc+0x19b/0x860 [ 2373.875725] ? rcu_read_lock_sched_held+0x110/0x130 [ 2373.880738] ? ion_system_heap_free+0x250/0x250 [ 2373.885391] ion_alloc+0x222/0x860 [ 2373.888917] ? ion_dma_buf_release+0x50/0x50 [ 2373.893312] ? kasan_check_write+0x14/0x20 [ 2373.897542] ? _copy_from_user+0x99/0x110 [ 2373.901677] ion_ioctl+0x105/0x217 [ 2373.905201] ? ion_alloc.cold+0x40/0x40 [ 2373.909172] ? ion_alloc.cold+0x40/0x40 [ 2373.913150] do_vfs_ioctl+0x7ae/0x1060 [ 2373.917028] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2373.921769] ? lock_downgrade+0x740/0x740 [ 2373.925901] ? ioctl_preallocate+0x1c0/0x1c0 [ 2373.930295] ? __fget+0x237/0x370 [ 2373.933738] ? security_file_ioctl+0x89/0xb0 [ 2373.938131] SyS_ioctl+0x8f/0xc0 [ 2373.941504] ? do_vfs_ioctl+0x1060/0x1060 [ 2373.945674] do_syscall_64+0x1e8/0x640 [ 2373.949577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2373.954421] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2373.959600] RIP: 0033:0x45a909 [ 2373.962785] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2373.970476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2373.977747] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2373.985087] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2373.992341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2373.999605] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2374.042900] warn_alloc_show_mem: 1 callbacks suppressed [ 2374.042904] Mem-Info: [ 2374.063464] active_anon:280481 inactive_anon:194 isolated_anon:0 [ 2374.063464] active_file:1570 inactive_file:5296 isolated_file:0 [ 2374.063464] unevictable:0 dirty:167 writeback:0 unstable:0 [ 2374.063464] slab_reclaimable:14737 slab_unreclaimable:113429 [ 2374.063464] mapped:57357 shmem:379 pagetables:7967 bounce:0 [ 2374.063464] free:867981 free_pcp:224 free_cma:0 [ 2374.113403] Node 0 active_anon:1121368kB inactive_anon:768kB active_file:80kB inactive_file:372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208964kB dirty:172kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 636928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2374.145321] Node 0 DMA free:10540kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2374.175781] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2374.180964] Node 0 DMA32 free:195580kB min:36380kB low:45472kB high:54564kB active_anon:1121368kB inactive_anon:768kB active_file:80kB inactive_file:372kB unevictable:0kB writepending:172kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15904kB pagetables:31696kB bounce:0kB free_pcp:1156kB local_pcp:492kB free_cma:0kB [ 2374.216249] lowmem_reserve[]: 0 0 0 0 0 [ 2374.220429] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2374.257152] lowmem_reserve[]: 0 0 0 0 0 [ 2374.262268] Node 0 DMA: 7*4kB (UE) 4*8kB (UE) 5*16kB (UE) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10540kB [ 2374.277801] Node 0 DMA32: 8108*4kB (UME) 7505*8kB (UME) 3309*16kB (UME) 1592*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 198472kB [ 2374.293113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2374.304318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2374.313398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2374.322204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2374.331256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2374.340067] 7227 total pagecache pages [ 2374.344023] 0 pages in swap cache [ 2374.347547] Swap cache stats: add 0, delete 0, find 0/0 [ 2374.353119] Free swap = 0kB [ 2374.356220] Total swap = 0kB [ 2374.359330] 1965979 pages RAM [ 2374.362624] 0 pages HighMem/MovableOnly [ 2374.366702] 335858 pages reserved [ 2374.370288] 0 pages cma reserved 00:39:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, 0x0) 00:39:34 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:34 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:34 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) renameat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='./file0\x00') 00:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, 0x0) 00:39:34 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:34 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, 0x0) 00:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:34 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:34 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:35 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:39:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:35 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) mkdir(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) renameat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000003c0)='./file0\x00') 00:39:35 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:35 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:35 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:35 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:35 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='2'], 0x1) lseek(r0, 0x0, 0x3) 00:39:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:35 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:35 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:35 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="32b1d4832b330b420a52d82d132fd768043e4bf0519baee467b31380"], 0x1c) lseek(r0, 0x0, 0x3) 00:39:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x1) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000400)={0x0, 0x0, 0xc0000}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') dup2(r6, r5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x12, 0x1a6273f2b2e289f7, 0x0) socket(0x10, 0x0, 0x4) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) 00:39:36 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:36 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) 00:39:36 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 00:39:36 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='2'], 0x1) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) lseek(r0, 0x0, 0x3) 00:39:36 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) 00:39:36 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:36 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 00:39:36 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) [ 2376.862910] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2376.953866] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2376.992149] CPU: 1 PID: 21494 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2377.000073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2377.000078] Call Trace: [ 2377.000092] dump_stack+0x142/0x197 [ 2377.000107] warn_alloc.cold+0x96/0x1af [ 2377.000115] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2377.000132] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2377.000144] __alloc_pages_slowpath+0x23c6/0x2930 [ 2377.000163] ? save_trace+0x290/0x290 [ 2377.000177] ? warn_alloc+0xf0/0xf0 [ 2377.000195] ? __might_sleep+0x93/0xb0 [ 2377.000207] __alloc_pages_nodemask+0x62c/0x7a0 [ 2377.000217] ? lock_downgrade+0x740/0x740 [ 2377.000227] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2377.000242] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2377.000256] alloc_pages_current+0xec/0x1e0 [ 2377.000270] ion_page_pool_alloc+0x11f/0x1c0 [ 2377.042112] ion_system_heap_allocate+0x138/0x910 [ 2377.042123] ? ion_alloc+0x19b/0x860 [ 2377.042133] ? rcu_read_lock_sched_held+0x110/0x130 [ 2377.042144] ? ion_system_heap_free+0x250/0x250 [ 2377.059838] ion_alloc+0x222/0x860 [ 2377.059853] ? ion_dma_buf_release+0x50/0x50 [ 2377.074302] ? kasan_check_write+0x14/0x20 [ 2377.074313] ? _copy_from_user+0x99/0x110 [ 2377.074326] ion_ioctl+0x105/0x217 [ 2377.087874] ? ion_alloc.cold+0x40/0x40 [ 2377.087888] ? ion_alloc.cold+0x40/0x40 [ 2377.087902] do_vfs_ioctl+0x7ae/0x1060 [ 2377.096087] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2377.129221] ? lock_downgrade+0x740/0x740 [ 2377.133407] ? ioctl_preallocate+0x1c0/0x1c0 [ 2377.137841] ? __fget+0x237/0x370 [ 2377.141321] ? security_file_ioctl+0x89/0xb0 [ 2377.145735] SyS_ioctl+0x8f/0xc0 [ 2377.149096] ? do_vfs_ioctl+0x1060/0x1060 [ 2377.153238] do_syscall_64+0x1e8/0x640 [ 2377.157110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2377.161944] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2377.167117] RIP: 0033:0x45a909 [ 2377.170301] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2377.177998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2377.185271] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2377.192537] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2377.199819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2377.207080] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2377.226998] Mem-Info: [ 2377.229836] active_anon:283520 inactive_anon:194 isolated_anon:0 [ 2377.229836] active_file:1592 inactive_file:5305 isolated_file:0 [ 2377.229836] unevictable:0 dirty:223 writeback:0 unstable:0 [ 2377.229836] slab_reclaimable:14617 slab_unreclaimable:114146 [ 2377.229836] mapped:57332 shmem:379 pagetables:7941 bounce:0 [ 2377.229836] free:920183 free_pcp:309 free_cma:0 [ 2377.265192] Node 0 active_anon:1133624kB inactive_anon:776kB active_file:224kB inactive_file:412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208936kB dirty:268kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 632832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2377.294298] Node 0 DMA free:10540kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2377.320880] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2377.326048] Node 0 DMA32 free:178028kB min:36380kB low:45472kB high:54564kB active_anon:1133624kB inactive_anon:776kB active_file:224kB inactive_file:412kB unevictable:0kB writepending:268kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15968kB pagetables:31700kB bounce:0kB free_pcp:1408kB local_pcp:700kB free_cma:0kB 00:39:37 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0080000640019fd1d0000000400003f00000016", @ANYRES32=r4], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0xffffffffffffffd2) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) 00:39:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x12}, @llc={0x1a, 0x0, 0x6, 0xc6, 0x20, 0x2, @remote}, @ipx={0x4, 0x0, 0x0, "c2b7cfa41a0f"}, 0xb4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, 0x0}], 0x1, 0x0) r2 = socket(0x1, 0x800, 0x6) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xd8000022}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000540)={0x0}}, 0x4000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x0, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10001) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x74}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4}, 0x2c) 00:39:37 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:37 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:37 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) [ 2377.364999] lowmem_reserve[]: 0 0 0 0 0 [ 2377.408923] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2377.447939] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:39:37 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) dup(r1) 00:39:37 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2377.458917] TCP: tcp_parse_options: Illegal window scaling value 116 > 14 received [ 2377.473223] lowmem_reserve[]: 0 0 0 0 0 [ 2377.482959] Node 0 DMA: 7*4kB (UE) 4*8kB (UE) 5*16kB (UE) 9*32kB (UE) 6*64kB (UE) 6*128kB (UE) 5*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10540kB [ 2377.517365] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2377.528000] TCP: tcp_parse_options: Illegal window scaling value 116 > 14 received [ 2377.552798] Node 0 DMA32: 6628*4kB (UME) 5821*8kB (UME) 3352*16kB (UME) 1452*32kB (U) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 173944kB 00:39:37 executing program 0: getpgrp(0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) socket$inet(0x2, 0x200000002, 0x0) mlockall(0x1) gettid() ioctl(0xffffffffffffffff, 0x0, 0x0) [ 2377.568426] syz-executor.0 (21521) used greatest stack depth: 23248 bytes left [ 2377.595066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2377.615175] selinux_nlmsg_perm: 35 callbacks suppressed [ 2377.615186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.670156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2377.695002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2377.704649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.711644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2377.730403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2377.740262] 7386 total pagecache pages [ 2377.742435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.744808] 0 pages in swap cache [ 2377.766310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.783722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.786124] Swap cache stats: add 0, delete 0, find 0/0 [ 2377.808719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.826393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.839414] Free swap = 0kB [ 2377.846821] Total swap = 0kB [ 2377.849973] 1965979 pages RAM [ 2377.853116] 0 pages HighMem/MovableOnly [ 2377.857131] 335858 pages reserved [ 2377.866254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.873956] 0 pages cma reserved [ 2377.879224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 [ 2377.898904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21531 comm=syz-executor.2 00:39:37 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:37 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:37 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:37 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r2) 00:39:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) stat(&(0x7f0000000280)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x200000000000029c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) 00:39:38 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:38 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:38 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:38 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:38 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:38 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:38 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x8000a0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:39:38 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:38 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:38 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:39:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:39:40 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:39:40 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:40 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:39:40 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:40 executing program 2: 00:39:41 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:39:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:39:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:41 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) 00:39:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(r0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000180)={@loopback}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x74}]}}}}}}}}, 0x0) 00:39:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:39:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:41 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @empty}}, 0x14) 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) 00:39:41 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) 00:39:41 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) r1 = socket(0x10, 0x800000000080002, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001900fdabaa725d94480000970500000008000300050000801000b6537bf0b5a29b25978a3477cd050000001d000000a8b9686b57c6e210414704000000366900000076122fd37dbf6624dcdea36a19e19d4a528ec12f3af2b7fa3c591ec54cd4084165a055097281c39430c9fa6a46aee90981fe6e7747b0c4bebc15f1a34b8ba4a016d5b6a184ea00"/153], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") [ 2381.370211] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2381.380752] TCP: tcp_parse_options: Illegal window scaling value 116 > 14 received 00:39:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) [ 2381.448680] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2381.459223] TCP: tcp_parse_options: Illegal window scaling value 116 > 14 received 00:39:41 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:41 executing program 0: 00:39:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005}) 00:39:41 executing program 2: 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005}) 00:39:41 executing program 0: 00:39:41 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) 00:39:41 executing program 2: 00:39:41 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005}) 00:39:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) dup(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:41 executing program 0: 00:39:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005}) 00:39:41 executing program 2: 00:39:41 executing program 4: 00:39:41 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 2: 00:39:42 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005}) 00:39:42 executing program 4: 00:39:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:42 executing program 0: 00:39:42 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 4: 00:39:42 executing program 2: 00:39:42 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005}) 00:39:42 executing program 0: 00:39:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:42 executing program 4: 00:39:42 executing program 2: 00:39:42 executing program 0: 00:39:42 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 1: 00:39:42 executing program 4: 00:39:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:42 executing program 2: 00:39:42 executing program 0: 00:39:42 executing program 4: 00:39:42 executing program 1: 00:39:42 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 4: 00:39:42 executing program 0: 00:39:42 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x109802, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000180)="b3", 0x1}], 0x1) 00:39:42 executing program 1: 00:39:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:42 executing program 4: 00:39:42 executing program 1: 00:39:42 executing program 0: 00:39:42 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:42 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:42 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:43 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write(r1, &(0x7f0000000040)="e0", 0xfffffe00) r2 = dup(r1) read$char_usb(r2, &(0x7f0000000040)=""/46, 0x2e) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) 00:39:43 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:43 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:43 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:43 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:44 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:44 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:44 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:44 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:44 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:44 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:44 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2384.786736] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2384.788003] syz-executor.0: [ 2384.800966] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 00:39:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) [ 2384.853530] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2384.856023] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2384.880110] syz-executor.2 cpuset= [ 2384.887457] CPU: 1 PID: 21887 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 00:39:44 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2384.898917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2384.908308] Call Trace: [ 2384.910909] dump_stack+0x142/0x197 [ 2384.914547] warn_alloc.cold+0x96/0x1af [ 2384.918529] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2384.920933] syz-executor.0 cpuset= [ 2384.923386] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2384.923401] __alloc_pages_slowpath+0x23c6/0x2930 [ 2384.923421] ? save_trace+0x290/0x290 [ 2384.923437] ? warn_alloc+0xf0/0xf0 [ 2384.923454] ? __might_sleep+0x93/0xb0 [ 2384.936222] syz0 [ 2384.937081] __alloc_pages_nodemask+0x62c/0x7a0 [ 2384.946297] mems_allowed=0-1 [ 2384.948363] ? lock_downgrade+0x740/0x740 [ 2384.948377] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2384.948393] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2384.948410] alloc_pages_current+0xec/0x1e0 [ 2384.948424] ion_page_pool_alloc+0x11f/0x1c0 [ 2384.948435] ion_system_heap_allocate+0x138/0x910 [ 2384.986471] ? ion_alloc+0x19b/0x860 [ 2384.986485] ? rcu_read_lock_sched_held+0x110/0x130 [ 2384.986499] ? ion_system_heap_free+0x250/0x250 [ 2384.986513] ion_alloc+0x222/0x860 [ 2385.003444] ? ion_dma_buf_release+0x50/0x50 [ 2385.007863] ? kasan_check_write+0x14/0x20 [ 2385.012116] ? _copy_from_user+0x99/0x110 [ 2385.016274] ion_ioctl+0x105/0x217 [ 2385.019816] ? ion_alloc.cold+0x40/0x40 [ 2385.023853] ? ion_alloc.cold+0x40/0x40 [ 2385.027946] do_vfs_ioctl+0x7ae/0x1060 [ 2385.031928] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2385.036689] ? lock_downgrade+0x740/0x740 [ 2385.040848] ? ioctl_preallocate+0x1c0/0x1c0 [ 2385.045267] ? __fget+0x237/0x370 [ 2385.048730] ? security_file_ioctl+0x89/0xb0 [ 2385.053153] SyS_ioctl+0x8f/0xc0 [ 