ents(r0, &(0x7f0000000000)=""/47, 0xffffffffffffff5d) 18:00:14 executing program 1: socketpair(0x1e, 0x8000000000001, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) unshare(0x8000400) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, r0}]) 18:00:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000140)='msdos\x00', 0x1001, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f0000000080)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='v7\x00', 0x20000, &(0x7f0000000200)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 18:00:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl(r4, 0x0, &(0x7f0000000280)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x20, 0x9}, 0x5, 0x4, 0x1, 0x0, 0x0, "8a2be2ef564d2706b03173e16e44f607fd7806f4b6514aa1bc5ca00f812bc47837177d3634f929ff0e101d58487d1d15d7a40a9afb0041be60f70ab97415fca80698a419862335cb4d55403654ff3346814b0f35e522815b6b8f27738505a96e77d1cbce8be49d8d5ed5c4d9941b13252233f58eb06a3d606feb32e3ebbb1bfe"}) 18:00:14 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040), 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) 18:00:14 executing program 3: epoll_create(0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x4) 18:00:14 executing program 5: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/228) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") unshare(0x20400) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000180)) 18:00:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/83, 0x53, 0x0) dup3(r0, r1, 0x0) 18:00:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0) 18:00:15 executing program 1: socketpair(0x1e, 0x8000000000001, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) unshare(0x8000400) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, r0}]) 18:00:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="0101", 0x2) 18:00:15 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040), 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) 18:00:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@gettaction={0x20, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) 18:00:15 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x42002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x880000}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) [ 1863.387009] tc_dump_action: action bad kind 18:00:15 executing program 1: socketpair(0x1e, 0x8000000000001, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) unshare(0x8000400) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, r0}]) 18:00:15 executing program 0: r0 = socket$inet(0x2b, 0x400000000000801, 0x0) getsockname(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) 18:00:15 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 18:00:15 executing program 2: add_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)="15", 0x1, 0xfffffffffffffffb) 18:00:15 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040), 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) 18:00:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8400000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000080)=0x100) 18:00:16 executing program 3: epoll_create(0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x4) 18:00:16 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200) 18:00:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8400000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0xa70, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001100], 0x0, &(0x7f0000000000), &(0x7f0000001100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000001100000000000000000076657468315f746f5f626f6e6400000069705f76746930000000000000000000726f736530000000000000000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000000000000000000000000000000080900000809000040090000616d6f6e6700000000000000000000000000000000000000000000000000000038080000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d5281ed30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000ac1414bb000000006d616300000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000003000000000000000000626f6e645f736c6176655f300000000000000000000000000000000000000000726f736530000200000000000000000069706464703000000000000000000000e915b0505f73000000000000aaaaaaaaaaaa00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0xae8) 18:00:16 executing program 0: syz_emit_ethernet(0x163, &(0x7f0000000040)={@random="7b1aeeac07d2", @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x155, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x11, 0x0, 0x0, @empty, "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"}}}}}, &(0x7f0000000240)={0x2, 0x400000000001, [0x206, 0xbde, 0x1000000000000, 0x598]}) 18:00:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000740)=@ethernet, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/105, 0x69}}], 0x1, 0x0, 0x0) 18:00:16 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040), 0x0) vmsplice(r0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) 18:00:16 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x2000004) sync() write$binfmt_aout(r1, &(0x7f0000000240)={{0x10b, 0x4, 0x6, 0x3d, 0xff, 0x9, 0xa6, 0x401}, "ad2723ae11691035f666f33b984670296fc2222fb0da46574dc58aa8f448d54232c24d4721c6ef818ca39f8734a43b4de965ad713040c9458599379e8c2f94b53cc15f54dbbbe2f93e3cb89a99a9e0f7b2b1ac34cc6b4e3a049b1cb09b5b90041f2c6919a11428a81b337fd604535cebea4d20590469b490d87bfb21c44c793d4ad5c815df2998ed5593669f875700fefd590b821946e08c86"}, 0xb9) 18:00:16 executing program 7: unshare(0x20400) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f00000000c0)=""/125, &(0x7f0000000040)=0x7d) [ 1864.113047] ebt_among: wrong size: 2104 against expected 1056, rounded to 1056 [ 1864.193072] ebt_among: wrong size: 2104 against expected 1056, rounded to 1056 18:00:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 18:00:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007000)={&(0x7f0000000240), 0xc, &(0x7f0000006cc0)=[{&(0x7f0000000400)={0x20, 0x0, 0x0, 0x0, 0x0, "", [@generic="437a5f79f89b25d167904bb7fafa567b"]}, 0x20}], 0x1, &(0x7f0000006f40)}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) 18:00:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x10000006f) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) 18:00:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000740)=@ethernet, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/105, 0x69}}], 0x1, 0x0, 0x0) 18:00:16 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af03, &(0x7f00000005c0)={0x0, 0x7f}) 18:00:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) write$FUSE_DIRENT(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:00:16 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x2000004) sync() write$binfmt_aout(r1, &(0x7f0000000240)={{0x10b, 0x4, 0x6, 0x3d, 0xff, 0x9, 0xa6, 0x401}, "ad2723ae11691035f666f33b984670296fc2222fb0da46574dc58aa8f448d54232c24d4721c6ef818ca39f8734a43b4de965ad713040c9458599379e8c2f94b53cc15f54dbbbe2f93e3cb89a99a9e0f7b2b1ac34cc6b4e3a049b1cb09b5b90041f2c6919a11428a81b337fd604535cebea4d20590469b490d87bfb21c44c793d4ad5c815df2998ed5593669f875700fefd590b821946e08c86"}, 0xb9) 18:00:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000740)=@ethernet, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/105, 0x69}}], 0x1, 0x0, 0x0) 18:00:17 executing program 3: epoll_create(0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x4) 18:00:17 executing program 5: r0 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 18:00:17 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x2000004) sync() write$binfmt_aout(r1, &(0x7f0000000240)={{0x10b, 0x4, 0x6, 0x3d, 0xff, 0x9, 0xa6, 0x401}, "ad2723ae11691035f666f33b984670296fc2222fb0da46574dc58aa8f448d54232c24d4721c6ef818ca39f8734a43b4de965ad713040c9458599379e8c2f94b53cc15f54dbbbe2f93e3cb89a99a9e0f7b2b1ac34cc6b4e3a049b1cb09b5b90041f2c6919a11428a81b337fd604535cebea4d20590469b490d87bfb21c44c793d4ad5c815df2998ed5593669f875700fefd590b821946e08c86"}, 0xb9) 18:00:17 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) shutdown(r0, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:00:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) write$FUSE_DIRENT(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:00:17 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1}, 0x8) 18:00:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000740)=@ethernet, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/105, 0x69}}], 0x1, 0x0, 0x0) 18:00:17 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1}, 0x8) 18:00:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/12, &(0x7f0000000300)=0xc) 18:00:17 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000080), 0x2000004) sync() write$binfmt_aout(r1, &(0x7f0000000240)={{0x10b, 0x4, 0x6, 0x3d, 0xff, 0x9, 0xa6, 0x401}, "ad2723ae11691035f666f33b984670296fc2222fb0da46574dc58aa8f448d54232c24d4721c6ef818ca39f8734a43b4de965ad713040c9458599379e8c2f94b53cc15f54dbbbe2f93e3cb89a99a9e0f7b2b1ac34cc6b4e3a049b1cb09b5b90041f2c6919a11428a81b337fd604535cebea4d20590469b490d87bfb21c44c793d4ad5c815df2998ed5593669f875700fefd590b821946e08c86"}, 0xb9) 18:00:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a85320, &(0x7f0000000000)={0x80, 0x0, 'client0\x00', 0x0, "f911a651cb4971a7", "77e810b459606a77469698735f8a4f77438e722927d6f37611d0e8b4269923b0"}) 18:00:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) write$FUSE_DIRENT(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:00:17 executing program 5: syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="5000000090780000"], &(0x7f00000004c0)) 18:00:17 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) shutdown(r0, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:00:17 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1}, 0x8) 18:00:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000), &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r1, 0xfffffc61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) close(r2) 18:00:18 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10000000000a, 0x2000800000000009, 0x5}, 0x16) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080)="016a3c30a587e58bfa6d"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000540)="79117d02cf388735"}, 0x20) 18:00:18 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1}, 0x8) 18:00:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090c000000000000000000000002001300020000000000000000000000030006000000000002000000e0000001000000000000000002000100000000000000000200000080030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) 18:00:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@empty, @multicast1}, &(0x7f0000000280)=0xc) poll(&(0x7f0000000080), 0x9a, 0x0) 18:00:18 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) shutdown(r0, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:00:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) write$FUSE_DIRENT(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:00:18 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f000089b000)=0x4, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000040)}, 0x0) 18:00:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000c9f000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) [ 1866.282885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:00:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:18 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x0) shutdown(r0, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:00:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 18:00:18 executing program 6: r0 = socket(0x80000000000010, 0x802, 0x0) write(r0, &(0x7f00000001c0)="240000001a0025f00410a13cbf31404f040b49ff00000000800000000800040001000000", 0x24) 18:00:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) dup3(r1, r2, 0x0) 18:00:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={"7465616d300000163694d800", 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x30, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x4, 0x2b, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @fd}]}]}]}, 0x30}}, 0x0) 18:00:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000c9f000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) 18:00:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080), 0x3dd, &(0x7f0000007000)={&(0x7f0000000000)={0x18, 0x2e, 0x1000000007ffff, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) 18:00:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000c9f000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) 18:00:19 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x9c}, {0x6}]}, 0x10) 18:00:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x100) 18:00:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) dup3(r1, r2, 0x0) 18:00:19 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000b00)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") recvmsg(r0, &(0x7f0000000f80)={&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f0000000d80)=""/24, 