2385.056526] ? do_vfs_ioctl+0x1060/0x1060 [ 2385.060675] do_syscall_64+0x1e8/0x640 [ 2385.064553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2385.069394] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2385.074676] RIP: 0033:0x45a909 [ 2385.078020] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2385.091253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2385.098526] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2385.105788] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2385.113046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2385.120307] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2385.127831] CPU: 0 PID: 21883 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2385.135983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2385.135989] Call Trace: [ 2385.136004] dump_stack+0x142/0x197 [ 2385.136020] warn_alloc.cold+0x96/0x1af [ 2385.136030] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2385.136049] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2385.154606] syz2 [ 2385.155671] __alloc_pages_slowpath+0x23c6/0x2930 [ 2385.172680] ? save_trace+0x290/0x290 [ 2385.172696] ? warn_alloc+0xf0/0xf0 [ 2385.172715] ? __might_sleep+0x93/0xb0 [ 2385.172727] __alloc_pages_nodemask+0x62c/0x7a0 [ 2385.172738] ? lock_downgrade+0x740/0x740 [ 2385.172750] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2385.172763] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2385.172778] alloc_pages_current+0xec/0x1e0 [ 2385.172793] ion_page_pool_alloc+0x11f/0x1c0 [ 2385.172803] ion_system_heap_allocate+0x138/0x910 [ 2385.172812] ? ion_alloc+0x19b/0x860 [ 2385.172824] ? rcu_read_lock_sched_held+0x110/0x130 [ 2385.178151] mems_allowed=0-1 [ 2385.180354] ? ion_system_heap_free+0x250/0x250 [ 2385.180370] ion_alloc+0x222/0x860 [ 2385.180384] ? ion_dma_buf_release+0x50/0x50 [ 2385.180400] ? kasan_check_write+0x14/0x20 [ 2385.180409] ? _copy_from_user+0x99/0x110 [ 2385.180420] ion_ioctl+0x105/0x217 [ 2385.180429] ? ion_alloc.cold+0x40/0x40 [ 2385.180441] ? ion_alloc.cold+0x40/0x40 [ 2385.180452] do_vfs_ioctl+0x7ae/0x1060 [ 2385.180463] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2385.180474] ? lock_downgrade+0x740/0x740 [ 2385.180489] ? ioctl_preallocate+0x1c0/0x1c0 [ 2385.180501] ? __fget+0x237/0x370 [ 2385.180517] ? security_file_ioctl+0x89/0xb0 [ 2385.180531] SyS_ioctl+0x8f/0xc0 [ 2385.189104] ? do_vfs_ioctl+0x1060/0x1060 [ 2385.189118] do_syscall_64+0x1e8/0x640 [ 2385.189127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2385.189143] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2385.203900] RIP: 0033:0x45a909 [ 2385.312751] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2385.312767] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2385.327766] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2385.335047] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2385.343500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2385.350872] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2385.358740] CPU: 1 PID: 21888 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2385.366651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2385.373663] Mem-Info: [ 2385.376878] Call Trace: [ 2385.376895] dump_stack+0x142/0x197 [ 2385.376912] warn_alloc.cold+0x96/0x1af [ 2385.376922] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2385.376946] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2385.376959] __alloc_pages_slowpath+0x23c6/0x2930 [ 2385.379894] active_anon:285265 inactive_anon:194 isolated_anon:0 [ 2385.379894] active_file:1334 inactive_file:5422 isolated_file:0 [ 2385.379894] unevictable:5308 dirty:311 writeback:0 unstable:0 [ 2385.379894] slab_reclaimable:14212 slab_unreclaimable:115215 [ 2385.379894] mapped:57930 shmem:379 pagetables:8085 bounce:0 [ 2385.379894] free:976720 free_pcp:184 free_cma:0 [ 2385.381954] ? save_trace+0x290/0x290 [ 2385.381971] ? warn_alloc+0xf0/0xf0 [ 2385.381992] ? __might_sleep+0x93/0xb0 [ 2385.382003] __alloc_pages_nodemask+0x62c/0x7a0 [ 2385.385776] Node 0 active_anon:1140652kB inactive_anon:776kB active_file:232kB inactive_file:1080kB unevictable:19996kB isolated(anon):0kB isolated(file):0kB mapped:210984kB dirty:468kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2385.389576] ? lock_downgrade+0x740/0x740 [ 2385.389588] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2385.389605] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2385.389621] alloc_pages_current+0xec/0x1e0 [ 2385.389635] ion_page_pool_alloc+0x11f/0x1c0 [ 2385.389646] ion_system_heap_allocate+0x138/0x910 [ 2385.389655] ? ion_alloc+0x19b/0x860 [ 2385.389664] ? rcu_read_lock_sched_held+0x110/0x130 [ 2385.389675] ? ion_system_heap_free+0x250/0x250 [ 2385.395021] Node 0 [ 2385.399780] ion_alloc+0x222/0x860 [ 2385.399797] ? ion_dma_buf_release+0x50/0x50 [ 2385.399813] ? kasan_check_write+0x14/0x20 [ 2385.399824] ? _copy_from_user+0x99/0x110 [ 2385.399833] ion_ioctl+0x105/0x217 [ 2385.399842] ? ion_alloc.cold+0x40/0x40 [ 2385.399857] ? ion_alloc.cold+0x40/0x40 [ 2385.414406] DMA free:10492kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2385.440795] do_vfs_ioctl+0x7ae/0x1060 [ 2385.440811] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2385.440823] ? lock_downgrade+0x740/0x740 [ 2385.440832] ? ioctl_preallocate+0x1c0/0x1c0 [ 2385.440844] ? __fget+0x237/0x370 [ 2385.440863] ? security_file_ioctl+0x89/0xb0 [ 2385.474421] lowmem_reserve[]: [ 2385.485198] SyS_ioctl+0x8f/0xc0 [ 2385.485209] ? do_vfs_ioctl+0x1060/0x1060 [ 2385.485221] do_syscall_64+0x1e8/0x640 [ 2385.485230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2385.485245] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2385.485256] RIP: 0033:0x45a909 [ 2385.489841] 0 [ 2385.494417] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2385.494428] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2385.494433] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2385.494439] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2385.494444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2385.494450] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2385.514235] 2569 [ 2385.541196] 2569 [ 2385.551641] 2569 [ 2385.566209] 2569 [ 2385.693696] Node 0 DMA32 free:86692kB min:36380kB low:45472kB high:54564kB active_anon:1140552kB inactive_anon:776kB active_file:232kB inactive_file:1080kB unevictable:19996kB writepending:468kB present:3129332kB managed:2634384kB mlocked:19996kB kernel_stack:16000kB pagetables:32128kB bounce:0kB free_pcp:1004kB local_pcp:580kB free_cma:0kB [ 2385.727204] lowmem_reserve[]: 0 0 0 0 0 [ 2385.731521] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2385.757151] lowmem_reserve[]: 0 0 0 0 0 [ 2385.761280] Node 0 DMA: 7*4kB (UE) 4*8kB (UE) 4*16kB (UE) 6*32kB (UE) 5*64kB (UE) 5*128kB (UE) 4*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10492kB [ 2385.776885] Node 0 DMA32: 469*4kB (UME) 610*8kB (ME) 115*16kB (ME) 907*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37940kB [ 2385.792345] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2385.804670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2385.813680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2385.823007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2385.832652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2385.841350] 7729 total pagecache pages [ 2385.845303] 0 pages in swap cache [ 2385.848819] Swap cache stats: add 0, delete 0, find 0/0 [ 2385.854697] Free swap = 0kB [ 2385.858472] Total swap = 0kB [ 2385.863619] 1965979 pages RAM [ 2385.869794] 0 pages HighMem/MovableOnly [ 2385.874678] 335858 pages reserved [ 2385.881491] 0 pages cma reserved [ 2385.924315] oom_reaper: reaped process 21883 (syz-executor.0), now anon-rss:0kB, file-rss:20kB, shmem-rss:0kB [ 2385.958153] oom_reaper: reaped process 21887 (syz-executor.4), now anon-rss:0kB, file-rss:24kB, shmem-rss:0kB [ 2385.974086] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0, order=0, oom_score_adj=1000 [ 2385.989512] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2385.992882] syz-executor.4 cpuset= [ 2386.002122] syz-executor.0 cpuset= [ 2386.002825] syz4 [ 2386.009231] syz0 [ 2386.009346] mems_allowed=0-1 [ 2386.011399] mems_allowed=0-1 [ 2386.016935] CPU: 1 PID: 21887 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2386.027385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2386.036722] Call Trace: [ 2386.039301] dump_stack+0x142/0x197 [ 2386.042944] dump_header+0x177/0x6cd [ 2386.047964] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2386.053077] ? ___ratelimit+0x55/0x537 [ 2386.057073] oom_kill_process.cold+0x10/0xadd [ 2386.061572] ? rcu_read_unlock_special+0x639/0xd40 [ 2386.066505] ? lock_downgrade+0x740/0x740 [ 2386.070653] out_of_memory+0x2ee/0x1180 [ 2386.074621] ? lock_acquire+0x16f/0x430 [ 2386.078586] ? __lock_is_held+0xb6/0x140 [ 2386.082662] ? oom_killer_disable+0x1d0/0x1d0 [ 2386.087143] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2386.092065] __alloc_pages_slowpath+0x2251/0x2930 [ 2386.096909] ? warn_alloc+0xf0/0xf0 [ 2386.100529] ? __might_sleep+0x93/0xb0 [ 2386.104400] __alloc_pages_nodemask+0x62c/0x7a0 [ 2386.109055] ? lock_downgrade+0x740/0x740 [ 2386.113287] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2386.118292] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2386.123904] alloc_pages_current+0xec/0x1e0 [ 2386.128221] ion_page_pool_alloc+0x11f/0x1c0 [ 2386.132616] ion_system_heap_allocate+0x138/0x910 [ 2386.137446] ? ion_alloc+0x19b/0x860 [ 2386.141151] ? rcu_read_lock_sched_held+0x110/0x130 [ 2386.146175] ? ion_system_heap_free+0x250/0x250 [ 2386.150834] ion_alloc+0x222/0x860 [ 2386.154362] ? ion_dma_buf_release+0x50/0x50 [ 2386.158759] ? kasan_check_write+0x14/0x20 [ 2386.162986] ? _copy_from_user+0x99/0x110 [ 2386.167125] ion_ioctl+0x105/0x217 [ 2386.170653] ? ion_alloc.cold+0x40/0x40 [ 2386.174615] ? ion_alloc.cold+0x40/0x40 [ 2386.178573] do_vfs_ioctl+0x7ae/0x1060 [ 2386.182449] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2386.187203] ? lock_downgrade+0x740/0x740 [ 2386.191340] ? ioctl_preallocate+0x1c0/0x1c0 [ 2386.195738] ? __fget+0x237/0x370 [ 2386.199181] ? security_file_ioctl+0x89/0xb0 [ 2386.203576] SyS_ioctl+0x8f/0xc0 [ 2386.206926] ? do_vfs_ioctl+0x1060/0x1060 [ 2386.211058] do_syscall_64+0x1e8/0x640 [ 2386.214930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2386.219778] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2386.225090] RIP: 0033:0x45a909 [ 2386.228291] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2386.235993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2386.243253] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2386.250523] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2386.257777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2386.265032] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2386.272304] CPU: 0 PID: 21883 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2386.280197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2386.281242] Mem-Info: [ 2386.289654] Call Trace: [ 2386.289671] dump_stack+0x142/0x197 [ 2386.289687] warn_alloc.cold+0x96/0x1af [ 2386.289698] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2386.289711] ? call_timer_fn+0x670/0x670 [ 2386.289732] __alloc_pages_slowpath+0x23c6/0x2930 [ 2386.289755] ? warn_alloc+0xf0/0xf0 [ 2386.289775] ? __might_sleep+0x93/0xb0 [ 2386.289786] __alloc_pages_nodemask+0x62c/0x7a0 [ 2386.289798] ? lock_downgrade+0x740/0x740 [ 2386.289809] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2386.289823] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2386.289837] alloc_pages_current+0xec/0x1e0 [ 2386.289854] ion_page_pool_alloc+0x11f/0x1c0 [ 2386.295207] active_anon:284141 inactive_anon:193 isolated_anon:0 [ 2386.295207] active_file:1301 inactive_file:5178 isolated_file:0 [ 2386.295207] unevictable:5308 dirty:18 writeback:17 unstable:0 [ 2386.295207] slab_reclaimable:14212 slab_unreclaimable:114959 [ 2386.295207] mapped:57895 shmem:379 pagetables:8046 bounce:0 [ 2386.295207] free:945136 free_pcp:86 free_cma:0 [ 2386.298440] ion_system_heap_allocate+0x138/0x910 [ 2386.298451] ? ion_alloc+0x19b/0x860 [ 2386.298462] ? rcu_read_lock_sched_held+0x110/0x130 [ 2386.298474] ? ion_system_heap_free+0x250/0x250 [ 2386.298487] ion_alloc+0x222/0x860 [ 2386.305145] Node 0 active_anon:1136156kB inactive_anon:772kB active_file:88kB inactive_file:84kB unevictable:19996kB isolated(anon):0kB isolated(file):0kB mapped:210976kB dirty:0kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2386.307279] ? ion_dma_buf_release+0x50/0x50 [ 2386.307298] ? kasan_check_write+0x14/0x20 [ 2386.307310] ? _copy_from_user+0x99/0x110 [ 2386.314375] Node 0 [ 2386.316219] ion_ioctl+0x105/0x217 [ 2386.316230] ? ion_alloc.cold+0x40/0x40 [ 2386.316250] ? ion_alloc.cold+0x40/0x40 [ 2386.322273] DMA free:10372kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2386.323760] do_vfs_ioctl+0x7ae/0x1060 [ 2386.323773] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2386.323784] ? lock_downgrade+0x740/0x740 [ 2386.323795] ? ioctl_preallocate+0x1c0/0x1c0 [ 2386.328516] lowmem_reserve[]: [ 2386.332584] ? __fget+0x237/0x370 [ 2386.332598] ? security_file_ioctl+0x89/0xb0 [ 2386.332609] SyS_ioctl+0x8f/0xc0 [ 2386.332618] ? do_vfs_ioctl+0x1060/0x1060 [ 2386.332630] do_syscall_64+0x1e8/0x640 [ 2386.332640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2386.332658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2386.332664] RIP: 0033:0x45a909 [ 2386.332669] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2386.332678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2386.332683] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2386.332688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2386.332693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2386.332698] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2386.352524] syz-executor.0: [ 2386.395618] 0 [ 2386.403078] page allocation failure: order:4 [ 2386.404840] 2569 [ 2386.408347] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2386.437608] 2569 [ 2386.444830] 0 [ 2386.445487] 2569 [ 2386.449367] syz-executor.0 cpuset= [ 2386.452642] 2569 [ 2386.455315] syz0 [ 2386.467608] mems_allowed=0-1 [ 2386.490270] Node 0 [ 2386.496962] CPU: 0 PID: 21883 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2386.497677] DMA32 free:32184kB min:36380kB low:45472kB high:54564kB active_anon:1136156kB inactive_anon:772kB active_file:88kB inactive_file:84kB unevictable:19996kB writepending:40kB present:3129332kB managed:2634384kB mlocked:19996kB kernel_stack:15968kB pagetables:32120kB bounce:0kB free_pcp:664kB local_pcp:32kB free_cma:0kB [ 2386.501586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2386.501592] Call Trace: [ 2386.501610] dump_stack+0x142/0x197 [ 2386.501625] warn_alloc.cold+0x96/0x1af [ 2386.501634] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2386.501654] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2386.501666] __alloc_pages_slowpath+0x23c6/0x2930 [ 2386.501683] ? save_trace+0x290/0x290 [ 2386.501697] ? warn_alloc+0xf0/0xf0 [ 2386.501716] ? __might_sleep+0x93/0xb0 [ 2386.506169] lowmem_reserve[]: [ 2386.509196] __alloc_pages_nodemask+0x62c/0x7a0 [ 2386.509207] ? lock_downgrade+0x740/0x740 [ 2386.509219] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2386.509241] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2386.513794] 0 [ 2386.517101] alloc_pages_current+0xec/0x1e0 [ 2386.517119] ion_page_pool_alloc+0x11f/0x1c0 [ 2386.517131] ion_system_heap_allocate+0x138/0x910 [ 2386.517144] ? ion_system_heap_free+0x250/0x250 [ 2386.520615] 0 [ 2386.524631] ion_alloc+0x68c/0x860 [ 2386.524646] ? ion_dma_buf_release+0x50/0x50 [ 2386.524662] ? kasan_check_write+0x14/0x20 [ 2386.524673] ? _copy_from_user+0x99/0x110 [ 2386.524683] ion_ioctl+0x105/0x217 [ 2386.528613] 0 [ 2386.533380] ? ion_alloc.cold+0x40/0x40 [ 2386.533395] ? ion_alloc.cold+0x40/0x40 [ 2386.533406] do_vfs_ioctl+0x7ae/0x1060 [ 2386.533418] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2386.533429] ? lock_downgrade+0x740/0x740 [ 2386.533441] ? ioctl_preallocate+0x1c0/0x1c0 [ 2386.533452] ? __fget+0x237/0x370 [ 2386.533468] ? security_file_ioctl+0x89/0xb0 [ 2386.533480] SyS_ioctl+0x8f/0xc0 [ 2386.533488] ? do_vfs_ioctl+0x1060/0x1060 [ 2386.533500] do_syscall_64+0x1e8/0x640 [ 2386.539743] 0 [ 2386.541855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2386.541873] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2386.541881] RIP: 0033:0x45a909 [ 2386.541887] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 [ 2386.549789] 0 [ 2386.556831] ORIG_RAX: 0000000000000010 [ 2386.556837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2386.556843] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2386.556848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2386.556854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2386.556859] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2386.561269] warn_alloc_show_mem: 3 callbacks suppressed [ 2386.561272] Mem-Info: [ 2386.571709] active_anon:284141 inactive_anon:193 isolated_anon:0 [ 2386.571709] active_file:1301 inactive_file:5178 isolated_file:0 [ 2386.571709] unevictable:5308 dirty:18 writeback:17 unstable:0 [ 2386.571709] slab_reclaimable:14212 slab_unreclaimable:114959 [ 2386.571709] mapped:57895 shmem:379 pagetables:8046 bounce:0 [ 2386.571709] free:948676 free_pcp:217 free_cma:0 [ 2386.579180] Node 0 [ 2386.590194] Node 0 active_anon:1136156kB inactive_anon:772kB active_file:88kB inactive_file:84kB unevictable:19996kB isolated(anon):0kB isolated(file):0kB mapped:210976kB dirty:0kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2386.592387] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2386.595627] Node 1 active_anon:408kB inactive_anon:0kB active_file:5116kB inactive_file:20628kB unevictable:1236kB isolated(anon):0kB isolated(file):0kB mapped:20604kB dirty:88kB writeback:68kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2386.597682] lowmem_reserve[]: [ 2386.609245] Node 0 [ 2386.612047] 0 [ 2386.614365] DMA free:10432kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2386.616484] 0 [ 2386.618471] lowmem_reserve[]: [ 2386.621650] 0 [ 2386.627817] 0 [ 2386.633295] 0 [ 2386.664562] 2569 [ 2386.672339] 0 [ 2386.677383] 2569 [ 2386.686220] 2569 [ 2386.692778] Node 0 [ 2386.700229] 2569 [ 2386.700370] DMA: [ 2386.707869] 16*4kB [ 2386.715673] Node 0 DMA32 free:32184kB min:36380kB low:45472kB high:54564kB active_anon:1136156kB inactive_anon:772kB active_file:88kB inactive_file:84kB unevictable:19996kB writepending:40kB present:3129332kB managed:2634384kB mlocked:19996kB kernel_stack:15968kB pagetables:32120kB bounce:0kB free_pcp:664kB local_pcp:632kB free_cma:0kB [ 2386.715699] lowmem_reserve[]: 0 0 [ 2386.721334] (UE) [ 2386.724959] 0 [ 2386.734409] 2*8kB [ 2386.737362] 0 [ 2386.742643] (UE) [ 2386.746152] 0 [ 2386.754922] 1*16kB [ 2386.761914] (E) [ 2386.764935] Node 0 [ 2386.769176] 5*32kB [ 2386.772790] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2386.772793] lowmem_reserve[]: 0 0 0 0 0 [ 2386.772814] Node 1 [ 2386.778719] (UE) [ 2386.782747] Normal free:3752088kB min:53508kB low:66884kB high:80260kB active_anon:408kB inactive_anon:0kB active_file:5116kB inactive_file:20628kB unevictable:1236kB writepending:0kB present:3932160kB managed:3870192kB mlocked:1236kB kernel_stack:32kB pagetables:64kB bounce:0kB free_pcp:192kB local_pcp:124kB free_cma:0kB [ 2386.787673] 5*64kB [ 2386.791496] lowmem_reserve[]: 0 0 0 0 0 [ 2386.791525] Node 0 [ 2386.801376] (UE) [ 2386.804200] DMA: [ 2386.808634] 5*128kB [ 2386.812070] 16*4kB [ 2386.821772] (UE) [ 2386.822011] (UE) [ 2386.826855] 4*256kB [ 2386.832049] 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 5*64kB (UE) 5*128kB (UE) 4*256kB [ 2386.838710] (UE) [ 2386.840744] (UE) 4*512kB [ 2386.844209] 4*512kB [ 2386.846589] (UE) [ 2386.857439] (UE) [ 2386.861267] 2*1024kB [ 2386.873644] 2*1024kB [ 2386.876525] (UE) [ 2386.884171] (UE) [ 2386.888584] 2*2048kB [ 2386.895334] 2*2048kB [ 2386.925226] (ME) 0*4096kB = 10432kB [ 2386.925247] Node 0 DMA32: 1053*4kB (UME) 751*8kB (UME) 129*16kB (UME) 485*32kB (UME) 5*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 32220kB [ 2386.925321] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2386.925368] Node 1 Normal: 6*4kB (UE) 338*8kB (UME) 289*16kB (UME) 69*32kB (UME) 27*64kB (UE) 7*128kB (UE) 3*256kB (UM) 1*512kB (E) 3*1024kB (UE) 2*2048kB (U) 911*4096kB (UM) = 3752088kB [ 2386.925450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2386.925457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2386.925463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2386.925470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2386.925475] 7661 total pagecache pages [ 2386.925485] 0 pages in swap cache [ 2386.925491] Swap cache stats: add 0, delete 0, find 0/0 [ 2386.925495] Free swap = 0kB [ 2386.925498] Total swap = 0kB [ 2386.925504] 1965979 pages RAM [ 2386.925507] 0 pages HighMem/MovableOnly [ 2386.925510] 335858 pages reserved [ 2386.925514] 0 pages cma reserved [ 2386.969556] syz-executor.0: [ 2386.980947] (ME) [ 2387.048012] page allocation failure: order:0 [ 2387.049762] 0*4096kB = 10432kB [ 2387.049771] Node 0 DMA32: 1035*4kB (UME) 617*8kB (UME) 119*16kB (ME) 84*32kB (UME) 1391*64kB (UME) [ 2387.057682] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2387.059727] 174*128kB [ 2387.064230] 0 [ 2387.066116] (UM) 8*256kB (U) [ 2387.070652] syz-executor.0 cpuset= [ 2387.102662] 1*512kB [ 2387.136757] syz0 [ 2387.152300] (U) [ 2387.171053] mems_allowed=0-1 [ 2387.188551] 28*1024kB [ 2387.211164] CPU: 0 PID: 21883 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2387.219850] (U) [ 2387.220338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2387.222748] 2*2048kB 00:39:47 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:47 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2387.224691] Call Trace: [ 2387.224711] dump_stack+0x142/0x197 [ 2387.224728] warn_alloc.cold+0x96/0x1af [ 2387.224738] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2387.226844] (M) [ 2387.229187] ? call_timer_fn+0x670/0x670 [ 2387.229208] __alloc_pages_slowpath+0x23c6/0x2930 [ 2387.229231] ? warn_alloc+0xf0/0xf0 [ 2387.234922] 0*4096kB [ 2387.235717] ? __might_sleep+0x93/0xb0 [ 2387.235729] __alloc_pages_nodemask+0x62c/0x7a0 [ 2387.238194] = 160292kB [ 2387.240512] ? lock_downgrade+0x740/0x740 [ 2387.240524] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2387.240540] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2387.240553] alloc_pages_current+0xec/0x1e0 [ 2387.240568] ion_page_pool_alloc+0x11f/0x1c0 [ 2387.240579] ion_system_heap_allocate+0x138/0x910 [ 2387.240593] ? ion_system_heap_free+0x250/0x250 [ 2387.240606] ion_alloc+0x68c/0x860 [ 2387.240621] ? ion_dma_buf_release+0x50/0x50 [ 2387.244930] Node 0 [ 2387.258699] ? kasan_check_write+0x14/0x20 [ 2387.258710] ? _copy_from_user+0x99/0x110 [ 2387.258726] ion_ioctl+0x105/0x217 [ 2387.258737] ? ion_alloc.cold+0x40/0x40 [ 2387.258753] ? ion_alloc.cold+0x40/0x40 [ 2387.258764] do_vfs_ioctl+0x7ae/0x1060 [ 2387.258775] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2387.258784] ? lock_downgrade+0x740/0x740 [ 2387.258796] ? ioctl_preallocate+0x1c0/0x1c0 [ 2387.258810] ? __fget+0x237/0x370 [ 2387.258827] ? security_file_ioctl+0x89/0xb0 [ 2387.258840] SyS_ioctl+0x8f/0xc0 [ 2387.258849] ? do_vfs_ioctl+0x1060/0x1060 [ 2387.258862] do_syscall_64+0x1e8/0x640 [ 2387.258871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2387.258887] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2387.258894] RIP: 0033:0x45a909 [ 2387.258899] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2387.258912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2387.273604] Normal: [ 2387.286291] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2387.286298] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2387.286302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2387.286307] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2387.437433] 0*4kB [ 2387.457603] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2387.640339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2387.640346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2387.640353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2387.640360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2387.640364] 7663 total pagecache pages [ 2387.640376] 0 pages in swap cache [ 2387.640382] Swap cache stats: add 0, delete 0, find 0/0 [ 2387.640386] Free swap = 0kB [ 2387.640390] Total swap = 0kB [ 2387.640396] 1965979 pages RAM [ 2387.640400] 0 pages HighMem/MovableOnly [ 2387.640403] 335858 pages reserved [ 2387.640407] 0 pages cma reserved [ 2387.640416] Out of memory: Kill process 21537 (syz-executor.0) score 1010 or sacrifice child [ 2387.640515] Killed process 21537 (syz-executor.0) total-vm:72852kB, anon-rss:18000kB, file-rss:38096kB, shmem-rss:0kB [ 2387.640945] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2387.640969] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2387.640992] CPU: 1 PID: 21887 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2387.640998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2387.641002] Call Trace: [ 2387.641016] dump_stack+0x142/0x197 [ 2387.641031] warn_alloc.cold+0x96/0x1af [ 2387.641041] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2387.641059] ? wait_for_completion+0x420/0x420 [ 2387.641075] __alloc_pages_slowpath+0x23c6/0x2930 [ 2387.641101] ? warn_alloc+0xf0/0xf0 [ 2387.641122] ? __might_sleep+0x93/0xb0 [ 2387.641135] __alloc_pages_nodemask+0x62c/0x7a0 [ 2387.641147] ? lock_downgrade+0x740/0x740 [ 2387.641158] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2387.641175] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2387.641191] alloc_pages_current+0xec/0x1e0 [ 2387.641208] ion_page_pool_alloc+0x11f/0x1c0 [ 2387.641219] ion_system_heap_allocate+0x138/0x910 [ 2387.641229] ? ion_alloc+0x19b/0x860 [ 2387.641239] ? rcu_read_lock_sched_held+0x110/0x130 [ 2387.641253] ? ion_system_heap_free+0x250/0x250 [ 2387.641267] ion_alloc+0x222/0x860 [ 2387.641283] ? ion_dma_buf_release+0x50/0x50 [ 2387.641299] ? kasan_check_write+0x14/0x20 [ 2387.641309] ? _copy_from_user+0x99/0x110 [ 2387.641321] ion_ioctl+0x105/0x217 [ 2387.641331] ? ion_alloc.cold+0x40/0x40 [ 2387.641347] ? ion_alloc.cold+0x40/0x40 [ 2387.641358] do_vfs_ioctl+0x7ae/0x1060 [ 2387.641369] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2387.641378] ? lock_downgrade+0x740/0x740 [ 2387.641389] ? ioctl_preallocate+0x1c0/0x1c0 [ 2387.641401] ? __fget+0x237/0x370 [ 2387.641417] ? security_file_ioctl+0x89/0xb0 [ 2387.641430] SyS_ioctl+0x8f/0xc0 [ 2387.641440] ? do_vfs_ioctl+0x1060/0x1060 [ 2387.641457] do_syscall_64+0x1e8/0x640 [ 2387.641467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2387.641483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2387.641490] RIP: 0033:0x45a909 [ 2387.641496] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2387.641505] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2387.641511] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2387.641516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2387.641522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2387.641528] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2387.641567] warn_alloc_show_mem: 1 callbacks suppressed [ 2387.641570] Mem-Info: [ 2387.641591] active_anon:284672 inactive_anon:194 isolated_anon:0 [ 2387.641591] active_file:1299 inactive_file:5165 isolated_file:0 [ 2387.641591] unevictable:5308 dirty:7 writeback:0 unstable:0 [ 2387.641591] slab_reclaimable:14212 slab_unreclaimable:115181 [ 2387.641591] mapped:57909 shmem:379 pagetables:8076 bounce:0 [ 2387.641591] free:949765 free_pcp:28 free_cma:0 [ 2387.641609] Node 0 active_anon:1138280kB inactive_anon:776kB active_file:16kB inactive_file:24kB unevictable:19996kB isolated(anon):0kB isolated(file):0kB mapped:210948kB dirty:8kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2387.641630] Node 1 active_anon:408kB inactive_anon:0kB active_file:5180kB inactive_file:20636kB unevictable:1236kB isolated(anon):0kB isolated(file):0kB mapped:20688kB dirty:20kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2387.641634] Node 0 DMA free:10436kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2387.641654] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2387.641677] Node 0 DMA32 free:36576kB min:36380kB low:45472kB high:54564kB active_anon:1138280kB inactive_anon:776kB active_file:16kB inactive_file:24kB unevictable:19996kB writepending:8kB present:3129332kB managed:2634384kB mlocked:19996kB kernel_stack:16064kB pagetables:32240kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2387.641699] lowmem_reserve[]: 0 0 0 0 0 [ 2387.641720] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2387.641740] lowmem_reserve[]: 0 0 0 0 0 [ 2387.641762] Node 1 Normal free:3752048kB min:53508kB low:66884kB high:80260kB active_anon:408kB inactive_anon:0kB active_file:5180kB inactive_file:20636kB unevictable:1236kB writepending:20kB present:3932160kB managed:3870192kB mlocked:1236kB kernel_stack:64kB pagetables:64kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 2387.641784] lowmem_reserve[]: 0 0 0 0 0 [ 2387.641805] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 4*64kB (UE) 4*128kB (UE) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10436kB [ 2387.641889] Node 0 DMA32: 1048*4kB (UME) 615*8kB (UME) 110*16kB (UME) 8*32kB (ME) 323*64kB (UME) 37*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36536kB [ 2387.641960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2387.642013] Node 1 Normal: 50*4kB (UME) 323*8kB (UME) 289*16kB (UME) 68*32kB (UME) 27*64kB (UE) 7*128kB (UE) 3*256kB (UM) 1*512kB (E) 3*1024kB (UE) 2*2048kB (U) 911*4096kB (UM) = 3752112kB [ 2387.642105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2387.642112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2387.642118] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2387.642125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2387.642129] 7663 total pagecache pages [ 2387.642140] 0 pages in swap cache [ 2387.642146] Swap cache stats: add 0, delete 0, find 0/0 [ 2387.642149] Free swap = 0kB [ 2387.642153] Total swap = 0kB [ 2387.642159] 1965979 pages RAM [ 2387.642163] 0 pages HighMem/MovableOnly [ 2387.642166] 335858 pages reserved [ 2387.642170] 0 pages cma reserved [ 2387.653206] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2387.653233] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2387.653259] CPU: 0 PID: 21916 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2387.653266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2387.653272] Call Trace: [ 2387.653290] dump_stack+0x142/0x197 [ 2387.653309] warn_alloc.cold+0x96/0x1af [ 2387.653321] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2387.653341] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2387.653357] __alloc_pages_slowpath+0x23c6/0x2930 [ 2387.653377] ? save_trace+0x290/0x290 [ 2387.653392] ? warn_alloc+0xf0/0xf0 [ 2387.653414] ? __might_sleep+0x93/0xb0 [ 2387.653426] __alloc_pages_nodemask+0x62c/0x7a0 [ 2387.653439] ? lock_downgrade+0x740/0x740 [ 2387.653451] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2387.653466] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2387.653482] alloc_pages_current+0xec/0x1e0 [ 2387.653507] ion_page_pool_alloc+0x11f/0x1c0 [ 2387.653520] ion_system_heap_allocate+0x138/0x910 [ 2387.653532] ? ion_alloc+0x19b/0x860 [ 2387.653544] ? rcu_read_lock_sched_held+0x110/0x130 [ 2387.653557] ? ion_system_heap_free+0x250/0x250 [ 2387.653572] ion_alloc+0x222/0x860 [ 2387.653589] ? ion_dma_buf_release+0x50/0x50 [ 2387.653604] ? kasan_check_write+0x14/0x20 [ 2387.653616] ? _copy_from_user+0x99/0x110 [ 2387.653629] ion_ioctl+0x105/0x217 [ 2387.653639] ? ion_alloc.cold+0x40/0x40 [ 2387.653652] ? ion_alloc.cold+0x40/0x40 [ 2387.653665] do_vfs_ioctl+0x7ae/0x1060 [ 2387.653678] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2387.653688] ? lock_downgrade+0x740/0x740 [ 2387.653700] ? ioctl_preallocate+0x1c0/0x1c0 [ 2387.653715] ? __fget+0x237/0x370 [ 2387.653731] ? security_file_ioctl+0x89/0xb0 [ 2387.653744] SyS_ioctl+0x8f/0xc0 [ 2387.653755] ? do_vfs_ioctl+0x1060/0x1060 [ 2387.653768] do_syscall_64+0x1e8/0x640 [ 2387.653779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2387.653794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2387.653801] RIP: 0033:0x45a909 [ 2387.653806] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2387.653816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2387.653822] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2387.653827] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2387.653834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2387.653841] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2387.666330] oom_reaper: reaped process 21537 (syz-executor.0), now anon-rss:17992kB, file-rss:3280kB, shmem-rss:0kB [ 2387.852770] syz-executor.2 invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask= [ 2387.890829] 0 [ 2387.908901] syz-executor.4: [ 2387.915159] , order=0, oom_score_adj=1000 [ 2387.934349] page allocation failure: order:4 [ 2387.936639] syz-executor.2 cpuset= [ 2387.942979] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2387.952356] syz2 [ 2387.953628] 0 [ 2387.956931] mems_allowed=0-1 [ 2387.960820] syz-executor.4 cpuset= [ 2387.969209] CPU: 1 PID: 21916 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2387.969928] syz4 [ 2387.973969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2387.977487] mems_allowed=0-1 [ 2387.981797] Call Trace: [ 2387.981813] dump_stack+0x142/0x197 [ 2387.981830] dump_header+0x177/0x6cd [ 2387.981840] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2387.981850] ? ___ratelimit+0x55/0x537 [ 2387.981862] oom_kill_process.cold+0x10/0xadd [ 2387.981871] ? oom_unkillable_task+0x294/0x390 [ 2387.981884] ? lock_downgrade+0x740/0x740 [ 2387.981898] out_of_memory+0x2ee/0x1180 [ 2387.981905] ? lock_acquire+0x16f/0x430 [ 2387.981916] ? __lock_is_held+0xb6/0x140 [ 2388.755572] ? oom_killer_disable+0x1d0/0x1d0 [ 2388.760070] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2388.764987] __alloc_pages_slowpath+0x2251/0x2930 [ 2388.769827] ? warn_alloc+0xf0/0xf0 [ 2388.773446] ? __might_sleep+0x93/0xb0 [ 2388.777319] __alloc_pages_nodemask+0x62c/0x7a0 [ 2388.781987] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2388.786747] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2388.791773] ? check_preemption_disabled+0x3c/0x250 [ 2388.796786] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2388.802400] alloc_pages_current+0xec/0x1e0 [ 2388.806711] __get_free_pages+0xf/0x40 [ 2388.810587] sg_kmalloc+0x4a/0x60 [ 2388.814037] __sg_alloc_table+0x26f/0x3b0 [ 2388.818175] ? sgl_alloc+0x30/0x30 [ 2388.821702] sg_alloc_table+0x3b/0x250 [ 2388.825593] ion_system_heap_allocate+0x371/0x910 [ 2388.830425] ? rcu_read_lock_sched_held+0x110/0x130 [ 2388.835430] ? ion_system_heap_free+0x250/0x250 [ 2388.840092] ion_alloc+0x222/0x860 [ 2388.843620] ? ion_dma_buf_release+0x50/0x50 [ 2388.848016] ? kasan_check_write+0x14/0x20 [ 2388.852237] ? _copy_from_user+0x99/0x110 [ 2388.856377] ion_ioctl+0x105/0x217 [ 2388.859909] ? ion_alloc.cold+0x40/0x40 [ 2388.863870] ? ion_alloc.cold+0x40/0x40 [ 2388.867832] do_vfs_ioctl+0x7ae/0x1060 [ 2388.871706] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2388.876446] ? lock_downgrade+0x740/0x740 [ 2388.880596] ? ioctl_preallocate+0x1c0/0x1c0 [ 2388.884989] ? __fget+0x237/0x370 [ 2388.888430] ? security_file_ioctl+0x89/0xb0 [ 2388.892825] SyS_ioctl+0x8f/0xc0 [ 2388.896175] ? do_vfs_ioctl+0x1060/0x1060 [ 2388.900315] do_syscall_64+0x1e8/0x640 [ 2388.904185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2388.909019] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2388.914193] RIP: 0033:0x45a909 [ 2388.917368] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2388.925068] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2388.932334] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2388.939610] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2388.946878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2388.954142] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2388.961417] CPU: 0 PID: 21887 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2388.969309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2388.978643] Mem-Info: [ 2388.978680] Call Trace: [ 2388.981152] active_anon:284156 inactive_anon:196 isolated_anon:0 [ 2388.981152] active_file:1605 inactive_file:5172 isolated_file:0 [ 2388.981152] unevictable:0 dirty:32 writeback:0 unstable:0 [ 2388.981152] slab_reclaimable:14208 slab_unreclaimable:114926 [ 2388.981152] mapped:57330 shmem:379 pagetables:7983 bounce:0 [ 2388.981152] free:946723 free_pcp:88 free_cma:0 [ 2388.983656] dump_stack+0x142/0x197 [ 2388.983672] warn_alloc.cold+0x96/0x1af [ 2388.983692] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2389.021271] Node 0 active_anon:1136096kB inactive_anon:772kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208972kB dirty:16kB writeback:0kB shmem:1508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2389.024738] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2389.024753] __alloc_pages_slowpath+0x23c6/0x2930 [ 2389.024771] ? save_trace+0x290/0x290 [ 2389.032182] Node 0 [ 2389.057091] ? warn_alloc+0xf0/0xf0 [ 2389.057114] ? __might_sleep+0x93/0xb0 [ 2389.057127] __alloc_pages_nodemask+0x62c/0x7a0 [ 2389.057140] ? lock_downgrade+0x740/0x740 [ 2389.057150] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2389.057163] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2389.057176] alloc_pages_current+0xec/0x1e0 [ 2389.057193] ion_page_pool_alloc+0x11f/0x1c0 [ 2389.057205] ion_system_heap_allocate+0x138/0x910 [ 2389.057221] ? ion_system_heap_free+0x250/0x250 [ 2389.057236] ion_alloc+0x68c/0x860 [ 2389.057253] ? ion_dma_buf_release+0x50/0x50 [ 2389.057268] ? kasan_check_write+0x14/0x20 [ 2389.057279] ? _copy_from_user+0x99/0x110 [ 2389.057291] ion_ioctl+0x105/0x217 [ 2389.057302] ? ion_alloc.cold+0x40/0x40 [ 2389.057318] ? ion_alloc.cold+0x40/0x40 [ 2389.057327] do_vfs_ioctl+0x7ae/0x1060 [ 2389.057337] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2389.057344] ? lock_downgrade+0x740/0x740 [ 2389.057354] ? ioctl_preallocate+0x1c0/0x1c0 [ 2389.057367] ? __fget+0x237/0x370 [ 2389.057382] ? security_file_ioctl+0x89/0xb0 [ 2389.057394] SyS_ioctl+0x8f/0xc0 [ 2389.057402] ? do_vfs_ioctl+0x1060/0x1060 [ 2389.057413] do_syscall_64+0x1e8/0x640 [ 2389.057425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2389.066515] DMA free:10412kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2389.067552] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2389.067562] RIP: 0033:0x45a909 [ 2389.071404] lowmem_reserve[]: [ 2389.073564] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2389.073576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2389.073581] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2389.073587] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2389.073592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2389.073599] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2389.077228] 0 [ 2389.085923] warn_alloc_show_mem: 1 callbacks suppressed [ 2389.085927] Mem-Info: [ 2389.094609] 2569 [ 2389.095285] active_anon:284129 inactive_anon:194 isolated_anon:0 [ 2389.095285] active_file:1614 inactive_file:5194 isolated_file:0 [ 2389.095285] unevictable:0 dirty:54 writeback:0 unstable:0 [ 2389.095285] slab_reclaimable:14183 slab_unreclaimable:114940 [ 2389.095285] mapped:57313 shmem:379 pagetables:7981 bounce:0 [ 2389.095285] free:946703 free_pcp:246 free_cma:0 [ 2389.100941] 2569 [ 2389.105551] Node 0 active_anon:1136080kB inactive_anon:764kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:16kB writeback:0kB shmem:1504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2389.113762] 2569 [ 2389.114749] Node 1 active_anon:436kB inactive_anon:12kB active_file:6444kB inactive_file:20764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20348kB dirty:200kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2389.119383] 2569 [ 2389.123290] Node 0 [ 2389.131624] DMA free:10412kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2389.131627] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2389.131649] Node 0 DMA32 free:25720kB min:36380kB low:45472kB high:54564kB active_anon:1136080kB inactive_anon:764kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:16kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15904kB pagetables:31860kB bounce:0kB free_pcp:488kB local_pcp:228kB free_cma:0kB [ 2389.131672] lowmem_reserve[]: [ 2389.139657] Node 0 [ 2389.143750] 0 [ 2389.147360] DMA32 free:25720kB min:36380kB low:45472kB high:54564kB active_anon:1136080kB inactive_anon:764kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:16kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15904kB pagetables:31860kB bounce:0kB free_pcp:488kB local_pcp:260kB free_cma:0kB [ 2389.151577] 0 [ 2389.159264] lowmem_reserve[]: [ 2389.160526] 0 [ 2389.165388] 0 [ 2389.168217] 0 [ 2389.175930] 0 [ 2389.176152] 0 [ 2389.180946] 0 [ 2389.188948] 0 [ 2389.214567] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2389.214589] lowmem_reserve[]: 0 0 0 0 0 [ 2389.214613] Node 1 Normal free:3750680kB min:53508kB low:66884kB high:80260kB active_anon:436kB inactive_anon:12kB active_file:6444kB inactive_file:20764kB unevictable:0kB writepending:200kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:32kB pagetables:64kB bounce:0kB free_pcp:492kB local_pcp:364kB free_cma:0kB [ 2389.214636] lowmem_reserve[]: 0 0 0 0 0 [ 2389.214658] Node 0 DMA: 11*4kB (UE) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 3*64kB (UE) 4*128kB (UE) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10412kB [ 2389.214730] Node 0 DMA32: 3286*4kB (UME) 425*8kB (UME) 71*16kB (UME) 252*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 2389.224166] 0 [ 2389.227204] = 25744kB [ 2389.241423] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2389.241474] Node 1 Normal: 6*4kB (UME) 184*8kB (UME) 278*16kB (UE) 69*32kB (UME) 27*64kB (UE) 7*128kB (UE) [ 2389.252692] Node 0 [ 2389.256308] 3*256kB [ 2389.263573] Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2389.271074] (UM) [ 2389.276698] lowmem_reserve[]: [ 2389.278230] 1*512kB [ 2389.280833] 0 [ 2389.283068] (E) [ 2389.332056] 0 [ 2389.346473] 3*1024kB [ 2389.352295] 0 [ 2389.380054] (UE) 2*2048kB (U) 911*4096kB (UM) = 3750680kB [ 2389.380082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2389.380092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2389.405943] 0 [ 2389.414692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2389.440486] 0 [ 2389.443462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2389.447334] 7187 total pagecache pages [ 2389.476265] Node 0 [ 2389.482222] 0 pages in swap cache [ 2389.482896] DMA: [ 2389.484778] Swap cache stats: add 0, delete 0, find 0/0 [ 2389.486402] 11*4kB [ 2389.488244] Free swap = 0kB [ 2389.492657] (UE) [ 2389.493843] Total swap = 0kB [ 2389.521783] 2*8kB [ 2389.523786] 1965979 pages RAM [ 2389.556090] (UE) [ 2389.571372] 0 pages HighMem/MovableOnly [ 2389.588105] 1*16kB [ 2389.588606] 335858 pages reserved [ 2389.606512] (E) [ 2389.609743] 0 pages