0x18}, {&(0x7f0000000dc0)=""/136, 0x88}, {&(0x7f0000000e80)=""/54, 0x36}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/191, 0xbf}, {&(0x7f0000001fc0)=""/193, 0xc1}], 0x7, &(0x7f0000002140)=""/155, 0x9b}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xc4}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 18:00:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000c9f000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) 18:00:19 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) dup3(r1, r2, 0x0) 18:00:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1867.615190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:00:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x78) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) r3 = syz_open_pts(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) dup2(r2, r3) 18:00:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200008000) write$vnet(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000140)=""/78, 0x4e, &(0x7f0000001840)=""/69, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000001500)={0x1, {&(0x7f0000001380)=""/207, 0xcf, &(0x7f0000001480)=""/104, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000017c0)={0x1, {&(0x7f0000000100)=""/28, 0x1c, &(0x7f0000001580)=""/231, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000012c0)={0x1, {&(0x7f00000002c0)=""/4096, 0x1000, &(0x7f0000000080)=""/108, 0x0, 0x3}}, 0x68) 18:00:19 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/sco\x00') [ 1868.115256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1868.149844] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 18:00:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:20 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000100)=0x44, 0x1ff) 18:00:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) r3 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r2}, &(0x7f0000000380)=0x100) 18:00:20 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0xffffffffffffff47) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @remote}}, 0x0, 0x2, 0x0, "a73b49214351f35802653ffbbf1971945682d15b746e1eab9a2d13241d7f662dde4899e40db535cde1849961fa615145571c3c7c9dfcca1aeddf7a5c82bec87aeeb76995bb7869befa26efd0f7c8a067"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x0, 0x0, "e6b68c861975c7a61118a7bee192e6e8b7c82052664b7b43e08f60ada7f21b10d52c59185bea93367629af0961e083cb1dead8efb30aa8569a33e88a06e9748a5dfa38757a2d0e11b7eafa492ef7ca4d"}, 0xd8) 18:00:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$sndpcmp(&(0x7f0000000d00)='/dev/snd/pcmC#D#p\x00', 0x5d5e, 0xc0202) getdents64(r2, &(0x7f0000000380)=""/39, 0x27) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r3 = fcntl$getown(r0, 0x9) fadvise64(r1, 0x0, 0xffffffff, 0x0) process_vm_writev(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/65, 0x41}], 0x2, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/44, 0xfffffffffffffcee}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f0000000600)=""/176, 0xb0}], 0x7, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x21000000000003, 0x2) ioctl(r4, 0x29823c29, &(0x7f0000000740)="025cc80700145f8f76") setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000001f0000000600000001040000010000000700000008000000c03f000063000000ff030000010100007d00000006000000060000004d00000001000000041f06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008013001000000000000000000000000000000000000000000000000400073657400000000000000000000000000000000000000000000000000000000040000090000000700000000000000240000000000ff0f510f0000ff05ff7f3000616800000000000000000000000000000000000000000000000000000000060000002c0600000000000000000000280052454a4543540000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c8000000000000000000000000000000000000000000000000003000534554000000000000000000000000000000000000000000000000000002040008060400e9010100000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x163) socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000280)=0x4, &(0x7f0000000300)=0x2) fallocate(r5, 0x2, 0x2, 0x4) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000c80)={{0x2, 0x4e22, @loopback}, {0x307, @local}, 0x50, {0x2, 0x4e24, @loopback}, 'ip6tnl0\x00'}) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r5, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 18:00:20 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f00000018003f0007fffd946fa283bc80200000000000000000000002000300080000be6ac5b913a49f0016ccbb24", 0x2f}], 0x1}, 0x0) 18:00:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) dup3(r1, r2, 0x0) 18:00:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:20 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x2000000000004e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, &(0x7f0000000040)=0x14) 18:00:20 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x420c, r1, 0x0, 0x0) [ 1868.600289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:00:20 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x400, 0x200000) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x0) 18:00:20 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000380)=""/38) [ 1868.733388] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1868.774184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:00:21 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 18:00:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) unshare(0x600) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/mnt\x00') setns(r1, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000000c0)="010000000000000018040000075a90c7fc232ff41cd849832f") 18:00:21 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000002ff0), 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}, @sadb_lifetime={0x4, 0x0, 0x4}, @sadb_x_nat_t_port={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x88}}, 0x0) 18:00:21 executing program 7: r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 18:00:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020307031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:00:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x14) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000200)={0x14}, 0x14) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="96fcf250c3cf2e560211ac8f93a4fb77ab113029367a219b7b013b8508baacb4599ed452083c9b4b11248cb1a69281a68111d41c20a07a123271ebfd7d19c7ad1ea2f38753314d8a6d622094be") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}], 0x3, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 18:00:21 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 18:00:21 executing program 1: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000380), 0x4) sendto$inet6(r0, &(0x7f0000000300)="0400000000000000ffb25bc20293", 0xe, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x800000000000d, @remote}, 0x1c) 18:00:21 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x17) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0xf}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 18:00:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xcc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:21 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x13, &(0x7f00000036c0)=""/64, 0x40}}], 0x6, 0x0, &(0x7f0000000300)={0x77359400}) clock_gettime(0x0, &(0x7f0000002a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000000600)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/251, 0xfb}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x6, &(0x7f0000000ac0)=""/11, 0xb}}], 0x1, 0x10002, &(0x7f0000002a80)={r1, r2+10000000}) [ 1869.764651] netlink: 'syz-executor3': attribute type 5 has an invalid length. [ 1869.793552] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 18:00:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}}, r1}}, 0x48) 18:00:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f0000009b00)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000012c0)=""/128, 0x80}}], 0x1, 0x0, &(0x7f0000009dc0)) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x2b6}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1869.848941] netlink: 'syz-executor3': attribute type 5 has an invalid length. [ 1869.865524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1869.883133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1869.963929] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1869.998280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:00:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x84}, {0x6}]}, 0x10) 18:00:22 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) lseek(r0, 0x0, 0x1) 18:00:22 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000801ff8)=@file={0x1, './file0\x00'}, 0xa) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$unix(r1, &(0x7f0000000fc8)={&(0x7f0000f5aff6)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000471000), 0x0, &(0x7f0000000ff0)}, 0x0) dup2(r3, r1) write$P9_RSYMLINK(r3, &(0x7f0000000080)={0x14}, 0x14) 18:00:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64]], &(0x7f0000000140)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 18:00:22 executing program 6: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 18:00:22 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @local}], 0x2c) [ 1870.587628] IPVS: ftp: loaded support on port[0] = 21 18:00:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000080)=""/81, 0x51}], 0x1) 18:00:23 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 18:00:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1d}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000003) 18:00:23 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000080)=""/119, 0x77}], 0x2) 18:00:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000002000)=@ethernet, 0x80) sendmsg$can_bcm(r1, &(0x7f00005e4000)={&(0x7f0000000040), 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a1947cab94fc62fd"}}, 0x48}}, 0x0) 18:00:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x21, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x3c}}, 0x0) 18:00:23 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$VT_RELDISP(r0, 0xb701) 18:00:23 executing program 6: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) [ 1871.184191] netlink: 'syz-executor0': attribute type 9 has an invalid length. 18:00:23 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000080)=""/119, 0x77}], 0x2) 18:00:23 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 18:00:23 executing program 0: r0 = socket$inet(0x2, 0x3, 0x100000000052) recvmmsg(r0, &(0x7f0000000080), 0x4000286, 0x1e, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="97", 0x1) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 18:00:23 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0xf) 18:00:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1d}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000003) 18:00:23 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 18:00:23 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000080)=""/119, 0x77}], 0x2) 18:00:23 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0xf) 18:00:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1d}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000003) 18:00:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000080)=""/119, 0x77}], 0x2) 18:00:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1d}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000000), 0x80000003) 18:00:24 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0xf) 18:00:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=[{0x10, 0x11}], 0x10}}], 0x1, 0x0) 18:00:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 18:00:25 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 18:00:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000007a00)=@mpls_delroute={0x20, 0x19, 0x103, 0x0, 0x0, {}, [@RTA_DST={0x4}]}, 0x20}}, 0x0) 18:00:25 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0xf) 18:00:25 executing program 6: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) [ 1873.571086] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 1873.668675] IPVS: ftp: loaded support on port[0] = 21 18:00:27 executing program 0: r0 = socket$inet(0x2, 0x3, 0x100000000052) recvmmsg(r0, &(0x7f0000000080), 0x4000286, 0x1e, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="97", 0x1) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 18:00:27 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 18:00:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008003500100000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 18:00:27 executing program 7: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000140)=0x9, 0x5, 0x0) mbind(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000000)=0xffffffffffffff29, 0x2, 0x0) 18:00:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$packet(0x11, 0x808000000002, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000000)=0x3e, 0x80000003) 18:00:27 executing program 1: r0 = inotify_init1(0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000000c0), 0x1) 18:00:27 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000b7ff8)={0x0, 0x269}, &(0x7f0000000000)=0x725) 18:00:27 executing program 6: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 18:00:27 executing program 7: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000140)=0x9, 0x5, 0x0) mbind(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000000)=0xffffffffffffff29, 0x2, 0x0) 18:00:27 executing program 4: write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)={0x10}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x4c000000) [ 1875.438947] IPVS: ftp: loaded support on port[0] = 21 18:00:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) [ 1875.497291] IPVS: ftp: loaded support on port[0] = 21 18:00:27 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000b7ff8)={0x0, 0x269}, &(0x7f0000000000)=0x725) 18:00:27 executing program 2: r0 = memfd_create(&(0x7f0000000040)='*posix_acl_accesseth0wlan0!