cma reserved [ 2389.611743] 5*32kB [ 2389.749603] syz-executor.4: [ 2389.751693] (UE) [ 2389.753717] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2389.753737] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2389.753759] CPU: 0 PID: 21887 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2389.756818] 3*64kB [ 2389.758810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2389.758814] Call Trace: [ 2389.758831] dump_stack+0x142/0x197 [ 2389.758846] warn_alloc.cold+0x96/0x1af [ 2389.758856] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2389.769043] (UE) [ 2389.774197] ? call_timer_fn+0x670/0x670 [ 2389.774219] __alloc_pages_slowpath+0x23c6/0x2930 [ 2389.774246] ? warn_alloc+0xf0/0xf0 [ 2389.774266] ? __might_sleep+0x93/0xb0 [ 2389.774278] __alloc_pages_nodemask+0x62c/0x7a0 [ 2389.774288] ? lock_downgrade+0x740/0x740 [ 2389.774298] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2389.774312] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2389.782324] 4*128kB [ 2389.784412] alloc_pages_current+0xec/0x1e0 [ 2389.784428] ion_page_pool_alloc+0x11f/0x1c0 [ 2389.784442] ion_system_heap_allocate+0x138/0x910 [ 2389.793932] (UE) [ 2389.796381] ? ion_system_heap_free+0x250/0x250 [ 2389.796397] ion_alloc+0x68c/0x860 [ 2389.796412] ? ion_dma_buf_release+0x50/0x50 [ 2389.800132] 3*256kB [ 2389.803984] ? kasan_check_write+0x14/0x20 [ 2389.803996] ? _copy_from_user+0x99/0x110 [ 2389.804011] ion_ioctl+0x105/0x217 [ 2389.804021] ? ion_alloc.cold+0x40/0x40 [ 2389.804035] ? ion_alloc.cold+0x40/0x40 [ 2389.808931] (UE) [ 2389.810907] do_vfs_ioctl+0x7ae/0x1060 [ 2389.810919] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2389.810930] ? lock_downgrade+0x740/0x740 [ 2389.810942] ? ioctl_preallocate+0x1c0/0x1c0 [ 2389.810954] ? __fget+0x237/0x370 [ 2389.810969] ? security_file_ioctl+0x89/0xb0 [ 2389.810981] SyS_ioctl+0x8f/0xc0 [ 2389.815089] 3*512kB [ 2389.819850] ? do_vfs_ioctl+0x1060/0x1060 [ 2389.819862] do_syscall_64+0x1e8/0x640 [ 2389.819872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2389.819890] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2389.819898] RIP: 0033:0x45a909 [ 2389.819903] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2389.819913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2389.819918] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2389.819923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2389.819928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2389.819933] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2390.000227] (UE) 3*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10412kB [ 2390.006359] Node 0 DMA32: 2605*4kB (UME) 243*8kB (UME) 28*16kB (UME) 74*32kB (UM) 29*64kB (UM) 22*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19852kB [ 2390.021180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2390.032064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2390.041014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2390.049724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2390.058608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2390.067332] 7195 total pagecache pages [ 2390.071367] 0 pages in swap cache [ 2390.074831] Swap cache stats: add 0, delete 0, find 0/0 [ 2390.080292] Free swap = 0kB [ 2390.083346] Total swap = 0kB [ 2390.086376] 1965979 pages RAM [ 2390.089594] 0 pages HighMem/MovableOnly [ 2390.093630] 335858 pages reserved [ 2390.097082] 0 pages cma reserved [ 2390.100525] Out of memory: Kill process 21512 (syz-executor.2) score 1009 or sacrifice child [ 2390.109868] Killed process 21512 (syz-executor.2) total-vm:73380kB, anon-rss:16588kB, file-rss:34816kB, shmem-rss:0kB 00:39:50 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:50 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:50 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:50 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2390.142831] oom_reaper: reaped process 21512 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:39:50 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:50 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:50 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:50 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(0x0, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:50 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2390.753974] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2390.769875] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2390.804097] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 2390.809741] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2390.831316] CPU: 0 PID: 21930 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2390.839270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2390.839275] Call Trace: [ 2390.839292] dump_stack+0x142/0x197 [ 2390.839308] warn_alloc.cold+0x96/0x1af [ 2390.839318] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2390.839336] ? __alloc_pages_direct_compact+0x290/0x380 [ 2390.839348] __alloc_pages_slowpath+0x23c6/0x2930 [ 2390.839365] ? save_trace+0x290/0x290 [ 2390.839380] ? warn_alloc+0xf0/0xf0 [ 2390.839400] ? __might_sleep+0x93/0xb0 [ 2390.839412] __alloc_pages_nodemask+0x62c/0x7a0 [ 2390.839421] ? lock_downgrade+0x740/0x740 [ 2390.839439] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2390.839453] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2390.839469] alloc_pages_current+0xec/0x1e0 [ 2390.839483] ion_page_pool_alloc+0x11f/0x1c0 [ 2390.839493] ion_system_heap_allocate+0x138/0x910 [ 2390.839502] ? ion_alloc+0x19b/0x860 [ 2390.839511] ? rcu_read_lock_sched_held+0x110/0x130 [ 2390.839522] ? ion_system_heap_free+0x250/0x250 [ 2390.839536] ion_alloc+0x222/0x860 [ 2390.839548] ? ion_dma_buf_release+0x50/0x50 [ 2390.839563] ? kasan_check_write+0x14/0x20 [ 2390.839575] ? _copy_from_user+0x99/0x110 [ 2390.839586] ion_ioctl+0x105/0x217 [ 2390.839595] ? ion_alloc.cold+0x40/0x40 [ 2390.839608] ? ion_alloc.cold+0x40/0x40 [ 2390.839618] do_vfs_ioctl+0x7ae/0x1060 [ 2390.839628] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2390.839636] ? lock_downgrade+0x740/0x740 [ 2390.839646] ? ioctl_preallocate+0x1c0/0x1c0 [ 2390.839657] ? __fget+0x237/0x370 [ 2390.839674] ? security_file_ioctl+0x89/0xb0 [ 2390.839687] SyS_ioctl+0x8f/0xc0 [ 2390.839696] ? do_vfs_ioctl+0x1060/0x1060 [ 2390.839709] do_syscall_64+0x1e8/0x640 [ 2390.839719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2390.839736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2390.839744] RIP: 0033:0x45a909 [ 2390.839749] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2390.839760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2390.839766] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2390.839772] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2390.839777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2390.839783] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2390.841164] CPU: 0 PID: 21928 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2390.900738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2390.900743] Call Trace: [ 2390.900760] dump_stack+0x142/0x197 [ 2390.900773] warn_alloc.cold+0x96/0x1af [ 2390.900782] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2390.900800] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2390.900811] __alloc_pages_slowpath+0x23c6/0x2930 [ 2390.900828] ? save_trace+0x290/0x290 [ 2390.900842] ? warn_alloc+0xf0/0xf0 [ 2390.900861] ? __might_sleep+0x93/0xb0 [ 2390.900872] __alloc_pages_nodemask+0x62c/0x7a0 [ 2390.915209] ? lock_downgrade+0x740/0x740 [ 2390.915223] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2390.915238] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2390.949725] alloc_pages_current+0xec/0x1e0 [ 2390.949743] ion_page_pool_alloc+0x11f/0x1c0 [ 2390.949753] ion_system_heap_allocate+0x138/0x910 [ 2390.949762] ? ion_alloc+0x19b/0x860 [ 2390.949772] ? rcu_read_lock_sched_held+0x110/0x130 [ 2390.949784] ? ion_system_heap_free+0x250/0x250 [ 2390.949797] ion_alloc+0x222/0x860 [ 2390.949811] ? ion_dma_buf_release+0x50/0x50 [ 2390.949825] ? kasan_check_write+0x14/0x20 [ 2390.957323] ? _copy_from_user+0x99/0x110 [ 2390.957337] ion_ioctl+0x105/0x217 [ 2390.957347] ? ion_alloc.cold+0x40/0x40 [ 2390.982170] warn_alloc_show_mem: 1 callbacks suppressed [ 2390.982217] Mem-Info: [ 2390.986339] ? ion_alloc.cold+0x40/0x40 [ 2390.986354] do_vfs_ioctl+0x7ae/0x1060 [ 2390.986365] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2390.986378] ? lock_downgrade+0x740/0x740 [ 2390.991887] active_anon:280974 inactive_anon:194 isolated_anon:0 [ 2390.991887] active_file:1606 inactive_file:5208 isolated_file:0 [ 2390.991887] unevictable:0 dirty:82 writeback:0 unstable:0 [ 2390.991887] slab_reclaimable:14179 slab_unreclaimable:114838 [ 2390.991887] mapped:57338 shmem:379 pagetables:7944 bounce:0 [ 2390.991887] free:910032 free_pcp:99 free_cma:0 [ 2390.993868] ? ioctl_preallocate+0x1c0/0x1c0 [ 2390.993882] ? __fget+0x237/0x370 [ 2390.993919] ? security_file_ioctl+0x89/0xb0 [ 2390.997869] Node 0 active_anon:1123460kB inactive_anon:764kB active_file:8kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:0kB shmem:1504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 634880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2391.002620] SyS_ioctl+0x8f/0xc0 [ 2391.002630] ? do_vfs_ioctl+0x1060/0x1060 [ 2391.002643] do_syscall_64+0x1e8/0x640 [ 2391.002650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2391.002665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2391.002672] RIP: 0033:0x45a909 [ 2391.002677] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2391.002689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2391.002694] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2391.002700] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2391.002705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2391.002710] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2391.337944] Node 0 DMA free:12544kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.378193] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2391.385044] Node 0 DMA32 free:266380kB min:36380kB low:45472kB high:54564kB active_anon:1121300kB inactive_anon:768kB active_file:40kB inactive_file:68kB unevictable:0kB writepending:52kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15872kB pagetables:31736kB bounce:0kB free_pcp:1108kB local_pcp:684kB free_cma:0kB [ 2391.415683] lowmem_reserve[]: 0 0 0 0 0 [ 2391.419809] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2391.445554] lowmem_reserve[]: 0 0 0 0 0 [ 2391.449653] Node 0 DMA: 6*4kB (UE) 3*8kB (UE) 3*16kB (UE) 5*32kB (UE) 4*64kB (UE) 4*128kB (UE) 3*256kB (UE) 3*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12544kB [ 2391.465192] Node 0 DMA32: 2747*4kB (UME) 1695*8kB (UME) 575*16kB (UME) 810*32kB (UME) 288*64kB (UM) 105*128kB (UM) 352*256kB (UM) 45*512kB (U) 50*1024kB (U) 5*2048kB (UM) 0*4096kB = 266132kB [ 2391.482657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2391.493539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2391.503035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2391.511842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2391.520867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2391.529566] 7217 total pagecache pages [ 2391.533603] 0 pages in swap cache [ 2391.537189] Swap cache stats: add 0, delete 0, find 0/0 [ 2391.542761] Free swap = 0kB [ 2391.545820] Total swap = 0kB [ 2391.548900] 1965979 pages RAM [ 2391.552086] 0 pages HighMem/MovableOnly [ 2391.556108] 335858 pages reserved [ 2391.559696] 0 pages cma reserved 00:39:51 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:51 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x0) 00:39:51 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:51 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:51 executing program 1: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:51 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x0, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:51 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) [ 2392.032103] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2392.053567] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2392.096699] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2392.108795] CPU: 0 PID: 21982 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2392.109529] syz-executor.4 cpuset= [ 2392.116719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2392.116724] Call Trace: [ 2392.116742] dump_stack+0x142/0x197 [ 2392.116758] warn_alloc.cold+0x96/0x1af [ 2392.116768] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2392.116788] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2392.139515] syz4 [ 2392.139842] __alloc_pages_slowpath+0x23c6/0x2930 [ 2392.144707] mems_allowed=0-1 [ 2392.149939] ? save_trace+0x290/0x290 [ 2392.149956] ? warn_alloc+0xf0/0xf0 [ 2392.149976] ? __might_sleep+0x93/0xb0 [ 2392.149987] __alloc_pages_nodemask+0x62c/0x7a0 [ 2392.149997] ? lock_downgrade+0x740/0x740 [ 2392.180187] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2392.185193] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2392.190817] alloc_pages_current+0xec/0x1e0 [ 2392.195148] ion_page_pool_alloc+0x11f/0x1c0 [ 2392.199556] ion_system_heap_allocate+0x138/0x910 [ 2392.204382] ? ion_alloc+0x19b/0x860 [ 2392.208084] ? rcu_read_lock_sched_held+0x110/0x130 [ 2392.213093] ? ion_system_heap_free+0x250/0x250 [ 2392.217749] ion_alloc+0x222/0x860 [ 2392.221277] ? ion_dma_buf_release+0x50/0x50 [ 2392.225675] ? kasan_check_write+0x14/0x20 [ 2392.229896] ? _copy_from_user+0x99/0x110 [ 2392.234044] ion_ioctl+0x105/0x217 [ 2392.237570] ? ion_alloc.cold+0x40/0x40 [ 2392.241530] ? ion_alloc.cold+0x40/0x40 [ 2392.245489] do_vfs_ioctl+0x7ae/0x1060 [ 2392.249365] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2392.254119] ? lock_downgrade+0x740/0x740 [ 2392.258255] ? ioctl_preallocate+0x1c0/0x1c0 [ 2392.262650] ? __fget+0x237/0x370 [ 2392.266096] ? security_file_ioctl+0x89/0xb0 [ 2392.270494] SyS_ioctl+0x8f/0xc0 [ 2392.273862] ? do_vfs_ioctl+0x1060/0x1060 [ 2392.277996] do_syscall_64+0x1e8/0x640 [ 2392.281869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2392.286700] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2392.291888] RIP: 0033:0x45a909 [ 2392.295063] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2392.302755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2392.310008] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2392.317261] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2392.324529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2392.331784] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2392.339053] CPU: 1 PID: 21971 Comm: syz-executor.4 Not tainted 4.14.158-syzkaller #0 [ 2392.346947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2392.353572] warn_alloc_show_mem: 1 callbacks suppressed [ 2392.353575] Mem-Info: [ 2392.356316] Call Trace: [ 2392.356334] dump_stack+0x142/0x197 [ 2392.356349] warn_alloc.cold+0x96/0x1af [ 2392.356360] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2392.356379] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2392.356396] __alloc_pages_slowpath+0x23c6/0x2930 [ 2392.365841] active_anon:282542 inactive_anon:192 isolated_anon:0 [ 2392.365841] active_file:1620 inactive_file:5222 isolated_file:0 [ 2392.365841] unevictable:0 dirty:134 writeback:0 unstable:0 [ 2392.365841] slab_reclaimable:14178 slab_unreclaimable:114653 [ 2392.365841] mapped:57390 shmem:379 pagetables:8023 bounce:0 [ 2392.365841] free:895360 free_pcp:28 free_cma:0 [ 2392.366722] ? save_trace+0x290/0x290 [ 2392.370990] Node 0 active_anon:1129760kB inactive_anon:768kB active_file:64kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:80kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 636928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2392.374290] ? warn_alloc+0xf0/0xf0 [ 2392.374312] ? __might_sleep+0x93/0xb0 [ 2392.374324] __alloc_pages_nodemask+0x62c/0x7a0 [ 2392.374336] ? lock_downgrade+0x740/0x740 [ 2392.374346] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2392.374360] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2392.379358] Node 0 [ 2392.384458] alloc_pages_current+0xec/0x1e0 [ 2392.384473] ion_page_pool_alloc+0x11f/0x1c0 [ 2392.384484] ion_system_heap_allocate+0x138/0x910 [ 2392.384493] ? ion_alloc+0x19b/0x860 [ 2392.384504] ? rcu_read_lock_sched_held+0x110/0x130 [ 2392.384517] ? ion_system_heap_free+0x250/0x250 [ 2392.384532] ion_alloc+0x222/0x860 [ 2392.384547] ? ion_dma_buf_release+0x50/0x50 [ 2392.384560] ? kasan_check_write+0x14/0x20 [ 2392.384570] ? _copy_from_user+0x99/0x110 [ 2392.384581] ion_ioctl+0x105/0x217 [ 2392.384591] ? ion_alloc.cold+0x40/0x40 [ 2392.384605] ? ion_alloc.cold+0x40/0x40 [ 2392.384617] do_vfs_ioctl+0x7ae/0x1060 [ 2392.396541] DMA free:10508kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2392.423021] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2392.423033] ? lock_downgrade+0x740/0x740 [ 2392.423046] ? ioctl_preallocate+0x1c0/0x1c0 [ 2392.423059] ? __fget+0x237/0x370 [ 2392.423075] ? security_file_ioctl+0x89/0xb0 [ 2392.423085] SyS_ioctl+0x8f/0xc0 [ 2392.423093] ? do_vfs_ioctl+0x1060/0x1060 [ 2392.423105] do_syscall_64+0x1e8/0x640 [ 2392.423113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2392.423129] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2392.423136] RIP: 0033:0x45a909 [ 2392.423141] RSP: 002b:00007f5ce7cc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2392.423151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2392.423156] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2392.423161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2392.423167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ce7cc36d4 [ 2392.423171] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2392.424115] syz-executor.2: [ 2392.431867] lowmem_reserve[]: [ 2392.463639] page allocation failure: order:4 [ 2392.477617] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2392.498583] 0 [ 2392.503907] 0 [ 2392.507824] syz-executor.2 cpuset= [ 2392.522724] 2569 [ 2392.524860] syz2 mems_allowed=0-1 [ 2392.524879] CPU: 1 PID: 21986 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2392.524884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2392.524887] Call Trace: [ 2392.524900] dump_stack+0x142/0x197 [ 2392.524914] warn_alloc.cold+0x96/0x1af [ 2392.524923] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2392.524939] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2392.524951] __alloc_pages_slowpath+0x23c6/0x2930 [ 2392.541118] 2569 [ 2392.544426] ? save_trace+0x290/0x290 [ 2392.544444] ? warn_alloc+0xf0/0xf0 [ 2392.544468] ? __might_sleep+0x93/0xb0 [ 2392.593264] 2569 [ 2392.594452] __alloc_pages_nodemask+0x62c/0x7a0 [ 2392.594467] ? lock_downgrade+0x740/0x740 [ 2392.594477] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2392.594491] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2392.598714] 2569 [ 2392.602502] alloc_pages_current+0xec/0x1e0 [ 2392.602517] ion_page_pool_alloc+0x11f/0x1c0 [ 2392.602528] ion_system_heap_allocate+0x138/0x910 [ 2392.602537] ? ion_alloc+0x19b/0x860 [ 2392.602548] ? rcu_read_lock_sched_held+0x110/0x130 [ 2392.602562] ? ion_system_heap_free+0x250/0x250 [ 2392.602577] ion_alloc+0x222/0x860 [ 2392.602590] ? ion_dma_buf_release+0x50/0x50 [ 2392.602603] ? kasan_check_write+0x14/0x20 [ 2392.602613] ? _copy_from_user+0x99/0x110 [ 2392.602623] ion_ioctl+0x105/0x217 [ 2392.602632] ? ion_alloc.cold+0x40/0x40 [ 2392.602646] ? ion_alloc.cold+0x40/0x40 [ 2392.602656] do_vfs_ioctl+0x7ae/0x1060 [ 2392.602666] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2392.602673] ? lock_downgrade+0x740/0x740 [ 2392.602684] ? ioctl_preallocate+0x1c0/0x1c0 [ 2392.615891] ? __fget+0x237/0x370 [ 2392.615911] ? security_file_ioctl+0x89/0xb0 [ 2392.615923] SyS_ioctl+0x8f/0xc0 [ 2392.615933] ? do_vfs_ioctl+0x1060/0x1060 [ 2392.625282] Node 0 [ 2392.630908] do_syscall_64+0x1e8/0x640 [ 2392.630920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2392.630938] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2392.630945] RIP: 0033:0x45a909 [ 2392.630949] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2392.630960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2392.630965] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2392.630970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2392.630975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2392.630980] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2392.846624] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2392.866900] DMA32 free:36568kB min:36380kB low:45472kB high:54564kB active_anon:1127672kB inactive_anon:768kB active_file:64kB inactive_file:40kB unevictable:0kB writepending:80kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15904kB pagetables:32028kB bounce:0kB free_pcp:604kB local_pcp:0kB free_cma:0kB [ 2392.866906] lowmem_reserve[]: [ 2392.877565] 0 [ 2392.883525] 0 [ 2392.888353] , order=0, oom_score_adj=1000 [ 2392.895666] 0 [ 2392.908075] syz-executor.2 cpuset= [ 2392.910167] 0 0 0 [ 2392.910182] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2392.910201] lowmem_reserve[]: 0 0 0 0 0 [ 2392.910221] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10488kB [ 2392.910298] Node 0 DMA32: 2018*4kB (ME) 1419*8kB (ME) [ 2392.917939] syz2 [ 2392.924890] 315*16kB [ 2392.940751] mems_allowed=0-1 [ 2392.963705] (ME) 214*32kB (ME) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 2*2048kB (UM) 0*4096kB = 36368kB [ 