*\x00', 0x0) lseek(r0, 0x7ffffffffffffffe, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1) 18:00:27 executing program 7: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000140)=0x9, 0x5, 0x0) mbind(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000000)=0xffffffffffffff29, 0x2, 0x0) 18:00:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040), 0x4) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x1a, 0x3, 0x0, "7ebaaf983de3e10104e7f312b751ccb0a0e4be35aa46479ca497f0082c9d6cef"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 18:00:27 executing program 2: r0 = socket$inet(0x10, 0x800000000000003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000110007031dfffd09000000000000000008000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:00:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0x100000000052) recvmmsg(r0, &(0x7f0000000080), 0x4000286, 0x1e, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="97", 0x1) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 18:00:30 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000b7ff8)={0x0, 0x269}, &(0x7f0000000000)=0x725) 18:00:30 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/38, 0x28d, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000380), 0x8}) 18:00:30 executing program 7: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000140)=0x9, 0x5, 0x0) mbind(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000000)=0xffffffffffffff29, 0x2, 0x0) 18:00:30 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet(r1, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 18:00:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040), 0x4) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x1a, 0x3, 0x0, "7ebaaf983de3e10104e7f312b751ccb0a0e4be35aa46479ca497f0082c9d6cef"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 18:00:30 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 18:00:30 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x2000400) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 18:00:30 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x2000400) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 18:00:30 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000b7ff8)={0x0, 0x269}, &(0x7f0000000000)=0x725) 18:00:30 executing program 7: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x83, 0x2) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000180)=0x2, 0x4) sendto$unix(r0, &(0x7f0000000140)="1d9b000000007675d706d94e590291c9900d3be5299d0a4d3d1891a1fe3d8edd715c9f981c39daefbae33fbd06698cc347008df8", 0x34, 0x0, &(0x7f0000000000)=@abs, 0x6e) 18:00:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x7ff}]}, 0x28}}, 0x0) [ 1878.927704] IPVS: ftp: loaded support on port[0] = 21 18:00:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RATTACH(r1, &(0x7f0000000140)={0x14}, 0x14) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) 18:00:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040), 0x4) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x1a, 0x3, 0x0, "7ebaaf983de3e10104e7f312b751ccb0a0e4be35aa46479ca497f0082c9d6cef"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 18:00:31 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x2000400) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 18:00:31 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/251, 0xf8}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x200004e21}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x80}, 0x0) 18:00:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x100000000052) recvmmsg(r0, &(0x7f0000000080), 0x4000286, 0x1e, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="97", 0x1) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000), 0x10) 18:00:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 18:00:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f00000000c0)=0x0) write$binfmt_elf64(r0, &(0x7f00000007c0)=ANY=[], 0x0) close(r0) io_submit(r2, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 18:00:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="bd", 0x1}]) 18:00:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040), 0x4) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x1a, 0x3, 0x0, "7ebaaf983de3e10104e7f312b751ccb0a0e4be35aa46479ca497f0082c9d6cef"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 18:00:34 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) unshare(0x2000400) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 18:00:34 executing program 3: r0 = socket(0x2, 0x3, 0x40) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 18:00:34 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/251, 0xf8}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x200004e21}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x80}, 0x0) 18:00:34 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) 18:00:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) recvmsg(r0, &(0x7f0000002140)={&(0x7f0000000740)=@hci, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/150, 0x96}, {&(0x7f0000000a40)}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002100)=""/28, 0x1c}, 0x0) 18:00:34 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x80002, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x2f, 0x6, 0x0, {0x0, 0x0, 0xffffff4b, 0x0, 'vmnet1'}}, 0x2f) 18:00:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 18:00:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 18:00:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000340)="bc", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 18:00:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 18:00:34 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x8800000000000000, 0x0) 18:00:37 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/251, 0xf8}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x200004e21}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x80}, 0x0) 18:00:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x20000000000001, 0x2ed7, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) 18:00:37 executing program 1: r0 = socket$inet(0x2, 0x200000000002, 0x0) shutdown(r0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0)={0x0, 0x7530}) 18:00:37 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000a29000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) 18:00:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x101, 0x40, 0x200, 0x3507, 0x5}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000000)={'bond0\x00', @ifru_settings={0x1, 0x8, @fr_pvc=&(0x7f0000000040)}}) 18:00:37 executing program 6: unshare(0x20400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)) 18:00:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 18:00:37 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x20001600, 0x0, 0x0, 0x200018a8, 0x200018d8], 0x0, &(0x7f0000000240), &(0x7f0000001600)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) [ 1885.378363] kernel msg: ebtables bug: please report to author: Couldn't copy entries from userspace 18:00:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="48000000140019eca54dcbeafd0d8c560284ffe00600000000000000a2bc5603ca00000f7f81001e362d6f53000101ff0000000309ff5bffff00c7e5ed5e00000000000000b32b2d", 0x48}], 0x1) [ 1885.441816] kernel msg: ebtables bug: please report to author: Couldn't copy entries from userspace 18:00:37 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x3f1, &(0x7f0000f5d000), 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x61, 0x2041, 0x0) 18:00:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x800031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000fe3)="441f0801000000009727c1c6fe36cef3e26def23000200000011000013", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000)=""/4096, &(0x7f00000001c0)=0x1000) 18:00:37 executing program 4: r0 = memfd_create(&(0x7f0000000000)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x101, 0x3}}}, 0x78) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) 18:00:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) 18:00:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x331, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 18:00:37 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) mlock2(&(0x7f00002be000/0x3000)=nil, 0x3000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f000026cfff), 0x0, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) syslog(0x0, &(0x7f0000000100)=""/1, 0x1) setresgid(0x0, 0x0, 0x0) 18:00:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast1, @remote}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @dev}, 0x8) 18:00:38 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/251, 0xf8}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x200004e21}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x80}, 0x0) 18:00:38 executing program 5: r0 = epoll_create1(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c85000)) 18:00:38 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000097000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) 18:00:38 executing program 6: r0 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x200) 18:00:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x804) read(r2, &(0x7f0000000080)=""/19, 0xffffff5c) 18:00:38 executing program 4: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xd) 18:00:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000340)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @rand_addr=0x5d8f864b}, 0x10) shutdown(r1, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x98) 18:00:38 executing program 5: r0 = epoll_create1(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c85000)) 18:00:38 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) 18:00:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") close(r1) 18:00:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = getpgrp(0x0) r3 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r4 = gettid() socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r5, 0x8, r2) read$eventfd(r3, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r6}], 0x1, 0xfffffffffffffff8) dup3(r5, r6, 0x0) tkill(r4, 0x16) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000580)="0a5cc80700315f85715070") dup2(r0, r1) 18:00:38 executing program 3: r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000300)=@req={0xfff, 0x0, 0x0, 0x7}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000000), 0x70c000, 0x0) 18:00:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) 18:00:38 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = memfd_create(&(0x7f0000000380)="f16b23d66c7d79b39f6d5b8694a2d86c87219728d4002dc8e1b4832371c2d651f13d5ec849e82f1736dbd9338aed035267bb4e75733eac6f898bb175fd8511cc4c2c593dcdb42f6f173216b2a9", 0x0) write$eventfd(r1, &(0x7f0000000100), 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) 18:00:38 executing program 5: r0 = epoll_create1(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c85000)) 18:00:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a080007000000000013860e54036205001a00000ce68d54265e7edf151a0e10001407e682fe64f211dccce58892f5ad4ebd4be5e60cae"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 18:00:39 executing program 6: unshare(0x20400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) 18:00:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sequencer2\x00', 0x0, 0x0) poll(&(0x7f00000012c0)=[{r1}], 0x20000000000000d6, 0x0) 18:00:39 executing program 5: r0 = epoll_create1(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c85000)) 18:00:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a080007000000000013860e54036205001a00000ce68d54265e7edf151a0e10001407e682fe64f211dccce58892f5ad4ebd4be5e60cae"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 18:00:39 