2392.963767] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2392.963828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2392.963835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2392.963841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2392.963847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2392.963851] 7195 total pagecache pages [ 2392.963861] 0 pages in swap cache [ 2392.963867] Swap cache stats: add 0, delete 0, find 0/0 [ 2392.963871] Free swap = 0kB [ 2392.963874] Total swap = 0kB [ 2392.963880] 1965979 pages RAM [ 2392.963883] 0 pages HighMem/MovableOnly [ 2392.963886] 335858 pages reserved [ 2392.963889] 0 pages cma reserved [ 2393.130787] CPU: 1 PID: 21986 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2393.138670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2393.148012] Call Trace: [ 2393.150591] dump_stack+0x142/0x197 [ 2393.154205] dump_header+0x177/0x6cd [ 2393.157931] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2393.163020] ? ___ratelimit+0x55/0x537 [ 2393.166892] oom_kill_process.cold+0x10/0xadd [ 2393.171372] ? rcu_read_unlock_special+0x639/0xd40 [ 2393.176287] ? lock_downgrade+0x740/0x740 [ 2393.180424] out_of_memory+0x2ee/0x1180 [ 2393.184380] ? lock_acquire+0x16f/0x430 [ 2393.188354] ? __lock_is_held+0xb6/0x140 [ 2393.192421] ? oom_killer_disable+0x1d0/0x1d0 [ 2393.196915] ? __alloc_pages_slowpath+0xca4/0x2930 [ 2393.201830] __alloc_pages_slowpath+0x2251/0x2930 [ 2393.206670] ? warn_alloc+0xf0/0xf0 [ 2393.210289] ? __might_sleep+0x93/0xb0 [ 2393.214172] __alloc_pages_nodemask+0x62c/0x7a0 [ 2393.218825] ? lock_downgrade+0x740/0x740 [ 2393.223001] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2393.228015] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2393.233652] alloc_pages_current+0xec/0x1e0 [ 2393.238092] ion_page_pool_alloc+0x11f/0x1c0 [ 2393.242501] ion_system_heap_allocate+0x138/0x910 [ 2393.247339] ? ion_alloc+0x19b/0x860 [ 2393.251060] ? rcu_read_lock_sched_held+0x110/0x130 [ 2393.256065] ? ion_system_heap_free+0x250/0x250 [ 2393.260726] ion_alloc+0x222/0x860 [ 2393.264255] ? ion_dma_buf_release+0x50/0x50 [ 2393.268650] ? kasan_check_write+0x14/0x20 [ 2393.272872] ? _copy_from_user+0x99/0x110 [ 2393.277006] ion_ioctl+0x105/0x217 [ 2393.280530] ? ion_alloc.cold+0x40/0x40 [ 2393.284492] ? ion_alloc.cold+0x40/0x40 [ 2393.288449] do_vfs_ioctl+0x7ae/0x1060 [ 2393.292320] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2393.297064] ? lock_downgrade+0x740/0x740 [ 2393.301196] ? ioctl_preallocate+0x1c0/0x1c0 [ 2393.305590] ? __fget+0x237/0x370 [ 2393.309032] ? security_file_ioctl+0x89/0xb0 [ 2393.313425] SyS_ioctl+0x8f/0xc0 [ 2393.316774] ? do_vfs_ioctl+0x1060/0x1060 [ 2393.320909] do_syscall_64+0x1e8/0x640 [ 2393.324779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2393.329611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2393.334784] RIP: 0033:0x45a909 [ 2393.337959] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2393.345651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2393.352903] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2393.360154] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2393.367408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2393.374674] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2393.387520] Mem-Info: [ 2393.390211] active_anon:282008 inactive_anon:194 isolated_anon:0 [ 2393.390211] active_file:1606 inactive_file:5213 isolated_file:0 [ 2393.390211] unevictable:0 dirty:9 writeback:4 unstable:0 [ 2393.390211] slab_reclaimable:14178 slab_unreclaimable:114723 [ 2393.390211] mapped:57337 shmem:379 pagetables:7976 bounce:0 [ 2393.390211] free:949415 free_pcp:30 free_cma:0 00:39:53 executing program 4: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:53 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x0, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:53 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2393.426306] Node 0 active_anon:1127624kB inactive_anon:776kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:4kB writeback:4kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2393.470862] Node 0 DMA free:10488kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:39:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:53 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x0, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2393.630212] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2393.649309] Node 0 DMA32 free:40036kB min:36380kB low:45472kB high:54564kB active_anon:1129832kB inactive_anon:776kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:16000kB pagetables:31988kB bounce:0kB free_pcp:1292kB local_pcp:620kB free_cma:0kB 00:39:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) [ 2393.697215] lowmem_reserve[]: 0 0 0 0 0 [ 2393.715806] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:39:53 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2393.832210] lowmem_reserve[]: 0 0 0 0 0 [ 2393.853925] Node 0 DMA: 13*4kB (UE) 4*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 4*2048kB (UME) 0*4096kB = 10548kB [ 2393.906240] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2393.913401] Node 0 DMA32: 6204*4kB (UME) 5672*8kB (UME) 1488*16kB (UME) 1120*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 129840kB [ 2393.981095] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2393.993606] CPU: 1 PID: 22000 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2394.001538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2394.010896] Call Trace: [ 2394.013489] dump_stack+0x142/0x197 [ 2394.017150] warn_alloc.cold+0x96/0x1af [ 2394.021126] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2394.025977] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2394.031274] __alloc_pages_slowpath+0x23c6/0x2930 [ 2394.036127] ? save_trace+0x290/0x290 [ 2394.039940] ? warn_alloc+0xf0/0xf0 [ 2394.043577] ? __might_sleep+0x93/0xb0 [ 2394.047470] __alloc_pages_nodemask+0x62c/0x7a0 [ 2394.052144] ? lock_downgrade+0x740/0x740 [ 2394.056295] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2394.061323] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2394.066961] alloc_pages_current+0xec/0x1e0 [ 2394.071295] ion_page_pool_alloc+0x11f/0x1c0 [ 2394.075712] ion_system_heap_allocate+0x138/0x910 [ 2394.080556] ? ion_alloc+0x19b/0x860 [ 2394.084272] ? rcu_read_lock_sched_held+0x110/0x130 [ 2394.089296] ? ion_system_heap_free+0x250/0x250 [ 2394.093971] ion_alloc+0x222/0x860 [ 2394.097521] ? ion_dma_buf_release+0x50/0x50 [ 2394.101942] ? kasan_check_write+0x14/0x20 [ 2394.106175] ? _copy_from_user+0x99/0x110 [ 2394.110325] ion_ioctl+0x105/0x217 [ 2394.113870] ? ion_alloc.cold+0x40/0x40 [ 2394.117854] ? ion_alloc.cold+0x40/0x40 [ 2394.121829] do_vfs_ioctl+0x7ae/0x1060 [ 2394.123323] Node 0 [ 2394.125730] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2394.125743] ? lock_downgrade+0x740/0x740 [ 2394.125755] ? ioctl_preallocate+0x1c0/0x1c0 [ 2394.125765] ? __fget+0x237/0x370 [ 2394.131588] Normal: [ 2394.132753] ? security_file_ioctl+0x89/0xb0 [ 2394.132769] SyS_ioctl+0x8f/0xc0 [ 2394.132779] ? do_vfs_ioctl+0x1060/0x1060 [ 2394.139190] 0*4kB [ 2394.141315] do_syscall_64+0x1e8/0x640 [ 2394.141323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2394.141339] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2394.141347] RIP: 0033:0x45a909 [ 2394.141352] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.141363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2394.141369] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2394.141374] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2394.141379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2394.141383] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2394.148172] warn_alloc_show_mem: 2 callbacks suppressed [ 2394.148175] Mem-Info: [ 2394.165619] 0*8kB [ 2394.174428] active_anon:282008 inactive_anon:194 isolated_anon:0 [ 2394.174428] active_file:1615 inactive_file:5223 isolated_file:0 [ 2394.174428] unevictable:0 dirty:62 writeback:0 unstable:0 [ 2394.174428] slab_reclaimable:14167 slab_unreclaimable:115026 [ 2394.174428] mapped:57339 shmem:379 pagetables:7976 bounce:0 [ 2394.174428] free:921261 free_pcp:209 free_cma:0 [ 2394.181085] 0*16kB [ 2394.187066] Node 0 active_anon:1127620kB inactive_anon:772kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208908kB dirty:28kB writeback:0kB shmem:1512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 638976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2394.206954] 0*32kB [ 2394.212705] Node 0 [ 2394.225822] 0*64kB [ 2394.232904] DMA free:10488kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2394.238902] 0*128kB [ 2394.271552] lowmem_reserve[]: [ 2394.303777] 0*256kB [ 2394.314543] 0 2569 2569 2569 2569 [ 2394.345569] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2394.346630] Node 0 DMA32 free:36352kB min:36380kB low:45472kB high:54564kB active_anon:1127620kB inactive_anon:772kB active_file:44kB inactive_file:24kB unevictable:0kB writepending:28kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15904kB pagetables:31840kB bounce:0kB free_pcp:868kB local_pcp:536kB free_cma:0kB [ 2394.352163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2394.385581] lowmem_reserve[]: [ 2394.390754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2394.391723] 0 [ 2394.393928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2394.406741] 0 0 0 0 [ 2394.415007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2394.415967] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2394.441188] 7216 total pagecache pages [ 2394.458620] 0 pages in swap cache [ 2394.458711] lowmem_reserve[]: 0 0 0 0 0 [ 2394.462547] Swap cache stats: add 0, delete 0, find 0/0 [ 2394.466384] Node 0 [ 2394.474861] Free swap = 0kB [ 2394.479612] DMA: 2*4kB (UE) 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB [ 2394.480568] Total swap = 0kB [ 2394.480570] (E) 1*512kB [ 2394.489988] 1965979 pages RAM [ 2394.496847] (E) [ 2394.498539] 0 pages HighMem/MovableOnly [ 2394.498545] 335858 pages reserved [ 2394.500627] 1*1024kB [ 2394.505282] 0 pages cma reserved [ 2394.508135] (E) [ 2394.510511] Out of memory: Kill process 22668 (syz-executor.5) score 1007 or sacrifice child [ 2394.510546] Killed process 22668 (syz-executor.5) total-vm:72720kB, anon-rss:4264kB, file-rss:34816kB, shmem-rss:0kB [ 2394.535482] 4*2048kB (UME) 0*4096kB = 10488kB [ 2394.540138] Node 0 DMA32: 2948*4kB (UME) 1156*8kB (ME) 280*16kB (UME) 235*32kB (UME) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 0*4096kB = 36304kB [ 2394.555857] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2394.566893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2394.575923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2394.584704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2394.593717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2394.602520] 7216 total pagecache pages [ 2394.606504] 0 pages in swap cache [ 2394.610093] Swap cache stats: add 0, delete 0, find 0/0 [ 2394.615566] Free swap = 0kB [ 2394.618635] Total swap = 0kB [ 2394.621903] 1965979 pages RAM [ 2394.625278] 0 pages HighMem/MovableOnly [ 2394.629313] 335858 pages reserved [ 2394.632913] 0 pages cma reserved 00:39:55 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) 00:39:55 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:39:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, 0x0, 0x0) 00:39:55 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, 0x0, 0x0) 00:39:55 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:55 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2395.450552] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2395.466748] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 2395.474337] CPU: 1 PID: 22031 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 2395.482252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2395.491615] Call Trace: [ 2395.494211] dump_stack+0x142/0x197 [ 2395.497846] warn_alloc.cold+0x96/0x1af [ 2395.501828] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2395.506689] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2395.511971] __alloc_pages_slowpath+0x23c6/0x2930 [ 2395.516830] ? save_trace+0x290/0x290 [ 2395.520643] ? warn_alloc+0xf0/0xf0 [ 2395.524283] ? __might_sleep+0x93/0xb0 [ 2395.528175] __alloc_pages_nodemask+0x62c/0x7a0 [ 2395.532878] ? lock_downgrade+0x740/0x740 [ 2395.532892] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2395.542066] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2395.547706] alloc_pages_current+0xec/0x1e0 [ 2395.552044] ion_page_pool_alloc+0x11f/0x1c0 [ 2395.556465] ion_system_heap_allocate+0x138/0x910 [ 2395.561314] ? ion_alloc+0x19b/0x860 [ 2395.565034] ? rcu_read_lock_sched_held+0x110/0x130 [ 2395.570066] ? ion_system_heap_free+0x250/0x250 [ 2395.574741] ion_alloc+0x222/0x860 [ 2395.578288] ? ion_dma_buf_release+0x50/0x50 [ 2395.582701] ? kasan_check_write+0x14/0x20 [ 2395.586937] ? _copy_from_user+0x99/0x110 [ 2395.591092] ion_ioctl+0x105/0x217 [ 2395.594642] ? ion_alloc.cold+0x40/0x40 [ 2395.598635] ? ion_alloc.cold+0x40/0x40 [ 2395.602622] do_vfs_ioctl+0x7ae/0x1060 [ 2395.606515] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2395.611273] ? lock_downgrade+0x740/0x740 [ 2395.615425] ? ioctl_preallocate+0x1c0/0x1c0 [ 2395.619847] ? __fget+0x237/0x370 [ 2395.623313] ? security_file_ioctl+0x89/0xb0 [ 2395.627744] SyS_ioctl+0x8f/0xc0 [ 2395.631257] ? do_vfs_ioctl+0x1060/0x1060 [ 2395.635415] do_syscall_64+0x1e8/0x640 [ 2395.639319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2395.644193] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2395.649391] RIP: 0033:0x45a909 [ 2395.652593] RSP: 002b:00007f962bd6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2395.660318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2395.667603] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2395.675001] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2395.682295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f962bd6b6d4 [ 2395.689596] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2395.702140] Mem-Info: [ 2395.712244] active_anon:280477 inactive_anon:193 isolated_anon:0 [ 2395.712244] active_file:1618 inactive_file:5228 isolated_file:0 [ 2395.712244] unevictable:0 dirty:114 writeback:0 unstable:0 [ 2395.712244] slab_reclaimable:14165 slab_unreclaimable:114744 [ 2395.712244] mapped:57365 shmem:379 pagetables:7952 bounce:0 [ 2395.712244] free:959636 free_pcp:121 free_cma:0 [ 2395.720254] syz-executor.1: [ 2395.758231] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2395.768718] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2395.782752] CPU: 0 PID: 22029 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2395.784837] Node 0 active_anon:1121200kB inactive_anon:768kB active_file:40kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208904kB dirty:12kB writeback:0kB shmem:1512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 630784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2395.790772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2395.790777] Call Trace: [ 2395.790795] dump_stack+0x142/0x197 [ 2395.790812] warn_alloc.cold+0x96/0x1af [ 2395.790821] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2395.790836] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2395.790848] __alloc_pages_slowpath+0x23c6/0x2930 [ 2395.790867] ? save_trace+0x290/0x290 [ 2395.790880] ? warn_alloc+0xf0/0xf0 [ 2395.790897] ? __might_sleep+0x93/0xb0 [ 2395.790908] __alloc_pages_nodemask+0x62c/0x7a0 [ 2395.790917] ? lock_downgrade+0x740/0x740 [ 2395.790932] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2395.819033] Node 0 [ 2395.827961] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2395.827974] alloc_pages_current+0xec/0x1e0 [ 2395.827990] ion_page_pool_alloc+0x11f/0x1c0 [ 2395.828002] ion_system_heap_allocate+0x138/0x910 [ 2395.828011] ? ion_alloc+0x19b/0x860 [ 2395.828023] ? rcu_read_lock_sched_held+0x110/0x130 [ 2395.828036] ? ion_system_heap_free+0x250/0x250 [ 2395.828051] ion_alloc+0x222/0x860 [ 2395.828064] ? ion_dma_buf_release+0x50/0x50 [ 2395.828077] ? kasan_check_write+0x14/0x20 [ 2395.828087] ? _copy_from_user+0x99/0x110 [ 2395.828098] ion_ioctl+0x105/0x217 [ 2395.828116] ? ion_alloc.cold+0x40/0x40 [ 2395.835633] DMA free:10568kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.838277] ? ion_alloc.cold+0x40/0x40 [ 2395.838291] do_vfs_ioctl+0x7ae/0x1060 [ 2395.846603] lowmem_reserve[]: [ 2395.848408] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2395.848419] ? lock_downgrade+0x740/0x740 [ 2395.848434] ? ioctl_preallocate+0x1c0/0x1c0 [ 2395.853664] 0 [ 2395.857103] ? __fget+0x237/0x370 [ 2395.857120] ? security_file_ioctl+0x89/0xb0 [ 2395.857133] SyS_ioctl+0x8f/0xc0 [ 2395.860958] 2569 [ 2395.864767] ? do_vfs_ioctl+0x1060/0x1060 [ 2395.864782] do_syscall_64+0x1e8/0x640 [ 2395.864793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2395.869750] 2569 [ 2395.873609] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2395.873623] RIP: 0033:0x45a909 [ 2395.873628] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2395.873641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2395.878683] 2569 [ 2395.880863] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2395.880869] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2395.880874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2395.880878] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2395.914677] 2569 [ 2396.082327] Node 0 DMA32 free:36744kB min:36380kB low:45472kB high:54564kB active_anon:1121136kB inactive_anon:760kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:15840kB pagetables:31600kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2396.111667] lowmem_reserve[]: 0 0 0 0 0 [ 2396.115795] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2396.135635] oom_reaper: reaped process 22029 (syz-executor.1), now anon-rss:0kB, file-rss:16kB, shmem-rss:0kB [ 2396.145554] lowmem_reserve[]: 0 0 0 0 0 [ 2396.155397] Node 0 DMA: 167*4kB (UE) 3*8kB (UE) 6*16kB (UE) 5*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10484kB [ 2396.187070] Node 0 DMA32: 1619*4kB (ME) 919*8kB (ME) 214*16kB (UME) 208*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 25956kB [ 2396.204586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2396.215511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.225023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.233820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.242843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.251629] 7225 total pagecache pages [ 2396.255574] 0 pages in swap cache [ 2396.259062] Swap cache stats: add 0, delete 0, find 0/0 [ 2396.264583] Free swap = 0kB [ 2396.267640] Total swap = 0kB [ 2396.270742] 1965979 pages RAM [ 2396.273891] 0 pages HighMem/MovableOnly [ 2396.277926] 335858 pages reserved [ 2396.281513] 0 pages cma reserved 00:39:56 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, 0x0, 0x0) 00:39:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) 00:39:56 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040), 0x0) 00:39:56 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040), 0x0) 00:39:56 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:56 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0xc0000008000000b) 00:39:57 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040), 0x0) 00:39:57 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:57 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:58 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:39:59 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:39:59 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:39:59 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:39:59 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:39:59 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:39:59 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:39:59 executing program 1: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:40:00 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:40:00 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 00:40:00 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:40:00 executing program 1 (fault-call:6 fault-nth:0): set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:00 executing program 3 (fault-call:5 fault-nth:0): set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:00 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:00 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2400.238199] FAULT_INJECTION: forcing a failure. [ 2400.238199] name failslab, interval 1, probability 0, space 0, times 0 00:40:00 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) fstat(0xffffffffffffffff, &(0x7f0000001b80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xfeef) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) request_key(&(0x7f00000005c0)='pkcs7_test\x00', 0x0, &(0x7f0000000640)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r4) io_setup(0xa7e7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') [ 2400.313563] CPU: 1 PID: 22307 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2400.321538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.330905] Call Trace: [ 2400.333509] dump_stack+0x142/0x197 [ 2400.335795] FAULT_INJECTION: forcing a failure. [ 2400.335795] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.337150] should_fail.cold+0x10f/0x159 [ 2400.350737] FAULT_INJECTION: forcing a failure. [ 2400.350737] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.352529] should_failslab+0xdb/0x130 [ 2400.352538] __kmalloc+0x2f0/0x7a0 [ 2400.352547] ? mutex_trylock+0x168/0x1c0 [ 2400.352642] ? tty_write_lock+0x20/0x60 [ 2400.352656] ? tty_write+0x4b1/0x700 [ 2400.383155] tty_write+0x4b1/0x700 [ 2400.387253] ? n_hdlc_tty_poll+0x310/0x310 [ 2400.387265] __vfs_write+0x105/0x6b0 00:40:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r0, &(0x7f0000000080)="bdf30855e9e50bf7b480b5ee8ef6303ac587c3127d105c6ffa85b8a9c8e2930febd4d67fb362dff58f64bdfe4a44f69199a2f34c23d3286260337c72d99e2504dd6695c51ea26b82bac0185e3075ca37ffddc22db8d830046eb2e534b016b8d4ae21049e87e463046916d705b943a6c64f9587a89f81fdf70174b0a8", 0x7c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r1, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:00 executing program 3 (fault-call:5 fault-nth:1): set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:00 executing program 1 (fault-call:6 fault-nth:1): set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2400.387273] ? tty_read+0x270/0x270 00:40:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x180, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2400.387280] ? kernel_read+0x120/0x120 [ 2400.387289] ? __inode_security_revalidate+0xd6/0x130 [ 2400.387296] ? avc_policy_seqno+0x9/0x20 [ 2400.387302] ? selinux_file_permission+0x85/0x480 [ 2400.387312] ? security_file_permission+0x89/0x1f0 [ 2400.387320] ? rw_verify_area+0xea/0x2b0 [ 2400.387327] vfs_write+0x198/0x500 [ 2400.387335] SyS_write+0xfd/0x230 [ 2400.387342] ? SyS_read+0x230/0x230 [ 2400.387350] ? do_syscall_64+0x53/0x640 [ 2400.387362] ? SyS_read+0x230/0x230 [ 2400.387370] do_syscall_64+0x1e8/0x640 [ 2400.387377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.387389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2400.387395] RIP: 0033:0x45a909 00:40:00 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2400.387399] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2400.387407] RAX: ffffffffffffffda RBX: 00007f07988e3c90 RCX: 000000000045a909 [ 2400.387411] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 2400.387415] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2400.387419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2400.387423] R13: 00000000004c7ca0 R14: 00000000004e4d08 R15: 0000000000000004 [ 2400.387443] CPU: 0 PID: 22317 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 2400.387451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.387455] Call Trace: [ 2400.387468] dump_stack+0x142/0x197 [ 2400.387486] should_fail.cold+0x10f/0x159 [ 2400.387504] should_failslab+0xdb/0x130 [ 2400.387516] kmem_cache_alloc_trace+0x2e9/0x790 [ 2400.387535] ion_alloc+0x19b/0x860 [ 2400.387549] ? ion_dma_buf_release+0x50/0x50 [ 2400.387563] ? kasan_check_write+0x14/0x20 [ 2400.387573] ? _copy_from_user+0x99/0x110 [ 2400.387586] ion_ioctl+0x105/0x217 [ 2400.387597] ? ion_alloc.cold+0x40/0x40 [ 2400.387614] ? ion_alloc.cold+0x40/0x40 [ 2400.387626] do_vfs_ioctl+0x7ae/0x1060 [ 2400.387637] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2400.387648] ? lock_downgrade+0x740/0x740 [ 2400.387660] ? ioctl_preallocate+0x1c0/0x1c0 [ 2400.387674] ? __fget+0x237/0x370 [ 2400.387691] ? security_file_ioctl+0x89/0xb0 [ 2400.387704] SyS_ioctl+0x8f/0xc0 [ 2400.387715] ? do_vfs_ioctl+0x1060/0x1060 [ 2400.387727] do_syscall_64+0x1e8/0x640 [ 2400.387737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.387754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2400.387762] RIP: 0033:0x45a909 [ 2400.387768] RSP: 002b:00007f2b54a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.387779] RAX: ffffffffffffffda RBX: 00007f2b54a69c90 RCX: 000000000045a909 [ 2400.387785] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2400.387792] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2400.387798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b54a6a6d4 [ 2400.387804] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 0000000000000004 00:40:00 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x10, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCSSERIAL(r1, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}) [ 2400.398944] CPU: 0 PID: 22316 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2400.398958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.398963] Call Trace: [ 2400.398980] dump_stack+0x142/0x197 [ 2400.399000] should_fail.cold+0x10f/0x159 [ 2400.399018] should_failslab+0xdb/0x130 [ 2400.399031] kmem_cache_alloc_trace+0x2e9/0x790 [ 2400.399052] ion_alloc+0x19b/0x860 [ 2400.399070] ? ion_dma_buf_release+0x50/0x50 [ 2400.399085] ? kasan_check_write+0x14/0x20 [ 2400.399096] ? _copy_from_user+0x99/0x110 [ 2400.399108] ion_ioctl+0x105/0x217 [ 2400.399118] ? ion_alloc.cold+0x40/0x40 [ 2400.399131] ? ion_alloc.cold+0x40/0x40 [ 2400.399141] do_vfs_ioctl+0x7ae/0x1060 [ 2400.399153] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2400.399162] ? lock_downgrade+0x740/0x740 [ 2400.399177] ? ioctl_preallocate+0x1c0/0x1c0 [ 2400.399196] ? __fget+0x237/0x370 [ 2400.399215] ? security_file_ioctl+0x89/0xb0 [ 2400.399229] SyS_ioctl+0x8f/0xc0 [ 2400.399238] ? do_vfs_ioctl+0x1060/0x1060 [ 2400.399251] do_syscall_64+0x1e8/0x640 [ 2400.399260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.399276] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2400.399283] RIP: 0033:0x45a909 [ 2400.399289] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.399298] RAX: ffffffffffffffda RBX: 00007fd4d76a8c90 RCX: 000000000045a909 [ 2400.399304] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2400.399309] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2400.399316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2400.399322] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 0000000000000007 [ 2400.514193] FAULT_INJECTION: forcing a failure. [ 2400.514193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2400.514206] CPU: 1 PID: 22334 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2400.514212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.514221] Call Trace: [ 2400.514236] dump_stack+0x142/0x197 [ 2400.514254] should_fail.cold+0x10f/0x159 00:40:00 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:40:00 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sched_getscheduler(0xffffffffffffffff) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x40, 0x20, 0x19, 0x20, 0x0, 0x1f, 0x400, 0x18, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3b5, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x10000, 0x6, 0x4, 0x0, 0x185, 0x20, 0x1b43}, r1, 0xd, r2, 0x1) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48000) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)=0x22) r6 = getpgid(r5) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2d2c21cb31a10208, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r6, r7, 0x0, 0xb, &(0x7f00000001c0)='/dev/ttyS3\x00'}, 0x30) 00:40:00 executing program 3 (fault-call:5 fault-nth:2): set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0xc00) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x3, [0x2, 0x80, 0x1000]}, &(0x7f00000001c0)=0xa) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000040)={{0x3, 0x0, @identifier="a9614ac5de3b9831e7df7852abd19f73"}}) [ 2400.514269] __alloc_pages_nodemask+0x1d6/0x7a0 [ 2400.514282] ? lock_downgrade+0x740/0x740 [ 2400.514292] ? mutex_trylock+0x1c0/0x1c0 [ 2400.514304] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2400.514322] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2400.514339] alloc_pages_current+0xec/0x1e0 [ 2400.514363] ion_page_pool_alloc+0x11f/0x1c0 [ 2400.514378] ion_system_heap_allocate+0x138/0x910 [ 2400.514389] ? ion_alloc+0x19b/0x860 [ 2400.514401] ? rcu_read_lock_sched_held+0x110/0x130 [ 2400.514416] ? ion_system_heap_free+0x250/0x250 [ 2400.514433] ion_alloc+0x222/0x860 [ 2400.514449] ? ion_dma_buf_release+0x50/0x50 [ 2400.514465] ? kasan_check_write+0x14/0x20 [ 2400.514475] ? _copy_from_user+0x99/0x110 [ 2400.514488] ion_ioctl+0x105/0x217 [ 2400.514499] ? ion_alloc.cold+0x40/0x40 [ 2400.514516] ? ion_alloc.cold+0x40/0x40 [ 2400.514527] do_vfs_ioctl+0x7ae/0x1060 [ 2400.514539] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2400.514548] ? lock_downgrade+0x740/0x740 [ 2400.514560] ? ioctl_preallocate+0x1c0/0x1c0 [ 2400.514573] ? __fget+0x237/0x370 [ 2400.514590] ? security_file_ioctl+0x89/0xb0 [ 2400.514603] SyS_ioctl+0x8f/0xc0 [ 2400.514612] ? do_vfs_ioctl+0x1060/0x1060 [ 2400.514626] do_syscall_64+0x1e8/0x640 [ 2400.514636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.514652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2400.514660] RIP: 0033:0x45a909 [ 2400.514666] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.514678] RAX: ffffffffffffffda RBX: 00007fd4d76a8c90 RCX: 000000000045a909 [ 2400.514684] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2400.514690] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2400.514696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2400.514702] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 0000000000000007 [ 2400.522279] FAULT_INJECTION: forcing a failure. [ 2400.522279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2400.522293] CPU: 0 PID: 22333 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 2400.522305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.522310] Call Trace: [ 2400.522324] dump_stack+0x142/0x197 [ 2400.522343] should_fail.cold+0x10f/0x159 [ 2400.522360] __alloc_pages_nodemask+0x1d6/0x7a0 [ 2400.522375] ? lock_downgrade+0x740/0x740 [ 2400.522385] ? mutex_trylock+0x1c0/0x1c0 [ 2400.522399] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2400.522414] ? save_trace+0x290/0x290 [ 2400.522431] alloc_pages_current+0xec/0x1e0 [ 2400.522446] ion_page_pool_alloc+0x11f/0x1c0 [ 2400.522458] ion_system_heap_allocate+0x138/0x910 [ 2400.522469] ? ion_alloc+0x19b/0x860 [ 2400.522480] ? rcu_read_lock_sched_held+0x110/0x130 [ 2400.522493] ? ion_system_heap_free+0x250/0x250 [ 2400.522509] ion_alloc+0x222/0x860 [ 2400.522526] ? ion_dma_buf_release+0x50/0x50 [ 2400.522541] ? kasan_check_write+0x14/0x20 [ 2400.522552] ? _copy_from_user+0x99/0x110 [ 2400.522564] ion_ioctl+0x105/0x217 [ 2400.522575] ? ion_alloc.cold+0x40/0x40 [ 2400.522591] ? ion_alloc.cold+0x40/0x40 [ 2400.522602] do_vfs_ioctl+0x7ae/0x1060 [ 2400.522614] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2400.522624] ? lock_downgrade+0x740/0x740 [ 2400.522636] ? ioctl_preallocate+0x1c0/0x1c0 [ 2400.522649] ? __fget+0x237/0x370 [ 2400.522667] ? security_file_ioctl+0x89/0xb0 [ 2400.522680] SyS_ioctl+0x8f/0xc0 [ 2400.522690] ? do_vfs_ioctl+0x1060/0x1060 [ 2400.522704] do_syscall_64+0x1e8/0x640 [ 2400.522714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2400.522731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2400.522739] RIP: 0033:0x45a909 [ 2400.522745] RSP: 002b:00007f2b54a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2400.522756] RAX: ffffffffffffffda RBX: 00007f2b54a69c90 RCX: 000000000045a909 [ 2400.522762] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2400.522768] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2400.522774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b54a6a6d4 [ 2400.522780] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 0000000000000004 [ 2400.530091] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2401.033773] FAULT_INJECTION: forcing a failure. [ 2401.033773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2401.053026] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2401.058358] syz-executor.1: [ 2401.072295] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2401.088267] page allocation failure: order:4 [ 2401.092360] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2401.105233] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 2401.110268] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2401.119104] FAULT_INJECTION: forcing a failure. [ 2401.119104] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.132899] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2401.138113] CPU: 0 PID: 22352 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2401.138119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.138123] Call Trace: [ 2401.138140] dump_stack+0x142/0x197 [ 2401.138157] should_fail.cold+0x10f/0x159 [ 2401.138170] should_failslab+0xdb/0x130 [ 2401.146361] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2401.152697] __kmalloc+0x71/0x7a0 [ 2401.152709] ? n_hdlc_buf_get+0x197/0x240 [ 2401.152718] ? __tty_buffer_request_room+0x1a4/0x500 [ 2401.152729] __tty_buffer_request_room+0x1a4/0x500 [ 2401.152740] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 2401.152750] pty_write+0x113/0x1d0 [ 2401.152759] ? pty_unthrottle+0x50/0x50 [ 2401.152767] n_hdlc_send_frames+0x238/0x3e0 [ 2401.152783] n_hdlc_tty_write+0x4ca/0x5b0 [ 2401.164886] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2401.172428] ? n_hdlc_tty_poll+0x310/0x310 [ 2401.172441] ? wake_up_q+0xf0/0xf0 [ 2401.172453] ? _copy_from_user+0x99/0x110 [ 2401.172463] tty_write+0x3f6/0x700 [ 2401.172474] ? n_hdlc_tty_poll+0x310/0x310 [ 2401.172485] __vfs_write+0x105/0x6b0 [ 2401.172491] ? tty_read+0x270/0x270 [ 2401.172500] ? kernel_read+0x120/0x120 [ 2401.564818] ? __inode_security_revalidate+0xd6/0x130 [ 2401.564825] ? avc_policy_seqno+0x9/0x20 [ 2401.564831] ? selinux_file_permission+0x85/0x480 [ 2401.564840] ? security_file_permission+0x89/0x1f0 [ 2401.564848] ? rw_verify_area+0xea/0x2b0 [ 2401.564854] vfs_write+0x198/0x500 [ 2401.564861] SyS_write+0xfd/0x230 [ 2401.564867] ? SyS_read+0x230/0x230 [ 2401.564874] ? do_syscall_64+0x53/0x640 [ 2401.564880] ? SyS_read+0x230/0x230 [ 2401.564886] do_syscall_64+0x1e8/0x640 [ 2401.564892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2401.564902] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2401.564907] RIP: 0033:0x45a909 [ 2401.564910] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2401.564917] RAX: ffffffffffffffda RBX: 00007f07988e3c90 RCX: 000000000045a909 [ 2401.564921] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 2401.564924] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2401.564928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2401.564931] R13: 00000000004c7ca0 R14: 00000000004e4d08 R15: 0000000000000004 [ 2401.564950] [ 2401.564953] ====================================================== [ 2401.564956] WARNING: possible circular locking dependency detected [ 2401.564957] 4.14.158-syzkaller #0 Not tainted [ 2401.564960] ------------------------------------------------------ [ 2401.564962] syz-executor.2/22352 is trying to acquire lock: [ 2401.564963] (console_owner){-.-.}, at: [] vprintk_emit+0x2f1/0x600 [ 2401.564969] [ 2401.564970] but task is already holding lock: [ 2401.564971] (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xe0/0x1d0 [ 2401.564977] [ 2401.564979] which lock already depends on the new lock. [ 2401.564980] [ 2401.564981] [ 2401.564984] the existing dependency chain (in reverse order) is: [ 2401.564985] [ 2401.564986] -> #2 (&(&port->lock)->rlock){-.-.}: [ 2401.564992] lock_acquire+0x16f/0x430 [ 2401.564994] _raw_spin_lock_irqsave+0x95/0xcd [ 2401.564996] tty_port_tty_get+0x22/0x90 [ 2401.564998] tty_port_default_wakeup+0x16/0x40 [ 2401.565000] tty_port_tty_wakeup+0x57/0x70 [ 2401.565002] uart_write_wakeup+0x46/0x70 [ 2401.565005] serial8250_tx_chars+0x40d/0xa10 [ 2401.565007] serial8250_handle_irq.part.0+0x206/0x250 [ 2401.565010] serial8250_default_handle_irq+0xa1/0x120 [ 2401.565013] serial8250_interrupt+0xe9/0x1a0 [ 2401.565015] __handle_irq_event_percpu+0x125/0x7f0 [ 2401.565018] handle_irq_event_percpu+0x65/0x130 [ 2401.565020] handle_irq_event+0xa7/0x134 [ 2401.565022] handle_edge_irq+0x22b/0x840 [ 2401.565024] handle_irq+0x39/0x50 [ 2401.565026] do_IRQ+0x99/0x1d0 [ 2401.565028] ret_from_intr+0x0/0x1e [ 2401.565030] native_safe_halt+0xe/0x10 [ 2401.565032] arch_cpu_idle+0xa/0x10 [ 2401.565035] default_idle_call+0x36/0x90 [ 2401.565037] do_idle+0x262/0x3d0 [ 2401.565038] cpu_startup_entry+0x1b/0x20 [ 2401.565040] rest_init+0x1d9/0x1e2 [ 2401.565042] start_kernel+0x6df/0x6fd [ 2401.565044] x86_64_start_reservations+0x29/0x2b [ 2401.565045] x86_64_start_kernel+0x77/0x7b [ 2401.565047] secondary_startup_64+0xa5/0xb0 [ 2401.565048] [ 2401.565049] -> #1 (&port_lock_key){-.-.}: [ 2401.565055] lock_acquire+0x16f/0x430 [ 2401.565057] _raw_spin_lock_irqsave+0x95/0xcd [ 2401.565059] serial8250_console_write+0x709/0x930 [ 2401.565060] univ8250_console_write+0x5f/0x70 [ 2401.565062] console_unlock+0x9ba/0xed0 [ 2401.565064] vprintk_emit+0x1f9/0x600 [ 2401.565066] vprintk_default+0x28/0x30 [ 2401.565067] vprintk_func+0x5d/0x159 [ 2401.565069] printk+0x9e/0xbc [ 2401.565070] register_console+0x614/0x9e0 [ 2401.565072] univ8250_console_init+0x33/0x3f [ 2401.565074] console_init+0x4d/0x5d [ 2401.565076] start_kernel+0x43c/0x6fd [ 2401.565077] x86_64_start_reservations+0x29/0x2b [ 2401.565079] x86_64_start_kernel+0x77/0x7b [ 2401.565082] secondary_startup_64+0xa5/0xb0 [ 2401.565083] [ 2401.565084] -> #0 (console_owner){-.-.}: [ 2401.565090] __lock_acquire+0x2cb3/0x4620 [ 2401.565092] lock_acquire+0x16f/0x430 [ 2401.565093] vprintk_emit+0x32e/0x600 [ 2401.565095] vprintk_default+0x28/0x30 [ 2401.565097] vprintk_func+0x5d/0x159 [ 2401.565099] printk+0x9e/0xbc [ 2401.565101] should_fail.cold+0xe4/0x159 [ 2401.565103] should_failslab+0xdb/0x130 [ 2401.565105] __kmalloc+0x71/0x7a0 [ 2401.565107] __tty_buffer_request_room+0x1a4/0x500 [ 2401.565111] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 2401.565113] pty_write+0x113/0x1d0 [ 2401.565115] n_hdlc_send_frames+0x238/0x3e0 [ 2401.565118] n_hdlc_tty_write+0x4ca/0x5b0 [ 2401.565120] tty_write+0x3f6/0x700 [ 2401.565122] __vfs_write+0x105/0x6b0 [ 2401.565124] vfs_write+0x198/0x500 [ 2401.565126] SyS_write+0xfd/0x230 [ 2401.565128] do_syscall_64+0x1e8/0x640 [ 2401.565130] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2401.565131] [ 2401.565134] other info that might help us debug this: [ 2401.565135] [ 2401.565137] Chain exists of: [ 2401.565138] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 2401.565148] [ 2401.565150] Possible unsafe locking scenario: [ 2401.565151] [ 2401.565153] CPU0 CPU1 [ 2401.565156] ---- ---- [ 2401.565157] lock(&(&port->lock)->rlock); [ 2401.565162] lock(&port_lock_key); [ 2401.565167] lock(&(&port->lock)->rlock); [ 2401.565171] lock(console_owner); [ 2401.565175] [ 2401.565177] *** DEADLOCK *** [ 2401.565178] [ 2401.565180] 3 locks held by syz-executor.2/22352: [ 2401.565181] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 2401.565189] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write_lock+0x20/0x60 [ 2401.565197] #2: (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xe0/0x1d0 [ 2401.565205] [ 2401.565207] stack backtrace: [ 2401.565210] CPU: 0 PID: 22352 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2401.565214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.565215] Call Trace: [ 2401.565217] dump_stack+0x142/0x197 [ 2401.565219] ? vprintk_func+0x65/0x159 [ 2401.565222] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 2401.565224] __lock_acquire+0x2cb3/0x4620 [ 2401.565226] ? trace_hardirqs_on+0x10/0x10 [ 2401.565228] ? save_trace+0x290/0x290 [ 2401.565230] ? vprintk_emit+0x309/0x600 [ 2401.565238] ? vprintk_emit+0x309/0x600 [ 2401.565240] lock_acquire+0x16f/0x430 [ 2401.565242] ? vprintk_emit+0x2f1/0x600 [ 2401.565244] vprintk_emit+0x32e/0x600 [ 2401.565246] ? vprintk_emit+0x2f1/0x600 [ 2401.565248] vprintk_default+0x28/0x30 [ 2401.565250] vprintk_func+0x5d/0x159 [ 2401.565252] printk+0x9e/0xbc [ 2401.565254] ? show_regs_print_info+0x63/0x63 [ 2401.565256] ? __lock_acquire+0x5f7/0x4620 [ 2401.565258] ? ___ratelimit+0x55/0x537 [ 2401.565260] should_fail.cold+0xe4/0x159 [ 2401.565262] should_failslab+0xdb/0x130 [ 2401.565264] __kmalloc+0x71/0x7a0 [ 2401.565266] ? n_hdlc_buf_get+0x197/0x240 [ 2401.565268] ? __tty_buffer_request_room+0x1a4/0x500 [ 2401.565271] __tty_buffer_request_room+0x1a4/0x500 [ 2401.565274] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 2401.565276] pty_write+0x113/0x1d0 [ 2401.565278] ? pty_unthrottle+0x50/0x50 [ 2401.565280] n_hdlc_send_frames+0x238/0x3e0 [ 2401.565282] n_hdlc_tty_write+0x4ca/0x5b0 [ 2401.565284] ? n_hdlc_tty_poll+0x310/0x310 [ 2401.565286] ? wake_up_q+0xf0/0xf0 [ 2401.565288] ? _copy_from_user+0x99/0x110 [ 2401.565290] tty_write+0x3f6/0x700 [ 2401.565292] ? n_hdlc_tty_poll+0x310/0x310 [ 2401.565294] __vfs_write+0x105/0x6b0 [ 2401.565296] ? tty_read+0x270/0x270 [ 2401.565298] ? kernel_read+0x120/0x120 [ 2401.565300] ? __inode_security_revalidate+0xd6/0x130 [ 2401.565302] ? avc_policy_seqno+0x9/0x20 [ 2401.565304] ? selinux_file_permission+0x85/0x480 [ 2401.565307] ? security_file_permission+0x89/0x1f0 [ 2401.565309] ? rw_verify_area+0xea/0x2b0 [ 2401.565311] vfs_write+0x198/0x500 [ 2401.565313] SyS_write+0xfd/0x230 [ 2401.565315] ? SyS_read+0x230/0x230 [ 2401.565317] ? do_syscall_64+0x53/0x640 [ 2401.565319] ? SyS_read+0x230/0x230 [ 2401.565321] do_syscall_64+0x1e8/0x640 [ 2401.565324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2401.565326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2401.565328] RIP: 0033:0x45a909 [ 2401.565331] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2401.565336] RAX: ffffffffffffffda RBX: 00007f07988e3c90 RCX: 000000000045a909 [ 2401.565339] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 2401.565342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2401.565345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2401.565348] R13: 00000000004c7ca0 R14: 00000000004e4d08 R15: 0000000000000004 [ 2401.585591] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2401.593858] CPU: 0 PID: 22346 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 2401.610937] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2401.613682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.613686] Call Trace: [ 2401.613700] dump_stack+0x142/0x197 [ 2401.613714] should_fail.cold+0x10f/0x159 [ 2401.613727] __alloc_pages_nodemask+0x1d6/0x7a0 [ 2401.613739] ? lock_downgrade+0x740/0x740 [ 2401.671738] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2401.672732] ? mutex_trylock+0x1c0/0x1c0 [ 2401.672745] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2401.679104] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2401.685369] ? save_trace+0x290/0x290 [ 2401.685381] alloc_pages_current+0xec/0x1e0 [ 2401.685393] ion_page_pool_alloc+0x11f/0x1c0 [ 2401.685402] ion_system_heap_allocate+0x138/0x910 [ 2401.685411] ? ion_alloc+0x19b/0x860 [ 2401.685421] ? rcu_read_lock_sched_held+0x110/0x130 [ 2401.685429] ? ion_system_heap_free+0x250/0x250 [ 2401.685440] ion_alloc+0x222/0x860 [ 2402.529037] ? ion_dma_buf_release+0x50/0x50 00:40:02 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:02 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='.