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="5500000018007f9600fe01b2a4a280930a06000000a84308910000003900090035002d0c000000001900150000000000000000dc1338d520000000000000005afb6bfb448daa7227c03ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 18:00:39 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) 18:00:39 executing program 7: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) migrate_pages(0x0, 0x27, &(0x7f00000000c0)=0x44, &(0x7f00000001c0)=0x1) 18:00:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a080007000000000013860e54036205001a00000ce68d54265e7edf151a0e10001407e682fe64f211dccce58892f5ad4ebd4be5e60cae"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 18:00:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8921, &(0x7f00000000c0)={'lo\x00', @ifru_map}) 18:00:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c99f526e90fc521b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc8", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/226, 0x6f7e5a56}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 18:00:41 executing program 6: r0 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x4}) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 18:00:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:41 executing program 7: unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) 18:00:41 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x40, 0x490001) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000280)={0x2, 0xfff, 0x3ff}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r3, &(0x7f0000000080)={0x1c4}, 0xc534d22) ioctl$int_in(r3, 0x80000000005001, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080)="b11454a5e6320f03", &(0x7f0000000280)}, 0x20) 18:00:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) listen(r0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0xfe}]) 18:00:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a080007000000000013860e54036205001a00000ce68d54265e7edf151a0e10001407e682fe64f211dccce58892f5ad4ebd4be5e60cae"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 18:00:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) listen(r0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0xfe}]) 18:00:41 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6087faa700443200fe80000000000000000e0000000000bb00000000000000000000ffff7f0000010420880b00000c0000000800000086dd080088be00000000100000000100000000000000080022eb00010000200000000200000000000000000000000800655800000000"], &(0x7f0000000000)) 18:00:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback}], 0x10) 18:00:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1212}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0xb101}) 18:00:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) listen(r0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0xfe}]) 18:00:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000000), &(0x7f0000000040)="7312a93cfae3ff947a00", 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x8000000000001, 0x0, [], 0x0, 0x4}, 0x48) 18:00:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000600)={@mcast2}, 0x14) 18:00:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) listen(r0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0xfe}]) 18:00:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 18:00:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) finit_module(r0, &(0x7f00000001c0)='nodev\\em0@)mime_typekeyringselinuxwlan1vboxnet0^--\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = dup2(r1, r1) socket(0x3, 0x0, 0xff) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/70) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r3, 0x3) 18:00:43 executing program 0: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000002300000000008271bdf3fde672283bad43fa3ad3d0fd58ef399707d9f6d9d021515174f716e1ec1a"], 0x42) unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045401, &(0x7f00000000c0)) 18:00:43 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x6011, r1, 0x0) madvise(&(0x7f00001c1000/0x1000)=nil, 0x1000, 0xb) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000240)) 18:00:43 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x40, 0x490001) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000280)={0x2, 0xfff, 0x3ff}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r3, &(0x7f0000000080)={0x1c4}, 0xc534d22) ioctl$int_in(r3, 0x80000000005001, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080)="b11454a5e6320f03", &(0x7f0000000280)}, 0x20) 18:00:43 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 18:00:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) finit_module(r0, &(0x7f00000001c0)='nodev\\em0@)mime_typekeyringselinuxwlan1vboxnet0^--\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = dup2(r1, r1) socket(0x3, 0x0, 0xff) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/70) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r3, 0x3) 18:00:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0xfffffffffffffffa) 18:00:43 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6}]}) getpgid(0x0) r0 = getpgrp(0x0) kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 18:00:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 18:00:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) finit_module(r0, &(0x7f00000001c0)='nodev\\em0@)mime_typekeyringselinuxwlan1vboxnet0^--\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = dup2(r1, r1) socket(0x3, 0x0, 0xff) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/70) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r3, 0x3) 18:00:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000200)=""/86, 0x56, 0x0, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="24000000260007031dfffd946fa283df8fc4390009000000069effff000000000d00ff7e", 0x24}], 0x1}, 0x0) 18:00:43 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 1891.809643] audit: type=1326 audit(1535565643.818:58): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28082 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 18:00:44 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 18:00:44 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="ea", 0x1}], 0x1, 0x0) 18:00:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x18, 0x0, 0x7, "4403"}], 0x18}, 0x0) 18:00:44 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x2000000000000001) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100), 0x8) 18:00:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) finit_module(r0, &(0x7f00000001c0)='nodev\\em0@)mime_typekeyringselinuxwlan1vboxnet0^--\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = dup2(r1, r1) socket(0x3, 0x0, 0xff) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/70) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r3, 0x3) 18:00:44 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 18:00:44 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x40, 0x490001) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000280)={0x2, 0xfff, 0x3ff}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r3, &(0x7f0000000080)={0x1c4}, 0xc534d22) ioctl$int_in(r3, 0x80000000005001, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080)="b11454a5e6320f03", &(0x7f0000000280)}, 0x20) 18:00:44 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000007c0)=""/97, 0x61}], 0xa) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB]) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000000440), 0x8000fffffffe) 18:00:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 18:00:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:00:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) close(r1) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1892.551540] audit: type=1326 audit(1535565644.560:59): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28082 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 18:00:44 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000e, 0x32, 0xffffffffffffffff, 0x0) close(r0) 18:00:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x7, 0x79}, {0x1, 0x29}, 0xe18e, 0x2, 0xfffffffffffff610}) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x6, 0x1d, 0x2, 0x10, 0x3, 0x7fffffff, 0x3, 0xdd, 0xffffffffffffffff}) [ 1892.696744] input: syz1 as /devices/virtual/input/input167 [ 1892.776329] input: syz1 as /devices/virtual/input/input168 18:00:44 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xf401, 0x0, 0x0) 18:00:44 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x800000031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x50, &(0x7f0000000040)}, 0x10) 18:00:44 executing program 4: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) [ 1892.955591] tls_set_device_offload_rx: netdev lo with no TLS offload 18:00:45 executing program 7: unshare(0x20400) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup2(r0, r0) shutdown(r1, 0x0) 18:00:45 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 18:00:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x4}}) 18:00:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'security.', '\x00'}, &(0x7f0000000580)=""/132, 0x84) umount2(&(0x7f0000000100)='./file0\x00', 0x2) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0x0, 0x2}, 0x10) 18:00:45 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xf401, 0x0, 0x0) 18:00:45 executing program 4: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) [ 1893.331998] tls_set_device_offload_rx: netdev lo with no TLS offload 18:00:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x40, 0x490001) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000280)={0x2, 0xfff, 0x3ff}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r3, &(0x7f0000000080)={0x1c4}, 0xc534d22) ioctl$int_in(r3, 0x80000000005001, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080)="b11454a5e6320f03", &(0x7f0000000280)}, 0x20) 18:00:45 executing program 7: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, &(0x7f0000000380)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 18:00:45 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x18, 0x0) 18:00:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="741ae4cda622a441b5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x3fd, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffb0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 18:00:45 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xf401, 0x0, 0x0) 18:00:45 executing program 4: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 18:00:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000000040)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x4, 0x2) mincore(&(0x7f0000b06000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/52) get_mempolicy(&(0x7f0000000140), &(0x7f00000000c0), 0x0, &(0x7f00005be000/0x2000)=nil, 0x0) [ 1893.700273] IPVS: ftp: loaded support on port[0] = 21 [ 1893.732113] tls_set_device_offload_rx: netdev lo with no TLS offload 18:00:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) 18:00:45 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x18, 0x0) 18:00:45 executing program 4: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!'], 0x2) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 18:00:45 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=""/229, 0xe5}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)='\a', 0x1, 0xf401, 0x0, 0x0) 18:00:46 executing program 7: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, &(0x7f0000000380)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) [ 1894.140252] tls_set_device_offload_rx: netdev lo with no TLS offload 18:00:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0x37, '\x00'}], 0x18}, 0x0) 18:00:46 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x18, 0x0) 18:00:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, &(0x7f0000005100), 0x0, 0x0, &(0x7f0000000600)=@abs, 0x6e) [ 1894.279052] IPVS: ftp: loaded support on port[0] = 21 18:00:46 executing program 4: unshare(0x20400) r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 18:00:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 18:00:46 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd5, "e999a8193f2c9b7be6942c25185ffdb289cbfeaa5094e1213d7da0437cf80066781670ffefd4054c54886b7a65620d42dcdaff86252757baf25cea81b96228db32e9f2c2499f9a9400d5c04271177f4df795c99311c8e352409251ce6396987845fec5ddf2953dd2a3127494bf75447b048302128fc8ca5d28165f372bc26dd564e5002108b7a313c35444c33ec114989aa2f4eee4e17ec92d62f4775edd757e9cf89847f6a3011a01aa2472b5f881b237fc27a6cf1abbddaf365fd3412694249fc78f781817381d1bcf6e48ea8180e46844ea199c"}, &(0x7f0000000280)=0xdd) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x6}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) semget(0x1, 0x3, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$KDDISABIO(r3, 