//ile0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@local, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x7, 0x48}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r3, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:02 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) [ 2402.529050] ? kasan_check_write+0x14/0x20 [ 2402.529058] ? _copy_from_user+0x99/0x110 00:40:02 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) ioctl$SIOCNRDECOBS(r2, 0x89e2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2402.529064] ion_ioctl+0x105/0x217 [ 2402.529071] ? ion_alloc.cold+0x40/0x40 [ 2402.529078] ? ion_alloc.cold+0x40/0x40 [ 2402.529086] do_vfs_ioctl+0x7ae/0x1060 [ 2402.529094] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2402.529102] ? lock_downgrade+0x740/0x740 [ 2402.529109] ? ioctl_preallocate+0x1c0/0x1c0 [ 2402.529116] ? __fget+0x237/0x370 [ 2402.529126] ? security_file_ioctl+0x89/0xb0 [ 2402.529133] SyS_ioctl+0x8f/0xc0 [ 2402.529139] ? do_vfs_ioctl+0x1060/0x1060 [ 2402.529147] do_syscall_64+0x1e8/0x640 [ 2402.529154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2402.529163] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2402.529168] RIP: 0033:0x45a909 [ 2402.529171] RSP: 002b:00007f2b54a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.529179] RAX: ffffffffffffffda RBX: 00007f2b54a69c90 RCX: 000000000045a909 [ 2402.529187] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2402.529190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2402.529193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b54a6a6d4 [ 2402.529197] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 0000000000000004 [ 2402.543379] 0 [ 2402.543384] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2402.543402] CPU: 0 PID: 22334 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2402.543406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.543409] Call Trace: [ 2402.543423] dump_stack+0x142/0x197 [ 2402.543433] warn_alloc.cold+0x96/0x1af [ 2402.543441] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2402.543454] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2402.543464] __alloc_pages_slowpath+0x23c6/0x2930 [ 2402.543477] ? save_trace+0x290/0x290 [ 2402.543486] ? warn_alloc+0xf0/0xf0 [ 2402.543499] ? __might_sleep+0x93/0xb0 [ 2402.543507] __alloc_pages_nodemask+0x62c/0x7a0 [ 2402.543514] ? lock_downgrade+0x740/0x740 [ 2402.543522] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2402.543532] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2402.543545] alloc_pages_current+0xec/0x1e0 [ 2402.543558] ion_page_pool_alloc+0x11f/0x1c0 [ 2402.543567] ion_system_heap_allocate+0x138/0x910 [ 2402.543575] ? ion_alloc+0x19b/0x860 [ 2402.543584] ? rcu_read_lock_sched_held+0x110/0x130 [ 2402.543595] ? ion_system_heap_free+0x250/0x250 [ 2402.543605] ion_alloc+0x222/0x860 [ 2402.543615] ? ion_dma_buf_release+0x50/0x50 [ 2402.543625] ? kasan_check_write+0x14/0x20 [ 2402.543635] ? _copy_from_user+0x99/0x110 [ 2402.543644] ion_ioctl+0x105/0x217 [ 2402.543652] ? ion_alloc.cold+0x40/0x40 [ 2402.543663] ? ion_alloc.cold+0x40/0x40 [ 2402.543672] do_vfs_ioctl+0x7ae/0x1060 [ 2402.543682] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2402.543690] ? lock_downgrade+0x740/0x740 [ 2402.543698] ? ioctl_preallocate+0x1c0/0x1c0 [ 2402.543708] ? __fget+0x237/0x370 [ 2402.543718] ? security_file_ioctl+0x89/0xb0 [ 2402.543726] SyS_ioctl+0x8f/0xc0 [ 2402.543734] ? do_vfs_ioctl+0x1060/0x1060 [ 2402.543745] do_syscall_64+0x1e8/0x640 [ 2402.543753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2402.543764] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2402.543771] RIP: 0033:0x45a909 [ 2402.543775] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2402.543784] RAX: ffffffffffffffda RBX: 00007fd4d76a8c90 RCX: 000000000045a909 [ 2402.543788] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2402.543793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2402.543797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2402.543802] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 0000000000000007 [ 2402.543815] warn_alloc_show_mem: 1 callbacks suppressed [ 2402.543817] Mem-Info: [ 2402.543837] active_anon:279940 inactive_anon:191 isolated_anon:0 [ 2402.543837] active_file:1637 inactive_file:5347 isolated_file:0 [ 2402.543837] unevictable:0 dirty:265 writeback:0 unstable:0 [ 2402.543837] slab_reclaimable:14131 slab_unreclaimable:114237 [ 2402.543837] mapped:57438 shmem:379 pagetables:7995 bounce:0 [ 2402.543837] free:985912 free_pcp:275 free_cma:0 [ 2402.543854] Node 0 active_anon:1119364kB inactive_anon:764kB active_file:108kB inactive_file:456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209116kB dirty:228kB writeback:0kB shmem:1516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 630784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2402.543856] Node 0 DMA free:10504kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.543876] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 2402.543891] Node 0 DMA32 free:218832kB min:36380kB low:45472kB high:54564kB active_anon:1119364kB inactive_anon:764kB active_file:108kB inactive_file:456kB unevictable:0kB writepending:228kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:16032kB pagetables:31916kB bounce:0kB free_pcp:1100kB local_pcp:656kB free_cma:0kB [ 2402.543911] lowmem_reserve[]: 0 0 0 0 0 [ 2402.543924] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2402.543941] lowmem_reserve[]: 0 0 0 0 0 [ 2402.543955] Node 0 DMA: 6*4kB (UE) 8*8kB (UE) 7*16kB (UE) 6*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10504kB [ 2402.544012] Node 0 DMA32: 7664*4kB (UME) 6782*8kB (UME) 3393*16kB (UME) 2352*32kB (UM) 31*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 218752kB [ 2402.544058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2402.544094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2402.544098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2402.544103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2402.544109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2402.544112] 7364 total pagecache pages [ 2402.544115] 0 pages in swap cache [ 2402.544119] Swap cache stats: add 0, delete 0, find 0/0 [ 2402.544122] Free swap = 0kB [ 2402.544124] Total swap = 0kB [ 2402.544128] 1965979 pages RAM [ 2402.544130] 0 pages HighMem/MovableOnly [ 2402.544132] 335858 pages reserved [ 2402.544135] 0 pages cma reserved [ 2402.559987] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2402.682123] FAULT_INJECTION: forcing a failure. [ 2402.682123] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.700744] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2402.704540] CPU: 0 PID: 22364 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2402.704547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.704551] Call Trace: [ 2402.704568] dump_stack+0x142/0x197 [ 2402.704583] should_fail.cold+0x10f/0x159 [ 2402.713979] kobject: 'loop1' (ffff8880a40c2420): kobject_uevent_env [ 2402.714712] ? kasan_unpoison_shadow+0x35/0x50 [ 2402.714722] should_failslab+0xdb/0x130 [ 2402.714731] __kmalloc+0x71/0x7a0 [ 2402.718629] kobject: 'loop1' (ffff8880a40c2420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2402.722151] ? depot_save_stack+0x11c/0x410 [ 2402.722164] ? __tty_buffer_request_room+0x1a4/0x500 00:40:03 executing program 2 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:40:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) fsetxattr$smack_xattr_label(r2, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)={'/dev/ttyS3\x00'}, 0xc, 0xbb9811e4147a8659) read(r0, &(0x7f0000001440)=""/4096, 0x1000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r3, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000003c0)=ANY=[@ANYBLOB="bc8dbfb9a0958322b1c873ddd8d2f305b0a13b94db8309a236edad06677f9ad9fca457739379f2720256f29b79c193ed9f159ea8ab59b3ca1bf0d3a3a068c8a63d16a508b0e606913fdf05f3f62ffaa884ec5f88bc892de6fbb00e825cfd08fa996a2c18d34cb4a8d3dae3e625cfd69d72aef071b11d153410032dc10e4204d2cad770121b6da6fe374c16dda58c225d3cb652a5598e37c04ed0b778c832f31e5ee93f2d399dc8ba55bc2b36406043caffadb7b925b900d8a3482f1c3589a3449383c8190fe297d09f8cd23a563d4bd7379e32d2db8fbb10254e9315bdb22c6d262a8949fc7229b668163e851c", @ANYRESOCT=0x0, @ANYBLOB="bb3b4626fb7766dbb9e7f20c04ab10f329faa5cfa445383e37cd0e429ed4b2b7b9274a02fbf317ca98671b0f28afb8290fd5f44156e9a36b384bae37d110db74ae07f52cda11ad8c404b31904fe7bdc37655f7964d2db11f214d1e5323ca1f18b6274462672632ad555520463e031f228bbac4530dfa8cffb95084160a1f97951c3f9723325b1976bb47943633c64b949a07643584ae0a2f7daeb36fa554aeae8586df1b1cafb7d59033113ad18eb6a479ee753a6340ccb7e99ab642de7afd7e8fdc373668f889ae53a7e0b0584cf51bb7680802a5f62234504bc58f47fc825033a45b"]) [ 2402.722173] __tty_buffer_request_room+0x1a4/0x500 [ 2402.722183] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 2403.268857] pty_write+0x113/0x1d0 [ 2403.268864] ? pty_unthrottle+0x50/0x50 [ 2403.268872] n_hdlc_send_frames+0x238/0x3e0 00:40:03 executing program 2 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) [ 2403.268881] n_hdlc_tty_write+0x4ca/0x5b0 [ 2403.268889] ? n_hdlc_tty_poll+0x310/0x310 [ 2403.268898] ? wake_up_q+0xf0/0xf0 [ 2403.268906] ? kasan_check_write+0x14/0x20 [ 2403.268913] ? _copy_from_user+0x99/0x110 [ 2403.268920] tty_write+0x3f6/0x700 [ 2403.268928] ? n_hdlc_tty_poll+0x310/0x310 [ 2403.268935] __vfs_write+0x105/0x6b0 [ 2403.268941] ? tty_read+0x270/0x270 [ 2403.268946] ? kernel_read+0x120/0x120 [ 2403.268954] ? __inode_security_revalidate+0xd6/0x130 [ 2403.268959] ? avc_policy_seqno+0x9/0x20 [ 2403.268965] ? selinux_file_permission+0x85/0x480 [ 2403.268973] ? security_file_permission+0x89/0x1f0 [ 2403.268979] ? rw_verify_area+0xea/0x2b0 [ 2403.268985] vfs_write+0x198/0x500 [ 2403.268991] SyS_write+0xfd/0x230 [ 2403.268997] ? SyS_read+0x230/0x230 [ 2403.269002] ? SyS_read+0x230/0x230 [ 2403.269010] do_syscall_64+0x1e8/0x640 [ 2403.269016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2403.269027] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2403.269032] RIP: 0033:0x45a909 [ 2403.269035] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2403.269042] RAX: ffffffffffffffda RBX: 00007f07988e3c90 RCX: 000000000045a909 [ 2403.269045] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 2403.269049] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2403.269052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2403.269056] R13: 00000000004c7ca0 R14: 00000000004e4d08 R15: 0000000000000004 [ 2403.283088] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2403.283107] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2403.293721] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2403.293742] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2403.297032] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0 [ 2403.297052] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 2403.297069] CPU: 1 PID: 22362 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 2403.297075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.297078] Call Trace: [ 2403.297091] dump_stack+0x142/0x197 [ 2403.297103] warn_alloc.cold+0x96/0x1af [ 2403.297111] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 2403.297124] ? __alloc_pages_direct_compact+0xbc/0x380 [ 2403.297134] __alloc_pages_slowpath+0x23c6/0x2930 [ 2403.297145] ? lock_downgrade+0x740/0x740 [ 2403.297160] ? warn_alloc+0xf0/0xf0 [ 2403.297173] ? __might_sleep+0x93/0xb0 [ 2403.297182] __alloc_pages_nodemask+0x62c/0x7a0 [ 2403.297191] ? lock_downgrade+0x740/0x740 [ 2403.297199] ? __alloc_pages_slowpath+0x2930/0x2930 [ 2403.297212] ? cpuset_nodemask_valid_mems_allowed+0xf/0x80 [ 2403.297223] alloc_pages_current+0xec/0x1e0 [ 2403.297237] ion_page_pool_alloc+0x11f/0x1c0 [ 2403.297246] ion_system_heap_allocate+0x138/0x910 [ 2403.297258] ? ion_system_heap_free+0x250/0x250 [ 2403.297269] ion_alloc+0x222/0x860 [ 2403.297279] ? ion_dma_buf_release+0x50/0x50 [ 2403.297290] ? kasan_check_write+0x14/0x20 [ 2403.297298] ? _copy_from_user+0x99/0x110 [ 2403.297307] ion_ioctl+0x105/0x217 [ 2403.297315] ? ion_alloc.cold+0x40/0x40 [ 2403.297324] ? ion_alloc.cold+0x40/0x40 [ 2403.297334] do_vfs_ioctl+0x7ae/0x1060 [ 2403.297345] ? selinux_file_mprotect+0x5d0/0x5d0 [ 2403.297352] ? lock_downgrade+0x740/0x740 [ 2403.297361] ? ioctl_preallocate+0x1c0/0x1c0 [ 2403.297370] ? __fget+0x237/0x370 [ 2403.297382] ? security_file_ioctl+0x89/0xb0 [ 2403.297392] SyS_ioctl+0x8f/0xc0 [ 2403.297400] ? do_vfs_ioctl+0x1060/0x1060 [ 2403.297411] do_syscall_64+0x1e8/0x640 [ 2403.297419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2403.297432] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2403.297438] RIP: 0033:0x45a909 [ 2403.297449] RSP: 002b:00007fd4d76a8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.297457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 2403.297462] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2403.297467] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2403.297471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4d76a96d4 [ 2403.297476] R13: 00000000004c39d9 R14: 00000000004d8ee8 R15: 00000000ffffffff [ 2403.330540] FAULT_INJECTION: forcing a failure. [ 2403.330540] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.330551] CPU: 0 PID: 22377 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2403.330556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.330559] Call Trace: [ 2403.330572] dump_stack+0x142/0x197 [ 2403.330588] should_fail.cold+0x10f/0x159 [ 2403.330603] should_failslab+0xdb/0x130 [ 2403.330611] __kmalloc+0x71/0x7a0 [ 2403.330624] ? __tty_buffer_request_room+0x1a4/0x500 [ 2403.330634] __tty_buffer_request_room+0x1a4/0x500 [ 2403.330644] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 2403.330655] pty_write+0x113/0x1d0 [ 2403.330664] ? pty_unthrottle+0x50/0x50 [ 2403.330674] n_hdlc_send_frames+0x238/0x3e0 [ 2403.330688] n_hdlc_tty_write+0x4ca/0x5b0 [ 2403.330699] ? n_hdlc_tty_poll+0x310/0x310 [ 2403.330711] ? wake_up_q+0xf0/0xf0 [ 2403.330721] ? _copy_from_user+0x99/0x110 [ 2403.330731] tty_write+0x3f6/0x700 [ 2403.330741] ? n_hdlc_tty_poll+0x310/0x310 [ 2403.330752] __vfs_write+0x105/0x6b0 [ 2403.330760] ? tty_read+0x270/0x270 [ 2403.330769] ? kernel_read+0x120/0x120 [ 2403.330778] ? __inode_security_revalidate+0xd6/0x130 [ 2403.330786] ? avc_policy_seqno+0x9/0x20 [ 2403.330795] ? selinux_file_permission+0x85/0x480 [ 2403.330806] ? security_file_permission+0x89/0x1f0 [ 2403.330815] ? rw_verify_area+0xea/0x2b0 [ 2403.330823] vfs_write+0x198/0x500 [ 2403.330832] SyS_write+0xfd/0x230 [ 2403.330840] ? SyS_read+0x230/0x230 [ 2403.330849] ? SyS_read+0x230/0x230 [ 2403.330860] do_syscall_64+0x1e8/0x640 [ 2403.330868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2403.330881] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2403.330888] RIP: 0033:0x45a909 [ 2403.330892] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2403.330902] RAX: ffffffffffffffda RBX: 00007f07988e3c90 RCX: 000000000045a909 [ 2403.330906] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 2403.330911] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2403.330916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2403.330921] R13: 00000000004c7ca0 R14: 00000000004e4d08 R15: 0000000000000004 [ 2403.340294] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2403.340317] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2403.379097] FAULT_INJECTION: forcing a failure. [ 2403.379097] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.991486] CPU: 0 PID: 22380 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 2403.991491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.991493] Call Trace: [ 2403.991509] dump_stack+0x142/0x197 [ 2403.991519] should_fail.cold+0x10f/0x159 [ 2403.991529] should_failslab+0xdb/0x130 [ 2403.991534] __kmalloc+0x71/0x7a0 [ 2403.991544] ? __tty_buffer_request_room+0x1a4/0x500 [ 2403.991550] __tty_buffer_request_room+0x1a4/0x500 [ 2403.991558] tty_insert_flip_string_fixed_flag+0x8a/0x1c0 [ 2403.991566] pty_write+0x113/0x1d0 [ 2403.991572] ? pty_unthrottle+0x50/0x50 [ 2403.991584] n_hdlc_send_frames+0x238/0x3e0 [ 2403.991593] n_hdlc_tty_write+0x4ca/0x5b0 [ 2403.991601] ? n_hdlc_tty_poll+0x310/0x310 [ 2403.991611] ? wake_up_q+0xf0/0xf0 [ 2403.991618] ? _copy_from_user+0x99/0x110 [ 2403.991625] tty_write+0x3f6/0x700 [ 2403.991633] ? n_hdlc_tty_poll+0x310/0x310 [ 2403.991640] __vfs_write+0x105/0x6b0 [ 2403.991645] ? tty_read+0x270/0x270 [ 2403.991651] ? kernel_read+0x120/0x120 [ 2403.991659] ? __inode_security_revalidate+0xd6/0x130 [ 2403.991664] ? avc_policy_seqno+0x9/0x20 [ 2403.991670] ? selinux_file_permission+0x85/0x480 [ 2403.991678] ? security_file_permission+0x89/0x1f0 [ 2403.991684] ? rw_verify_area+0xea/0x2b0 [ 2403.991690] vfs_write+0x198/0x500 [ 2403.991696] SyS_write+0xfd/0x230 00:40:03 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:40:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x32000, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="effa74fe3759e528232cc44a63a9800bd1209a517879705c71aa3c80bef8cdd2f1e3937bd4f8681ebbbb1bfa95e9e8c160d812bfc3727c9ddecdfcea35cc202a06b2c2944376096e311676533947ede8e0af7f3c78148fc3278893eec15a3a582647c95323ee3ece0df46c5092671276eb2b8971d5ce7c7c91fc80c3732b4f344ecd1b612dccd9dad42597613d40e025d49c83eac52fa019bb7d870e341d3322ad3b00318626a66d821f3f68cea387f638b65959259f986eb85dca3c18be54968d0076569e77b148d315dd1cd1f1be2f96842a87f5a5c0940d80072866") ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 's\xf9z_tun\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\xb7&', {0x20000001}, 0x7}) 00:40:04 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/\xa4\xc3v/ttyS3\x00', 0xcf2ad91b975597f3, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x1, 0xc9}) [ 2403.991701] ? SyS_read+0x230/0x230 [ 2403.991707] ? SyS_read+0x230/0x230 [ 2403.991715] do_syscall_64+0x1e8/0x640 [ 2403.991721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2403.991730] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 2403.991735] RIP: 0033:0x45a909 [ 2403.991739] RSP: 002b:00007f07988e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2403.991745] RAX: ffffffffffffffda RBX: 00007f07988e3c90 RCX: 000000000045a909 [ 2403.991749] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 00:40:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:04 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200080, 0x40) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r2, 0x80, 0x20}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'crc32c-generic\x00'}}, &(0x7f00000001c0)="6cfd50a1eed672475c4eb5286579720572ebc3f96c77877b5acb65587373ffc68ffea75de580b38d4efb809b1b48cb604a0d64be4cd00e0c8eca62da69c6f3b30685f6162b54b542e332c05024bf50197fdc395be0396b7ad9b134131807a5f24f821e353014534edfed52be1465b00b6560b72f8006c3feb19f9597b5bf50fe", &(0x7f0000000240)="2e6c575bb031a02ed111b5b90e462ee100574eb642d1dcb97ed6f2ea888e2038") write(r1, &(0x7f0000000040)="e0", 0xfffffe00) 00:40:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='\x06\x00\x00\x00\x00\x00\x00\x00\x00\b\x8a', 0x4000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 2403.991752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2403.991755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07988e46d4 [ 2403.991759] R13: 00000000004c7ca0 R14: 00000000004e4d08 R15: 0000000000000004 [ 2404.015005] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env 00:40:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:40:04 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:04 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r1, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = semget$private(0x0, 0x8, 0x0) semctl$GETZCNT(r2, 0x1, 0xf, 0x0) semctl$GETNCNT(r2, 0x6, 0xe, &(0x7f0000000000)=""/35) 00:40:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2404.377277] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' 00:40:04 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000380)=""/63) r2 = dup(r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') r6 = accept4(r5, &(0x7f0000000300)=@ipx, &(0x7f0000000400)=0x80, 0x40000) mq_timedsend(r1, &(0x7f0000000200)="201bf0f59f7444129b923782eaeb344bffc73a803a53ace568e3a65be23c5529f9a79e36ad379850558938826de925f358069da37610e00882886e60a9f400dc3be6b7a08a28eaa88c8b4c1ded4d4cc678a2ebf27531de6a8cc525d268", 0x5d, 0x80000000, &(0x7f0000000180)={r3, r4+10000000}) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f00000003c0)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x80000, 0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r8, &(0x7f0000000180)='.//ile0\x00', r8, &(0x7f00000007c0)='./file0/f.le.