0x4b37) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) sendto$inet(r4, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000580)=0x10) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x20000003) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = accept4(r6, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001180)="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") write(r8, &(0x7f0000000180)="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", 0x1000) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) inotify_init1(0x80000) connect(r8, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 18:00:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$FS_IOC_FSSETXATTR(r0, 0x40087602, &(0x7f0000000000)) 18:00:46 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x18, 0x0) 18:00:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x10) 18:00:46 executing program 4: timer_create(0xfffffffffffffffa, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, r0+30000000}, {0x0, 0x9}}, &(0x7f0000000080)) [ 1894.955064] dccp_close: ABORT with 4096 bytes unread 18:00:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r0}) 18:00:48 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000340)) 18:00:48 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) 18:00:48 executing program 7: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, &(0x7f0000000380)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 18:00:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="0000000000000400b5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 18:00:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x1) 18:00:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 18:00:48 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd5, "e999a8193f2c9b7be6942c25185ffdb289cbfeaa5094e1213d7da0437cf80066781670ffefd4054c54886b7a65620d42dcdaff86252757baf25cea81b96228db32e9f2c2499f9a9400d5c04271177f4df795c99311c8e352409251ce6396987845fec5ddf2953dd2a3127494bf75447b048302128fc8ca5d28165f372bc26dd564e5002108b7a313c35444c33ec114989aa2f4eee4e17ec92d62f4775edd757e9cf89847f6a3011a01aa2472b5f881b237fc27a6cf1abbddaf365fd3412694249fc78f781817381d1bcf6e48ea8180e46844ea199c"}, &(0x7f0000000280)=0xdd) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x6}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) semget(0x1, 0x3, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$KDDISABIO(r3, 0x4b37) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) sendto$inet(r4, &(0x7f0000000000)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a6b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b55548b845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b62ed7676706d40bc5c80e376980b81", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000580)=0x10) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x20000003) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = accept4(r6, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001180)="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") write(r8, &(0x7f0000000180)="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", 0x1000) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) inotify_init1(0x80000) connect(r8, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) [ 1896.180652] IPVS: ftp: loaded support on port[0] = 21 18:00:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001a010000010000007d00000000000000"], 0x18}}], 0x1, 0x0) shutdown(r0, 0x1) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 18:00:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x20400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) [ 1896.393395] dccp_close: ABORT with 4096 bytes unread 18:00:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x400167}, 0x55) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x7, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x1}, 0x48) 18:00:48 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x4, 0x4000000000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000180), &(0x7f0000000080)=0xfffffffffffffec0) 18:00:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 18:00:48 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd5, "e999a8193f2c9b7be6942c25185ffdb289cbfeaa5094e1213d7da0437cf80066781670ffefd4054c54886b7a65620d42dcdaff86252757baf25cea81b96228db32e9f2c2499f9a9400d5c04271177f4df795c99311c8e352409251ce6396987845fec5ddf2953dd2a3127494bf75447b048302128fc8ca5d28165f372bc26dd564e5002108b7a313c35444c33ec114989aa2f4eee4e17ec92d62f4775edd757e9cf89847f6a3011a01aa2472b5f881b237fc27a6cf1abbddaf365fd3412694249fc78f781817381d1bcf6e48ea8180e46844ea199c"}, &(0x7f0000000280)=0xdd) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x6}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) semget(0x1, 0x3, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$KDDISABIO(r3, 0x4b37) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) sendto$inet(r4, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000580)=0x10) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x20000003) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = accept4(r6, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001180)="37d16fe82c62c72e0ef052f5d8e9a7f0273dc4f189b7c792afdeae89aaf2a27591838f51d68d936fc80e92f1212e392bd2ddd8388e9ac8c3a994fe564d72606e57bf8f834f7f390699c95806de78f1b5f3897825f3e5c203559de54554e33a598f49b8157049f7034531303696ee4ecaf665fe26e14ac36744ec85d5994cbec1bf105b349aa84c98c71c4f110327d95f275711f4037ed9f07e12ce9cd2e86534a76d3d08934fac3a99c165c93df923ee5759df77dc41989f4b2d682dececc9a5cf29dd17e8fd7b143685c94731cdbc01a6d686664d2eac50ab1a46d3d78b41b449f8e0610280af118e9d2ad6180f4b2dd0ea44320cd326c8f9da9508d7c261cc") write(r8, &(0x7f0000000180)="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", 0x1000) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) inotify_init1(0x80000) connect(r8, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 18:00:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x20400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) 18:00:48 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x20400) lseek(r0, 0x0, 0x0) [ 1896.958207] dccp_close: ABORT with 4096 bytes unread 18:00:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x1e, 0x5, 0x0) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 18:00:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r0}) 18:00:49 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000280)=""/11, 0xb6) 18:00:49 executing program 7: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, &(0x7f0000000380)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 18:00:49 executing program 2: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) 18:00:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x20400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) 18:00:49 executing program 6: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000280), &(0x7f0000000180), 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) 18:00:49 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd5, "e999a8193f2c9b7be6942c25185ffdb289cbfeaa5094e1213d7da0437cf80066781670ffefd4054c54886b7a65620d42dcdaff86252757baf25cea81b96228db32e9f2c2499f9a9400d5c04271177f4df795c99311c8e352409251ce6396987845fec5ddf2953dd2a3127494bf75447b048302128fc8ca5d28165f372bc26dd564e5002108b7a313c35444c33ec114989aa2f4eee4e17ec92d62f4775edd757e9cf89847f6a3011a01aa2472b5f881b237fc27a6cf1abbddaf365fd3412694249fc78f781817381d1bcf6e48ea8180e46844ea199c"}, &(0x7f0000000280)=0xdd) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x6}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) semget(0x1, 0x3, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$KDDISABIO(r3, 0x4b37) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)) sendto$inet(r4, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000580)=0x10) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r6, 0x20000003) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = accept4(r6, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000001180)="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") write(r8, &(0x7f0000000180)="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", 0x1000) ioctl$int_in(r7, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) inotify_init1(0x80000) connect(r8, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) [ 1897.205516] IPVS: ftp: loaded support on port[0] = 21 18:00:49 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xb}]}}}]}, 0x3c}}, 0x0) 18:00:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x20400) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) [ 1897.374708] dccp_close: ABORT with 4096 bytes unread 18:00:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', @ifru_data=&(0x7f0000000040)="06c08d506838db6b6412647085dd403caaec1d51a52e9d1fb9018b2e17e852e6"}) [ 1897.517564] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) 18:00:49 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000080)='\r'}) 18:00:49 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000062d000/0x2000)=nil, 0x2000, 0x0, 0x8000000000004011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:00:49 executing program 5: mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x84, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value, 0x8) close(r2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) close(r0) 18:00:49 executing program 0: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x85, 0x0, 0x0) 18:00:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000532000)=0x19) ioctl$TCSETS(r1, 0x5423, &(0x7f0000000040)) 18:00:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x45, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 18:00:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r0}) 18:00:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000000c0)="e6d0a6315221ae8ce5ffffff", 0x800a, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 18:00:50 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000280)=""/11, 0xb6) 18:00:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=@routing, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 18:00:50 executing program 0: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x85, 0x0, 0x0) 18:00:50 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000400)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f00000002c0)=0x0) io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000015) 18:00:50 executing program 5: mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x4, 0x4000000000032, 0xffffffffffffffff, 0x0) unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740), &(0x7f0000001780)=0xc) 18:00:50 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{}, 0x0, 0x0, 0x0, 0x0, "d95e06dc461bbd87"}, 0x10}}, 0x0) 18:00:50 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) [ 1898.834739] audit: type=1326 audit(1535565650.844:60): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28417 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 1898.928574] audit: type=1326 audit(1535565650.938:61): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28417 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 18:00:51 executing program 0: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x85, 0x0, 0x0) 18:00:51 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)=' ', 0x4000005) 18:00:51 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40043311, &(0x7f0000000240)) 18:00:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1}, 0x14) sendto(r0, &(0x7f0000000000)="85275dc48c0c0000c7839c6c0806", 0xe, 0x0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000080)) 18:00:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r0}) 18:00:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}}, 0x0) 18:00:51 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x84000) shmctl$IPC_RMID(r0, 0x0) 18:00:51 executing program 0: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x85, 0x0, 0x0) 18:00:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001f00)={&(0x7f0000000180), 0xc, &(0x7f0000001ec0)={&(0x7f0000000780)=@dellink={0x28, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:00:52 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000280)=""/11, 0xb6) 18:00:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') unshare(0x2020400) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 18:00:52 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000240)) 18:00:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x10018000}, 0xc) 18:00:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:52 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="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", 0x1b0}, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup2(r1, r0) 18:00:52 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}}, 0x0) 18:00:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f0000000480)="3a760ac4dcf828c0dd2d13f7626f786ee36f9ad3a39f3f61e1dcd0aa6333b6ce96fe6c263c766137c551de760ff538fcc79e0504003ed7fada717d9a48862d2128684ab099e538cbd4319c9dc8903fd93adcd61aeb4686814bc7a289253f9c9aa878b5dc577c9f052f4e7cc65504bfcf7348cc13bc90f5211cc2504ac2d32e4ae53ec60781abb92950b7fce94905a39e3946eee677420800ce34da0b2fa50847c2679fa51d5a7a3b9240b0954723db0b9538fa362af7047f22558b991bb876068ea011fd95c9e23f745e616d89703d977200000000000000003050c4d282455ff349a466b376cad96f94301703e77c5457b298", 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000440)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/52, 0x34}], 0x1) fallocate(r0, 0x11, 0x0, 0x40200) [ 1900.326170] syz-executor0: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1900.339941] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1900.345198] CPU: 1 PID: 28484 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1900.352491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1900.361879] Call Trace: [ 1900.364542] dump_stack+0x14b/0x190 [ 1900.368211] warn_alloc+0x472/0x690 [ 1900.371907] __vmalloc_node_range+0x203/0x1140 [ 1900.376551] __vmalloc_node_flags_caller+0x12b/0x140 [ 1900.381730] ? alloc_netdev_mqs+0x115a/0x1680 [ 1900.386256] ? alloc_netdev_mqs+0x115a/0x1680 [ 1900.390792] kvmalloc_node+0x3a1/0x3e0 [ 1900.394727] alloc_netdev_mqs+0x115a/0x1680 [ 1900.399105] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1900.404158] rtnl_create_link+0x3ad/0xf90 [ 1900.408351] rtnl_newlink+0x24d0/0x39e0 [ 1900.412366] ? rtnl_newlink+0x1731/0x39e0 [ 1900.416655] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1900.422091] ? __module_address+0x6a/0x600 18:00:52 executing program 7: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @multicast2, @multicast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @rand_addr=0xffffffffffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 1900.426388] ? task_kmsan_context_state+0x5e/0x110 [ 1900.431383] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1900.436806] ? is_bpf_text_address+0x47e/0x4b0 [ 1900.441494] ? rcu_all_qs+0x2e/0x1f0 [ 1900.445293] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1900.450698] ? rtnl_setlink+0x6d0/0x6d0 [ 1900.454712] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1900.459120] ? ___sys_sendmsg+0xe70/0x1290 [ 1900.463429] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1900.468256] ? __alloc_skb+0x201/0x9e0 [ 1900.472208] ? netlink_sendmsg+0xb49/0x1290 [ 1900.476609] ? kmsan_set_origin_inline+0x6b/0x120 [ 1900.481543] ? __msan_poison_alloca+0x173/0x1f0 [ 1900.486299] ? kmsan_set_origin_inline+0x6b/0x120 [ 1900.491275] ? kmsan_set_origin_inline+0x6b/0x120 [ 1900.496196] ? kmsan_set_origin+0x93/0x150 [ 1900.500534] netlink_rcv_skb+0x36e/0x5f0 [ 1900.504678] ? rtnetlink_bind+0x120/0x120 [ 1900.508880] rtnetlink_rcv+0x50/0x60 [ 1900.512661] netlink_unicast+0x1638/0x1720 [ 1900.512705] ? rtnetlink_net_exit+0x90/0x90 [ 1900.512743] netlink_sendmsg+0x1205/0x1290 [ 1900.512823] ___sys_sendmsg+0xe70/0x1290 [ 1900.512889] ? netlink_getsockopt+0x11c0/0x11c0 [ 1900.512980] ? __fget_light+0x53/0x700 [ 1900.513044] ? __fdget+0x4e/0x60 [ 1900.513110] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1900.513171] ? __fget_light+0x6a3/0x700 [ 1900.513249] __x64_sys_sendmsg+0x32d/0x460 [ 1900.513294] ? ___sys_sendmsg+0x1290/0x1290 [ 1900.513322] do_syscall_64+0x15b/0x220 [ 1900.513363] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1900.513388] RIP: 0033:0x457089 [ 1900.513421] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1900.513439] RSP: 002b:00007f83db95ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1900.513477] RAX: ffffffffffffffda RBX: 00007f83db95f6d4 RCX: 0000000000457089 [ 1900.513497] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1900.513516] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1900.513535] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1900.513554] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 [ 1900.513664] Mem-Info: [ 1900.513752] active_anon:34597 inactive_anon:111 isolated_anon:0 [ 1900.513752] active_file:6692 inactive_file:9942 isolated_file:0 [ 1900.513752] unevictable:0 dirty:57 writeback:0 unstable:0 [ 1900.513752] slab_reclaimable:4250 slab_unreclaimable:15162 [ 1900.513752] mapped:71341 shmem:226 pagetables:992 bounce:0 [ 1900.513752] free:62997 free_pcp:933 free_cma:0 [ 1900.513829] Node 0 active_anon:138388kB inactive_anon:444kB active_file:26768kB inactive_file:39768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285364kB dirty:228kB writeback:0kB shmem:904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 118784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1900.513840] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1900.513926] lowmem_reserve[]: 0 2837 7263 7263 [ 1900.513995] Node 0 DMA32 free:185136kB min:26344kB low:32928kB high:39512kB active_anon:46704kB inactive_anon:340kB active_file:2432kB inactive_file:908kB unevictable:0kB writepending:24kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4416kB pagetables:1144kB bounce:0kB free_pcp:1000kB local_pcp:196kB free_cma:0kB [ 1900.764105] lowmem_reserve[]: 0 0 4425 4425 18:00:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000300), 0x212, 0x20000000, &(0x7f0000000180)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=""/14, 0xe}, 0x40000102) shutdown(r1, 0x1) [ 1900.768560] Node 0 Normal free:51320kB min:41088kB low:51360kB high:61632kB active_anon:89588kB inactive_anon:276kB active_file:24336kB inactive_file:38860kB unevictable:0kB writepending:204kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9600kB pagetables:2824kB bounce:0kB free_pcp:2732kB local_pcp:1268kB free_cma:0kB [ 1900.798675] lowmem_reserve[]: 0 0 0 0 [ 1900.802585] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1900.816117] Node 0 DMA32: 354*4kB (UME) 634*8kB (UME) 330*16kB (UM) 162*32kB (UME) 73*64kB (UM) 46*128kB (UME) 45*256kB (UME) 26*512kB (UM) 21*1024kB (M) 2*2048kB (UE) 26*4096kB (UM) = 184440kB [ 1900.833943] Node 0 Normal: 152*4kB (ME) 175*8kB (UME) 68*16kB (UME) 37*32kB (UM) 59*64kB (UM) 38*128kB (UM) 28*256kB (UME) 61*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 51320kB [ 1900.850025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1900.858669] 16943 total pagecache pages [ 1900.862790] 0 pages in swap cache [ 1900.866326] Swap cache stats: add 0, delete 0, find 0/0 [ 1900.871813] Free swap = 0kB [ 1900.874928] Total swap = 0kB [ 1900.878113] 1965969 pages RAM [ 1900.881289] 0 pages HighMem/MovableOnly [ 1900.885347] 101394 pages reserved 18:00:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x62, 0xa, 0xff00}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 18:00:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x3, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) dup3(r1, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/240}, 0x18) 18:00:53 executing program 7: clone(0x200, &(0x7f0000000100), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') preadv(r0, &(0x7f00000027c0)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x8, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:00:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2, &(0x7f0000000000), 0x0) [ 1901.234595] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 1901.242619] CPU: 0 PID: 28495 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1901.249920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.259294] Call Trace: [ 1901.261945] dump_stack+0x14b/0x190 [ 1901.265633] sysfs_warn_dup+0x19e/0x1c0 [ 1901.269669] sysfs_do_create_link_sd+0x293/0x360 [ 1901.274506] sysfs_create_link+0x125/0x190 [ 1901.278860] device_add+0x1613/0x2c70 [ 1901.282755] ? rcu_all_qs+0x2e/0x1f0 [ 1901.286539] wiphy_register+0x275d/0x3470 [ 1901.290762] ieee80211_register_hw+0x2f4d/0x4a90 [ 1901.295597] ? ieee80211_register_hw+0x1011/0x4a90 [ 1901.300589] mac80211_hwsim_new_radio+0x3052/0x4d70 [ 1901.305686] hwsim_new_radio_nl+0xa81/0xd90 [ 1901.310079] ? hwsim_tx_info_frame_received_nl+0x11d0/0x11d0 [ 1901.315926] genl_rcv_msg+0x16d9/0x1860 [ 1901.319998] netlink_rcv_skb+0x36e/0x5f0 [ 1901.324105] ? genl_unbind+0x350/0x350 [ 1901.328034] genl_rcv+0x63/0x80 [ 1901.331375] netlink_unicast+0x1638/0x1720 [ 1901.335707] ? genl_pernet_exit+0x90/0x90 [ 1901.339906] netlink_sendmsg+0x1205/0x1290 [ 1901.344247] ___sys_sendmsg+0xe70/0x1290 [ 1901.348376] ? netlink_getsockopt+0x11c0/0x11c0 [ 1901.353157] ? __fget_light+0x53/0x700 [ 1901.357128] ? __fdget+0x4e/0x60 [ 1901.360579] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1901.366026] ? __fget_light+0x6a3/0x700 [ 1901.370118] __x64_sys_sendmsg+0x32d/0x460 [ 1901.374411] ? ___sys_sendmsg+0x1290/0x1290 [ 1901.378789] do_syscall_64+0x15b/0x220 [ 1901.382744] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1901.387977] RIP: 0033:0x457089 [ 1901.391202] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1901.410129] RSP: 002b:00007f00cf670c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.417893] RAX: ffffffffffffffda RBX: 00007f00cf6716d4 RCX: 0000000000457089 [ 1901.425197] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 18:00:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1}}, 0x18) [ 1901.432500] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.439816] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1901.447113] R13: 00000000004d4158 R14: 00000000004c8b2b R15: 0000000000000002 18:00:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x3, 0x0, "766c616e30860701ace235008a00", 'team_slave_1\x00', 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) [ 1901.863787] syz-executor0: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1901.877497] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1901.883243] CPU: 0 PID: 28500 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1901.890571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.899951] Call Trace: [ 1901.902609] dump_stack+0x14b/0x190 [ 1901.906279] warn_alloc+0x472/0x690 [ 1901.909980] __vmalloc_node_range+0x203/0x1140 [ 1901.914636] __vmalloc_node_flags_caller+0x12b/0x140 [ 1901.919785] ? alloc_netdev_mqs+0x115a/0x1680 [ 1901.924313] ? alloc_netdev_mqs+0x115a/0x1680 [ 1901.928877] kvmalloc_node+0x3a1/0x3e0 [ 1901.932825] alloc_netdev_mqs+0x115a/0x1680 [ 1901.937199] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1901.942254] rtnl_create_link+0x3ad/0xf90 [ 1901.946489] rtnl_newlink+0x24d0/0x39e0 [ 1901.950518] ? rtnl_newlink+0x1731/0x39e0 [ 1901.954840] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1901.960307] ? balance_callback+0x48/0x260 [ 1901.964655] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1901.970195] ? __schedule+0x680/0x760 [ 1901.974094] ? __mutex_lock_slowpath+0x2c/0x30 [ 1901.978788] ? rtnl_setlink+0x6d0/0x6d0 [ 1901.982814] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1901.987189] ? ___sys_sendmsg+0xe70/0x1290 [ 1901.991634] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1901.996477] ? __alloc_skb+0x201/0x9e0 [ 1902.000493] ? netlink_sendmsg+0xb49/0x1290 [ 1902.004892] ? kmsan_set_origin_inline+0x6b/0x120 [ 1902.009803] ? __msan_poison_alloca+0x173/0x1f0 [ 1902.014545] ? kmsan_set_origin_inline+0x6b/0x120 [ 1902.019493] ? kmsan_set_origin_inline+0x6b/0x120 [ 1902.024439] ? kmsan_set_origin+0x93/0x150 [ 1902.028765] netlink_rcv_skb+0x36e/0x5f0 [ 1902.032914] ? rtnetlink_bind+0x120/0x120 [ 1902.037116] rtnetlink_rcv+0x50/0x60 [ 1902.040871] netlink_unicast+0x1638/0x1720 [ 1902.045165] ? rtnetlink_net_exit+0x90/0x90 [ 1902.049576] netlink_sendmsg+0x1205/0x1290 [ 1902.053909] ___sys_sendmsg+0xe70/0x1290 [ 1902.058075] ? netlink_getsockopt+0x11c0/0x11c0 [ 1902.062842] ? __fget_light+0x53/0x700 [ 1902.066799] ? __fdget+0x4e/0x60 [ 1902.070263] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1902.075703] ? __fget_light+0x6a3/0x700 [ 1902.079765] __x64_sys_sendmsg+0x32d/0x460 [ 1902.084090] ? ___sys_sendmsg+0x1290/0x1290 [ 1902.088466] do_syscall_64+0x15b/0x220 [ 1902.092444] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1902.097676] RIP: 0033:0x457089 [ 1902.100915] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1902.119842] RSP: 002b:00007f83db93dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1902.127587] RAX: ffffffffffffffda RBX: 00007f83db93e6d4 RCX: 0000000000457089 [ 1902.134890] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 1902.142194] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 1902.149502] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1902.156800] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000001 [ 1902.164252] Mem-Info: [ 1902.166811] active_anon:35128 inactive_anon:94 isolated_anon:0 [ 1902.166811] active_file:6692 inactive_file:9951 isolated_file:0 [ 1902.166811] unevictable:0 dirty:68 writeback:0 unstable:0 [ 1902.166811] slab_reclaimable:4254 slab_unreclaimable:15149 [ 1902.166811] mapped:71280 shmem:2297 pagetables:858 bounce:0 [ 1902.166811] free:62126 free_pcp:1158 free_cma:0 [ 1902.200263] Node 0 active_anon:138192kB inactive_anon:376kB active_file:26768kB inactive_file:39804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285236kB dirty:272kB writeback:0kB