\x00') r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000440)={r10}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000440)={r10, 0x9, 0x10}, &(0x7f0000000480)=0xc) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r12 = socket(0x4, 0x800, 0x3) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000800)="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", 0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2404.408887] audit: type=1326 audit(2404.370:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=22408 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d74a code=0x0 [ 2404.414842] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2404.475965] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2404.488016] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2404.496630] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2404.508623] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2404.515454] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2404.527440] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2404.534205] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2404.545719] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2404.552553] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2404.564611] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2404.572315] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2404.584500] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2404.591330] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2404.602895] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2404.609734] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2404.621451] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2404.628272] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2404.638573] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2404.646685] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2404.657077] kobject: 'loop1' (ffff8880a40c2420): kobject_uevent_env [ 2404.665150] kobject: 'loop1' (ffff8880a40c2420): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2404.676413] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2404.685074] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2404.695320] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2404.703483] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2404.713962] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2404.722916] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' 00:40:04 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TCSBRKP(r1, 0x5425, 0x80) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x5, 0x8, 0x9, 'queue1\x00'}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r2, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 00:40:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x282000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000200)=0xe990) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xa5d6, 0x40200) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40441, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000140)=[0x7, 0x5]) write(r0, &(0x7f0000000100)="e0", 0x100000143) 00:40:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2404.962456] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2404.968944] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:05 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCXONC(r3, 0x540a, 0x6db) write(r2, &(0x7f0000000040)="e0", 0xfffffe00) [ 2405.044324] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2405.065142] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' 00:40:05 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCNXCL(r2, 0x540d) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000001c0)={0x3ff, 0xa, 0x4, 0x4000000, {0x0, 0x7530}, {0x2, 0xc, 0x7, 0xff, 0x3, 0x5, "650caeaf"}, 0x5, 0x1, @fd=r2, 0x4}) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000180)='\'', 0x1}], 0x1bc, 0x1173) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r3, 0x0, 0x20000102000007) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x401, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x7ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000000c0)={0x0, 0xf, 0x2f, "ceff6147372f9c062d716aa65ccab9cde5db440d5956f89046d1e53f52b57c25329fb950f381bfe4418e6c121fd2f1376f4bff18c9dfbb0bca1a3ee9", 0xd, "ddf148af60525a827a2e43d18efd6181d57d5bc1c5359738b16d0bbcb405783cc3e2bbeda977c2978ba7f5d26adf23c2555100d10583dd325c5abf5b", 0x40}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000080)=0x4) 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2405.090612] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2405.106847] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2405.147863] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2405.167614] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2405.206883] audit: type=1326 audit(2405.170:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=22408 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d74a code=0x0 [ 2405.231294] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env 00:40:05 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r1, 0x5412, &(0x7f00000013c0)={0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:05 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x20, 0xffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xefe3, 0x9}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r1 = socket(0x8, 0x3, 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000440)={r4}, 0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r4, 0x101, 0x4, [0x1, 0x4, 0x913, 0x5]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x1f}, &(0x7f0000000100)=0x8) 00:40:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000440)={r3}, 0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000900)={r3, 0xb4, &(0x7f0000000840)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xe4, @loopback, 0x31}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xdd75}, @in6={0xa, 0x4e22, 0x0, @mcast1}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000940)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) [ 2405.255387] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2405.285773] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2405.320276] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2405.376192] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2405.401749] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2405.423255] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2405.436679] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2405.462491] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2405.476800] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2405.498510] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2405.514580] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2405.595174] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2405.607695] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' 00:40:05 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) fallocate(r4, 0x20, 0x20, 0x2) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[0x6000, 0x100000, 0x335e0194308fa1db, 0x1e001], 0x3, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6}, 0x0, 0xe, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x400, 0x40400) write(r3, &(0x7f0000000080)="e0", 0x1) 00:40:05 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0xa0100, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45001}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRES16=r3, @ANYBLOB="080028bd7000fddbdf25010000000000000008410000004c00180000000762726f6164636173744aeca32d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009947471cd68ed438201c42330cd97d90a02657adeeff677985d478c1f091bb4b097f0f4dec5c524ca9d7efb7ca1b2c53f958dc64f978edd5cc2365b44d645a8da88e182c42a9ddb17fe07931c5f1a3697f0a7741bd469b0b909fd1ec1217132907089ac9f52e7360be1be2536520bddf074dc8ae594025a5e8e43e3620c5b6eab7bb00000000d9dcd5c2f8fca30ef3e9f21d6670270b10511cd3121ab115375113c51c3ba5a3d0d1513fb6d5f70049adfd949969afb1187c3a2578"], 0x2}, 0x1, 0x0, 0x0, 0x44005}, 0x10854) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3b}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 00:40:05 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="7e6280d303aec27e353b4d74fe04c8b2727c9d4bb3b017358aea3e33037a24a662148b684a321cc0aa941ab11c4fccdf5b82a8dac6b1098d7716279d8829e6b880ced7c32e8f436b40a768291cb7dcbe8cfcca89217da7f48f8a7ecfb227be0619b74f8f99b487a0a6d24469f38ca1a1a35e15741e3a7b55727ec47c49fce59d2b13b693b3d94e0eda257b63b081cea5d2fc448f1b568fc5b8879b06ea23139b27", 0xa1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) prctl$PR_SET_TSC(0x1a, 0x1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@nolargeio='nolargeio'}, {@barrier='barrier'}]}) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010003, 0xffffffffffffffff}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)=@ipx={0x4, 0xf799, 0x40, "ab4d249dfb61", 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="c5970d83707bcc4cbbf584c1349c05a0b821c7d62c75c3cc8b9cd83bc70639ebc9c1fb3c58bf18d27ee920fac596a4b7135ef0baf9e17c94a0fa3caa65e70dabae9fe4ecff8369ae2530caeaf71f8e3aa8bbec417bf9ee9a09f33453ebc2fc549c3b5c17ff37cd5a3147ab10e54b950ae7c7", 0x72}, {&(0x7f0000000400)="1109f325010e767632d7784fbf04b574ec9d508aefa958ce6ce1e56e4b8da90531fc281c6ba0cfc1cf672f3adf45b2f2e0b736e5886cdcfd70", 0x39}], 0x2, &(0x7f0000000800)=[{0x108, 0x10d, 0x33a3, "658f6356a447285a668eef613c5eeafe0f900fe41ea65cc0a04e2f4ef8064675b5d6678599b470c044a572ab80e58015e0ba7b5707e078acffcbeafdb9df057222d16137dedc3259fd73fcd0d6a96c4d009181f6258859510fb1b8244369aa4426499a19a8523a9c78e1d0629657c7a56596212e031b30811ec13b7c74777605aa7f87a4e9d3d0025e78a2d4762777d70130a98e476e99711248e57adf95fdd87ab5a58d3bebf9566e92720753f1dccbdb2b97697b761840e91d5001a7a6b937a98dc48f90ffd5d3e18bea62d212ca1d52d5f174877b0078d0252a226dc701b1c6df4a3a4693e5bf3a9d82413e5126f9e9bfacde06"}, {0x28, 0x6, 0x5, "6d1350bc0aa90272b9aa42ca97488445e6920c39003a06a9"}, {0xb8, 0x1, 0x7f, "c899fe118daa751bd78376945cbcd235e9d1690f8bba3caa7477a09542d36e4e316d375339137653419deef2b9a5e8b02100d156c67c139969f58bef42583c6ec695a6159f78f0cc1e2d86fbca9ce5d4c8c2f142d4d350ea61372ed7f2584843d3c9c6d8c2e54bde8191effb931456cdac41e5357c5889d49ba83e28e99d993d2dfec33ae52c07cda7ae7b9a9d909c7d7cbab1aec5e20b6badcf5a2ac8959d27d3c23a8eeabed3"}, {0xd8, 0x102, 0x8, "94c8b92076cbf1b9de730be4af9e00ef15198c563b5a81cb8bb640827fc92ed2d52c004d7a95241bc4dd3d98964ed3fa6cc486402255dacb5244bb0b66deac51410d7a5bbe365111ef7526a3f903e773f0e5bb2a8401c75551cecafb3aaa1616eb9952ddc3979c18e8dbb220467043a98672e84c51bbb23a0e5989b6a166ebc7c2d7cce45848093e5468292cbd546b74d6c8e08affd268208d6df267b6eea83fc42573fcb0a1046b6e7d33b2867946fb6b47b744b8add39f4ab44272d88ecf48976197621d6476"}, {0xc0, 0x111, 0x1, "45158b297a1f8f63b657154a97e52c101059c0c1e72bb526cef44d27a7b36d010496ff905fb7cb2aeff3bcadacf94fb2c13d43f6f0d1ac68525975dae216af3ebb3f9121a67580014c0c7df6f8847acfaa1765d0f1000f0776af97f0123b3525c609cc29a62d8e973af57d82b39ed4a1127ebdeab0196a5b52198fedf1c90e2454d897ae9327c5996a759f741e2e0ae1b8e76df0644b029be5b38a36d72c57553cc04cc783447a1eb217"}], 0x380}, 0x894) [ 2405.681722] kobject: 'loop1' (ffff8880a40c2420): kobject_uevent_env [ 2405.693357] kobject: 'loop1' (ffff8880a40c2420): fill_kobj_path: path = '/devices/virtual/block/loop1' 00:40:05 executing program 4: socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0xa0800, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x2) 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2405.727356] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2405.729917] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2405.751440] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2405.761803] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' 00:40:05 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0x2e6) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2405.781666] base_sock_release(ffff8880330b41c0) sk=ffff88805b0f49c0 [ 2405.806377] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2405.814669] base_sock_release(ffff888094703480) sk=ffff88805a6e1480 [ 2405.823989] XFS (loop3): barrier option is deprecated, ignoring. 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, r1, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="4b39af57bc07a955910fcff5edc9e3f00fb9e57c624c86950bf8fa2bfd1a6f31a4b58ab2f495b637292cfa8b0e88b39eeba2aefd790d6b74f7fb", 0x3a}, 0x68) [ 2405.837288] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2405.873897] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env 00:40:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) accept(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000040)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x332, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1fc9893607d71380}, 0x8800) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2405.880765] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2405.893713] kobject: 'loop1' (ffff8880a40c2420): kobject_uevent_env [ 2405.904026] kobject: 'loop1' (ffff8880a40c2420): fill_kobj_path: path = '/devices/virtual/block/loop1' 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2405.939024] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2405.955690] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2405.974225] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env 00:40:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0xa000, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2406.000582] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2406.014445] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2406.021562] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2406.041531] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2406.064646] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2406.099688] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2406.114024] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2406.136691] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2406.143584] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2406.155578] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2406.162286] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2406.175850] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2406.182666] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2406.194598] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2406.203499] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' 00:40:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2406.519110] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2406.537248] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2406.551559] XFS (loop3): Invalid superblock magic number [ 2406.568514] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2406.580179] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2406.588044] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2406.601105] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' 00:40:06 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x500, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r2, &(0x7f0000000200)=""/39}) set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200900, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x0, 0x4}) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xffffffffffffff2b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstat(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstat(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r14, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstat(r16, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r17, 0x0) r18 = getegid() fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x0, r7}, {0x2, 0x1, r9}, {0x2, 0x6, 0xee01}, {0x2, 0x4, r10}], {0x4, 0x6}, [{0x8, 0x4, r12}, {0x8, 0x6, r14}, {0x8, 0x1, r15}, {0x8, 0x9, r17}, {0x8, 0x4, r18}, {0x8, 0x2, 0xee01}], {}, {0x20, 0x3}}, 0x74, 0x6) dup3(r1, r2, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 00:40:06 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x434c6ec92bcd5d3e) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x16b, 0x17, &(0x7f00000003c0)}) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:06 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400480, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 2406.678676] kobject: 'loop1' (ffff8880a40c2420): kobject_uevent_env [ 2406.685883] kobject: 'loop1' (ffff8880a40c2420): fill_kobj_path: path = '/devices/virtual/block/loop1' 00:40:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$TIOCSBRK(r1, 0x5427) [ 2406.732444] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2406.738967] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' 00:40:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 00:40:06 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) [ 2406.780433] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2406.819545] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' 00:40:06 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') renameat(r2, &(0x7f00000000c0)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x6d, @remote, 0x1}}, 0x4, 0x20, 0x5, 0x0, 0x2}, 0x98) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x20, 0x1, 0x7}) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000080)={0xc00000000000000, 0x10000, 0x489d, 0x6, 0xf}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000007) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0xe000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000540)={r4, 0x4, &(0x7f0000000240)=[0x10001, 0x9, 0xffffff80, 0x8], &(0x7f00000002c0)=[0x1, 0x0, 0x5, 0x8, 0x3, 0x7], 0x1, 0x7, 0x0, &(0x7f00000004c0)=[0x5, 0x5, 0x5, 0x4899fed5, 0x1f, 0x200, 0x200], &(0x7f0000000500)=[0x300000]}) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000600)=""/222, 0xde) write(r1, &(0x7f00000000c0)="71f8bb5b959d41c7dead3f4abd043512ed0fc3ccf88c0868617fe150657d588bcc2e43cfe34593127087666f8008cf8a924c37f2f72c040000002bc86ece687566d217ae1194ecc8dc9d97482455c631724700f6e2caad604e", 0xfffffe3e) [ 2406.851694] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2406.879706] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' 00:40:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x6}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400000, 0xb83b98d2ad0071a9) [ 2406.918502] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2406.939355] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2406.971001] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2406.994349] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2407.023043] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2407.038141] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2407.061324] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2407.076831] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2407.098651] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2407.118384] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' 00:40:07 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x20000000, 0x100000001) r0 = open(&(0x7f0000000000)='./file0\x00', 0x87521614e2976d5f, 0x152) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000002}) 00:40:07 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffffffffff2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x455, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}}}) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0xe08ee6d7056c3a2d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)) gettid() shmctl$IPC_SET(r2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="2d41d358b8261e7d73e3e48511a08593", 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x2], 0x2, 0x400, 0x5, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4, 0x9e6d, 0x73d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x8, 0x6, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) add_key(0x0, 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519", 0x98, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000c00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x1) 00:40:07 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x5412, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:40:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0xf5882, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) [ 2407.190119] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2407.202322] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2407.225307] audit: type=1800 audit(2407.190:386): pid=22607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=17848 res=0 [ 2407.267324] kobject: 'loop4' (ffff8880a416f6a0): kobject_uevent_env [ 2407.287270] kobject: 'loop4' (ffff8880a416f6a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2407.308183] kobject: 'loop2' (ffff8880a411a4a0): kobject_uevent_env [ 2407.325010] kobject: 'loop2' (ffff8880a411a4a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2407.352384] kobject: 'loop5' (ffff8880a42125e0): kobject_uevent_env [ 2407.373019] kobject: 'loop5' (ffff8880a42125e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2407.395886] kobject: 'loop0' (ffff888063f926a0): kobject_uevent_env [ 2407.410155] kobject: 'loop0' (ffff888063f926a0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2407.433040] kobject: 'loop3' (ffff8880a4152da0): kobject_uevent_env [ 2407.444644] kobject: 'loop3' (ffff8880a4152da0): fill_kobj_path: path = '/devices/virtual/block/loop3' 00:40:07 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x690, 0x518233fe6698a39d, 0x690, 0x80, 0x7fffffff, 0x7f, 0x18, 0x2, {0x5, 0x9469}, {0x7ff, 0x55b}, {0x200, 0x7}, {0x1, 0xb7f7}, 0x0, 0xcdbe9d951b998d4a, 0x5, 0x1, 0x0, 0x4, 0x10001, 0x4, 0x9, 0x7fff, 0x10001, 0x2, 0x0, 0x200, 0x0, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) 00:40:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$sock_int(r1, 0x1, 0x