shmem:6868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 118784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1902.228542] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1902.254846] lowmem_reserve[]: 0 2837 7263 7263 18:00:54 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000280)=""/11, 0xb6) 18:00:54 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, '\nond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 18:00:54 executing program 2: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000180)=""/77) 18:00:54 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}}, 0x0) [ 1902.259586] Node 0 DMA32 free:207380kB min:26344kB low:32928kB high:39512kB active_anon:42356kB inactive_anon:196kB active_file:2432kB inactive_file:944kB unevictable:0kB writepending:60kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3520kB pagetables:608kB bounce:0kB free_pcp:2060kB local_pcp:588kB free_cma:0kB [ 1902.288941] lowmem_reserve[]: 0 0 4425 4425 [ 1902.293469] Node 0 Normal free:51320kB min:41088kB low:51360kB high:61632kB active_anon:89588kB inactive_anon:276kB active_file:24336kB inactive_file:38860kB unevictable:0kB writepending:212kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9600kB pagetables:2824kB bounce:0kB free_pcp:2732kB local_pcp:1464kB free_cma:0kB [ 1902.323403] lowmem_reserve[]: 0 0 0 0 [ 1902.327376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1902.340966] Node 0 DMA32: 1161*4kB (UME) 609*8kB (UME) 372*16kB (UM) 196*32kB (UME) 103*64kB (UM) 54*128kB (UME) 38*256kB (UME) 26*512kB (UM) 21*1024kB (M) 11*2048kB (UME) 25*4096kB (UM) = 204716kB [ 1902.359053] Node 0 Normal: 152*4kB (ME) 175*8kB (UME) 68*16kB (UME) 37*32kB (UM) 59*64kB (UM) 38*128kB (UM) 28*256kB (UME) 61*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 51320kB [ 1902.375112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1902.383785] 16822 total pagecache pages [ 1902.387849] 0 pages in swap cache [ 1902.391383] Swap cache stats: add 0, delete 0, find 0/0 [ 1902.396848] Free swap = 0kB [ 1902.399945] Total swap = 0kB [ 1902.403067] 1965969 pages RAM [ 1902.406274] 0 pages HighMem/MovableOnly [ 1902.410319] 101394 pages reserved [ 1902.454898] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 1902.462845] CPU: 1 PID: 28565 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1902.470144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1902.479534] Call Trace: [ 1902.482229] dump_stack+0x14b/0x190 [ 1902.485911] sysfs_warn_dup+0x19e/0x1c0 [ 1902.489960] sysfs_do_create_link_sd+0x293/0x360 [ 1902.494853] sysfs_create_link+0x125/0x190 [ 1902.499136] device_add+0x1613/0x2c70 [ 1902.503349] ? rcu_all_qs+0x2e/0x1f0 [ 1902.507886] wiphy_register+0x275d/0x3470 [ 1902.512288] ieee80211_register_hw+0x2f4d/0x4a90 [ 1902.517183] ? ieee80211_register_hw+0x1011/0x4a90 [ 1902.522632] mac80211_hwsim_new_radio+0x3052/0x4d70 [ 1902.528004] hwsim_new_radio_nl+0xa81/0xd90 [ 1902.532505] ? hwsim_tx_info_frame_received_nl+0x11d0/0x11d0 [ 1902.538344] genl_rcv_msg+0x16d9/0x1860 [ 1902.542407] netlink_rcv_skb+0x36e/0x5f0 [ 1902.546519] ? genl_unbind+0x350/0x350 [ 1902.550453] genl_rcv+0x63/0x80 [ 1902.553783] netlink_unicast+0x1638/0x1720 [ 1902.558062] ? genl_pernet_exit+0x90/0x90 [ 1902.562250] netlink_sendmsg+0x1205/0x1290 [ 1902.566594] ___sys_sendmsg+0xe70/0x1290 [ 1902.570734] ? netlink_getsockopt+0x11c0/0x11c0 [ 1902.575505] ? __fget_light+0x53/0x700 [ 1902.579467] ? __fdget+0x4e/0x60 [ 1902.582909] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1902.588357] ? __fget_light+0x6a3/0x700 [ 1902.592415] __x64_sys_sendmsg+0x32d/0x460 [ 1902.596703] ? ___sys_sendmsg+0x1290/0x1290 [ 1902.601060] do_syscall_64+0x15b/0x220 [ 1902.605004] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1902.610220] RIP: 0033:0x457089 [ 1902.613455] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1902.632390] RSP: 002b:00007f00cf670c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1902.640160] RAX: ffffffffffffffda RBX: 00007f00cf6716d4 RCX: 0000000000457089 [ 1902.647474] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 18:00:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x3, 0x0, "766c616e30860701ace235008a00", 'team_slave_1\x00', 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 18:00:54 executing program 7: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000214fd4)={0x14, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 18:00:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000180)=""/227, 0xe3}], 0x2) 18:00:54 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1902.654775] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.662085] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1902.669385] R13: 00000000004d4158 R14: 00000000004c8b2b R15: 0000000000000002 [ 1902.751940] syz-executor0: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1902.765764] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1902.771048] CPU: 0 PID: 28578 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1902.778349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1902.787757] Call Trace: [ 1902.790409] dump_stack+0x14b/0x190 [ 1902.794116] warn_alloc+0x472/0x690 [ 1902.797834] __vmalloc_node_range+0x203/0x1140 [ 1902.802541] __vmalloc_node_flags_caller+0x12b/0x140 [ 1902.807704] ? alloc_netdev_mqs+0x115a/0x1680 [ 1902.812236] ? alloc_netdev_mqs+0x115a/0x1680 [ 1902.816782] kvmalloc_node+0x3a1/0x3e0 [ 1902.820736] alloc_netdev_mqs+0x115a/0x1680 [ 1902.825132] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1902.830189] rtnl_create_link+0x3ad/0xf90 [ 1902.834440] rtnl_newlink+0x24d0/0x39e0 [ 1902.838505] ? rtnl_newlink+0x1731/0x39e0 [ 1902.842825] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1902.848273] ? balance_callback+0x48/0x260 [ 1902.852599] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1902.858129] ? __schedule+0x680/0x760 [ 1902.862020] ? __mutex_lock_slowpath+0x2c/0x30 [ 1902.866659] ? rtnl_setlink+0x6d0/0x6d0 [ 1902.870706] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1902.875078] ? ___sys_sendmsg+0xe70/0x1290 [ 1902.879353] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1902.884194] ? __alloc_skb+0x201/0x9e0 [ 1902.888184] ? netlink_sendmsg+0xb49/0x1290 [ 1902.892585] ? kmsan_set_origin_inline+0x6b/0x120 [ 1902.897530] ? __msan_poison_alloca+0x173/0x1f0 [ 1902.902278] ? kmsan_set_origin_inline+0x6b/0x120 [ 1902.907202] ? kmsan_set_origin_inline+0x6b/0x120 [ 1902.912120] ? kmsan_set_origin+0x93/0x150 [ 1902.916443] netlink_rcv_skb+0x36e/0x5f0 [ 1902.920576] ? rtnetlink_bind+0x120/0x120 [ 1902.924789] rtnetlink_rcv+0x50/0x60 [ 1902.928549] netlink_unicast+0x1638/0x1720 [ 1902.932843] ? rtnetlink_net_exit+0x90/0x90 [ 1902.937212] netlink_sendmsg+0x1205/0x1290 [ 1902.941598] ___sys_sendmsg+0xe70/0x1290 [ 1902.945731] ? netlink_getsockopt+0x11c0/0x11c0 [ 1902.950548] ? __fget_light+0x53/0x700 [ 1902.954528] ? __fdget+0x4e/0x60 [ 1902.957985] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1902.963434] ? __fget_light+0x6a3/0x700 [ 1902.967517] __x64_sys_sendmsg+0x32d/0x460 [ 1902.971832] ? ___sys_sendmsg+0x1290/0x1290 [ 1902.976212] do_syscall_64+0x15b/0x220 [ 1902.980157] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1902.985374] RIP: 0033:0x457089 18:00:55 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x3, 0x0, "766c616e30860701ace235008a00", 'team_slave_1\x00', 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 18:00:55 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}}, 0x0) [ 1902.988637] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1903.007576] RSP: 002b:00007f83db95ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1903.015343] RAX: ffffffffffffffda RBX: 00007f83db95f6d4 RCX: 0000000000457089 [ 1903.022651] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1903.029964] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.037269] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1903.044596] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 [ 1903.206012] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 1903.213957] CPU: 0 PID: 28593 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1903.221265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.230690] Call Trace: [ 1903.233334] dump_stack+0x14b/0x190 [ 1903.237004] sysfs_warn_dup+0x19e/0x1c0 [ 1903.241024] sysfs_do_create_link_sd+0x293/0x360 [ 1903.245827] sysfs_create_link+0x125/0x190 [ 1903.250108] device_add+0x1613/0x2c70 [ 1903.254012] ? rcu_all_qs+0x2e/0x1f0 [ 1903.257790] wiphy_register+0x275d/0x3470 [ 1903.262012] ieee80211_register_hw+0x2f4d/0x4a90 [ 1903.266817] ? ieee80211_register_hw+0x1011/0x4a90 [ 1903.271837] mac80211_hwsim_new_radio+0x3052/0x4d70 [ 1903.276941] hwsim_new_radio_nl+0xa81/0xd90 [ 1903.276993] ? hwsim_tx_info_frame_received_nl+0x11d0/0x11d0 [ 1903.277047] genl_rcv_msg+0x16d9/0x1860 [ 1903.291247] netlink_rcv_skb+0x36e/0x5f0 [ 1903.295344] ? genl_unbind+0x350/0x350 [ 1903.299301] genl_rcv+0x63/0x80 [ 1903.302649] netlink_unicast+0x1638/0x1720 [ 1903.306949] ? genl_pernet_exit+0x90/0x90 [ 1903.311149] netlink_sendmsg+0x1205/0x1290 [ 1903.315497] ___sys_sendmsg+0xe70/0x1290 [ 1903.319653] ? netlink_getsockopt+0x11c0/0x11c0 [ 1903.324434] ? __fget_light+0x53/0x700 [ 1903.328427] ? __fdget+0x4e/0x60 [ 1903.331902] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1903.337346] ? __fget_light+0x6a3/0x700 [ 1903.341437] __x64_sys_sendmsg+0x32d/0x460 [ 1903.345752] ? ___sys_sendmsg+0x1290/0x1290 [ 1903.350114] do_syscall_64+0x15b/0x220 [ 1903.354142] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1903.359367] RIP: 0033:0x457089 [ 1903.362639] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1903.381576] RSP: 002b:00007f00cf691c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1903.389329] RAX: ffffffffffffffda RBX: 00007f00cf6926d4 RCX: 0000000000457089 [ 1903.396632] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 18:00:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000011, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='4']}) flock(r0, 0x1) flock(r0, 0xffffffffffeffffd) 18:00:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000600, 0x20000630, 0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x3, 0x0, "766c616e30860701ace235008a00", 'team_slave_1\x00', 'veth0_to_team\x00', 'veth1_to_bond\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) [ 1903.403932] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 1903.411238] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1903.418563] R13: 00000000004d4158 R14: 00000000004c8b2b R15: 0000000000000001 [ 1903.476296] syz-executor6: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1903.489919] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1903.495180] CPU: 0 PID: 28594 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1903.502738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.512142] Call Trace: [ 1903.514820] dump_stack+0x14b/0x190 [ 1903.518517] warn_alloc+0x472/0x690 [ 1903.522263] __vmalloc_node_range+0x203/0x1140 [ 1903.526907] __vmalloc_node_flags_caller+0x12b/0x140 [ 1903.532052] ? alloc_netdev_mqs+0x115a/0x1680 [ 1903.536602] ? alloc_netdev_mqs+0x115a/0x1680 [ 1903.541135] kvmalloc_node+0x3a1/0x3e0 [ 1903.545062] alloc_netdev_mqs+0x115a/0x1680 [ 1903.549461] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1903.554576] rtnl_create_link+0x3ad/0xf90 [ 1903.558782] rtnl_newlink+0x24d0/0x39e0 [ 1903.562804] ? rtnl_newlink+0x1731/0x39e0 [ 1903.567082] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1903.572534] ? balance_callback+0x48/0x260 [ 1903.576857] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1903.582419] ? __schedule+0x680/0x760 [ 1903.586315] ? __mutex_lock_slowpath+0x2c/0x30 [ 1903.590954] ? rtnl_setlink+0x6d0/0x6d0 [ 1903.594972] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1903.599340] ? ___sys_sendmsg+0xe70/0x1290 [ 1903.603625] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1903.608474] ? __alloc_skb+0x201/0x9e0 [ 1903.612437] ? netlink_sendmsg+0xb49/0x1290 [ 1903.616846] ? kmsan_set_origin_inline+0x6b/0x120 [ 1903.621766] ? __msan_poison_alloca+0x173/0x1f0 [ 1903.626520] ? kmsan_set_origin_inline+0x6b/0x120 [ 1903.631491] ? kmsan_set_origin_inline+0x6b/0x120 [ 1903.636429] ? kmsan_set_origin+0x93/0x150 [ 1903.640765] netlink_rcv_skb+0x36e/0x5f0 [ 1903.644885] ? rtnetlink_bind+0x120/0x120 [ 1903.649086] rtnetlink_rcv+0x50/0x60 [ 1903.652873] netlink_unicast+0x1638/0x1720 [ 1903.657187] ? rtnetlink_net_exit+0x90/0x90 [ 1903.661563] netlink_sendmsg+0x1205/0x1290 [ 1903.665901] ___sys_sendmsg+0xe70/0x1290 [ 1903.670041] ? netlink_getsockopt+0x11c0/0x11c0 [ 1903.674837] ? __fget_light+0x53/0x700 [ 1903.678811] ? __fdget+0x4e/0x60 [ 1903.682282] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1903.687737] ? __fget_light+0x6a3/0x700 [ 1903.691807] __x64_sys_sendmsg+0x32d/0x460 [ 1903.696099] ? ___sys_sendmsg+0x1290/0x1290 [ 1903.700469] do_syscall_64+0x15b/0x220 [ 1903.704425] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1903.709660] RIP: 0033:0x457089 [ 1903.712887] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1903.731858] RSP: 002b:00007f328b417c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1903.739608] RAX: ffffffffffffffda RBX: 00007f328b4186d4 RCX: 0000000000457089 [ 1903.746902] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1903.754202] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.761500] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1903.768794] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 [ 1903.776386] warn_alloc_show_mem: 1 callbacks suppressed [ 1903.781883] Mem-Info: [ 1903.784535] active_anon:33535 inactive_anon:1871 isolated_anon:0 [ 1903.784535] active_file:6694 inactive_file:9960 isolated_file:0 [ 1903.784535] unevictable:0 dirty:78 writeback:0 unstable:0 [ 1903.784535] slab_reclaimable:4255 slab_unreclaimable:15131 [ 1903.784535] mapped:73124 shmem:1950 pagetables:959 bounce:0 [ 1903.784535] free:60743 free_pcp:875 free_cma:0 [ 1903.818150] Node 0 active_anon:134140kB inactive_anon:7484kB active_file:26776kB inactive_file:39840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:292496kB dirty:312kB writeback:0kB shmem:7800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 114688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1903.846566] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1903.872944] lowmem_reserve[]: 0 2837 7263 7263 [ 1903.877759] Node 0 DMA32 free:167708kB min:26344kB low:32928kB high:39512kB active_anon:46660kB inactive_anon:7428kB active_file:2440kB inactive_file:980kB unevictable:0kB writepending:96kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4288kB pagetables:1160kB bounce:0kB free_pcp:684kB local_pcp:400kB free_cma:0kB [ 1903.907658] lowmem_reserve[]: 0 0 4425 4425 [ 1903.912181] Node 0 Normal free:51320kB min:41088kB low:51360kB high:61632kB active_anon:89588kB inactive_anon:276kB active_file:24336kB inactive_file:38860kB unevictable:0kB writepending:216kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9600kB pagetables:2824kB bounce:0kB free_pcp:2732kB local_pcp:1464kB free_cma:0kB [ 1903.942105] lowmem_reserve[]: 0 0 0 0 [ 1903.946040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1903.959507] Node 0 DMA32: 2*4kB (UM) 2*8kB (ME) 2*16kB (UM) 2*32kB (ME) 26*64kB (UM) 56*128kB (UME) 38*256kB (UME) 26*512kB (UM) 21*1024kB (M) 6*2048kB (UME) 26*4096kB (UM) = 172280kB [ 1903.977238] Node 0 Normal: 152*4kB (ME) 175*8kB (UME) 68*16kB (UME) 37*32kB (UM) 59*64kB (UM) 38*128kB (UM) 28*256kB (UME) 61*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 51320kB [ 1903.993639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1904.002344] 18777 total pagecache pages [ 1904.006482] 0 pages in swap cache [ 1904.010044] Swap cache stats: add 0, delete 0, find 0/0 [ 1904.015498] Free swap = 0kB [ 1904.018649] Total swap = 0kB [ 1904.021771] 1965969 pages RAM [ 1904.024967] 0 pages HighMem/MovableOnly 18:00:55 executing program 7: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x21000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) [ 1904.029007] 101394 pages reserved [ 1904.181851] syz-executor0: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1904.195617] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1904.200977] CPU: 0 PID: 28599 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1904.208290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.217681] Call Trace: [ 1904.220355] dump_stack+0x14b/0x190 [ 1904.224045] warn_alloc+0x472/0x690 [ 1904.227757] __vmalloc_node_range+0x203/0x1140 [ 1904.232429] __vmalloc_node_flags_caller+0x12b/0x140 [ 1904.237591] ? alloc_netdev_mqs+0x115a/0x1680 [ 1904.242126] ? alloc_netdev_mqs+0x115a/0x1680 [ 1904.246686] kvmalloc_node+0x3a1/0x3e0 [ 1904.250618] alloc_netdev_mqs+0x115a/0x1680 [ 1904.255004] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1904.260064] rtnl_create_link+0x3ad/0xf90 [ 1904.264262] rtnl_newlink+0x24d0/0x39e0 [ 1904.268272] ? rtnl_newlink+0x1731/0x39e0 [ 1904.272614] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1904.278062] ? balance_callback+0x48/0x260 [ 1904.282372] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1904.287900] ? __schedule+0x680/0x760 [ 1904.291793] ? __mutex_lock_slowpath+0x2c/0x30 [ 1904.296426] ? rtnl_setlink+0x6d0/0x6d0 [ 1904.300483] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1904.304873] ? ___sys_sendmsg+0xe70/0x1290 [ 1904.309151] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1904.313978] ? __alloc_skb+0x201/0x9e0 [ 1904.317931] ? netlink_sendmsg+0xb49/0x1290 [ 1904.322339] ? kmsan_set_origin_inline+0x6b/0x120 [ 1904.327263] ? __msan_poison_alloca+0x173/0x1f0 [ 1904.332004] ? kmsan_set_origin_inline+0x6b/0x120 [ 1904.336923] ? kmsan_set_origin_inline+0x6b/0x120 [ 1904.341842] ? kmsan_set_origin+0x93/0x150 [ 1904.346167] netlink_rcv_skb+0x36e/0x5f0 [ 1904.350311] ? rtnetlink_bind+0x120/0x120 [ 1904.354523] rtnetlink_rcv+0x50/0x60 [ 1904.358307] netlink_unicast+0x1638/0x1720 [ 1904.362594] ? rtnetlink_net_exit+0x90/0x90 [ 1904.366970] netlink_sendmsg+0x1205/0x1290 [ 1904.371303] ___sys_sendmsg+0xe70/0x1290 [ 1904.375462] ? netlink_getsockopt+0x11c0/0x11c0 [ 1904.380222] ? __fget_light+0x53/0x700 [ 1904.384179] ? __fdget+0x4e/0x60 [ 1904.387630] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1904.393084] ? __fget_light+0x6a3/0x700 [ 1904.397201] __x64_sys_sendmsg+0x32d/0x460 [ 1904.401508] ? ___sys_sendmsg+0x1290/0x1290 [ 1904.405891] do_syscall_64+0x15b/0x220 [ 1904.409847] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1904.415057] RIP: 0033:0x457089 [ 1904.418308] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1904.437232] RSP: 002b:00007f83db95ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.444976] RAX: ffffffffffffffda RBX: 00007f83db95f6d4 RCX: 0000000000457089 [ 1904.452269] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1904.459562] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1904.466871] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1904.474203] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 18:00:56 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000280012000c000100697036677265000007000200140014003f000000000000000000000000000001"], 0x1}}, 0x0) 18:00:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$packet(0x11, 0x4000000000000003, 0x300) r2 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0800c80700b9ef8f764070") setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup2(r0, r1) 18:00:56 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x82) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000240)=0x10) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78}, 0x78) close(r0) 18:00:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x8) 18:00:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x40000001b) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) 18:00:56 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000100)=""/234, 0x2ff) ioctl$TIOCSBRK(r1, 0x40044591) [ 1904.771296] syz-executor6: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1904.785010] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1904.790299] CPU: 1 PID: 28632 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1904.797620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.806995] Call Trace: [ 1904.809636] dump_stack+0x14b/0x190 [ 1904.813299] warn_alloc+0x472/0x690 [ 1904.816992] __vmalloc_node_range+0x203/0x1140 [ 1904.821670] __vmalloc_node_flags_caller+0x12b/0x140 [ 1904.821741] ? alloc_netdev_mqs+0x115a/0x1680 [ 1904.821767] ? alloc_netdev_mqs+0x115a/0x1680 [ 1904.821803] kvmalloc_node+0x3a1/0x3e0 [ 1904.821835] alloc_netdev_mqs+0x115a/0x1680 [ 1904.821888] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1904.821925] rtnl_create_link+0x3ad/0xf90 [ 1904.821983] rtnl_newlink+0x24d0/0x39e0 [ 1904.857545] ? rtnl_newlink+0x1731/0x39e0 [ 1904.857685] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1904.857741] ? __module_address+0x6a/0x600 [ 1904.857812] ? task_kmsan_context_state+0x5e/0x110 [ 1904.876555] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1904.882012] ? is_bpf_text_address+0x47e/0x4b0 [ 1904.886715] ? rcu_all_qs+0x2e/0x1f0 [ 1904.890526] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1904.895961] ? rtnl_setlink+0x6d0/0x6d0 [ 1904.899983] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1904.904418] ? ___sys_sendmsg+0xe70/0x1290 [ 1904.908725] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1904.913560] ? __alloc_skb+0x201/0x9e0 [ 1904.917533] ? netlink_sendmsg+0xb49/0x1290 18:00:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000200)={@mcast1}, 0x2ed) [ 1904.921991] ? kmsan_set_origin_inline+0x6b/0x120 [ 1904.926937] ? __msan_poison_alloca+0x173/0x1f0 [ 1904.931773] ? kmsan_set_origin_inline+0x6b/0x120 [ 1904.936693] ? kmsan_set_origin_inline+0x6b/0x120 [ 1904.941604] ? kmsan_set_origin+0x93/0x150 [ 1904.945913] netlink_rcv_skb+0x36e/0x5f0 [ 1904.950071] ? rtnetlink_bind+0x120/0x120 [ 1904.954269] rtnetlink_rcv+0x50/0x60 [ 1904.958024] netlink_unicast+0x1638/0x1720 [ 1904.962311] ? rtnetlink_net_exit+0x90/0x90 [ 1904.966686] netlink_sendmsg+0x1205/0x1290 [ 1904.971064] ___sys_sendmsg+0xe70/0x1290 [ 1904.975217] ? netlink_getsockopt+0x11c0/0x11c0 [ 1904.980003] ? __fget_light+0x53/0x700 [ 1904.983968] ? __fdget+0x4e/0x60 [ 1904.987415] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1904.992914] ? __fget_light+0x6a3/0x700 [ 1904.996980] __x64_sys_sendmsg+0x32d/0x460 [ 1905.001347] ? ___sys_sendmsg+0x1290/0x1290 [ 1905.005704] do_syscall_64+0x15b/0x220 [ 1905.009638] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1905.014972] RIP: 0033:0x457089 [ 1905.018221] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1905.037147] RSP: 002b:00007f328b417c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1905.044892] RAX: ffffffffffffffda RBX: 00007f328b4186d4 RCX: 0000000000457089 [ 1905.052182] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1905.059474] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.066771] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1905.074068] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 [ 1905.081782] warn_alloc_show_mem: 1 callbacks suppressed [ 1905.081801] Mem-Info: [ 1905.089780] active_anon:36164 inactive_anon:108 isolated_anon:0 [ 1905.089780] active_file:6694 inactive_file:9978 isolated_file:0 [ 1905.089780] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1905.089780] slab_reclaimable:4255 slab_unreclaimable:15105 [ 1905.089780] mapped:71374 shmem:202 pagetables:993 bounce:0 [ 1905.089780] free:54596 free_pcp:831 free_cma:0 [ 1905.123141] Node 0 active_anon:144656kB inactive_anon:432kB active_file:26776kB inactive_file:39912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285380kB dirty:388kB writeback:0kB shmem:808kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1905.151324] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.177690] lowmem_reserve[]: 0 2837 7263 7263 [ 1905.182443] Node 0 DMA32 free:143468kB min:26344kB low:32928kB high:39512kB active_anon:57116kB inactive_anon:156kB active_file:2440kB inactive_file:1052kB unevictable:0kB writepending:168kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4672kB pagetables:1148kB bounce:0kB free_pcp:520kB local_pcp:344kB free_cma:0kB [ 1905.211973] lowmem_reserve[]: 0 0 4425 4425 [ 1905.216460] Node 0 Normal free:51320kB min:41088kB low:51360kB high:61632kB active_anon:89588kB inactive_anon:276kB active_file:24336kB inactive_file:38860kB unevictable:0kB writepending:220kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9600kB pagetables:2824kB bounce:0kB free_pcp:2732kB local_pcp:1268kB free_cma:0kB [ 1905.246274] lowmem_reserve[]: 0 0 0 0 [ 1905.250194] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1905.263715] Node 0 DMA32: 149*4kB (UM) 103*8kB (ME) 118*16kB (UM) 196*32kB (UME) 40*64kB (UM) 45*128kB (UME) 39*256kB (UME) 27*512kB (UM) 21*1024kB (M) 2*2048kB (ME) 17*4096kB (UM) = 136940kB [ 1905.281287] Node 0 Normal: 152*4kB (ME) 175*8kB (UME) 68*16kB (UME) 37*32kB (UM) 59*64kB (UM) 38*128kB (UM) 28*256kB (UME) 61*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 51320kB [ 1905.297467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1905.306118] 16873 total pagecache pages [ 1905.310190] 0 pages in swap cache [ 1905.313707] Swap cache stats: add 0, delete 0, find 0/0 [ 1905.319172] Free swap = 0kB [ 1905.322262] Total swap = 0kB [ 1905.325397] 1965969 pages RAM [ 1905.328625] 0 pages HighMem/MovableOnly [ 1905.332672] 101394 pages reserved [ 1905.337818] syz-executor0: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1905.351328] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1905.356575] CPU: 1 PID: 28633 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1905.363868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.373256] Call Trace: [ 1905.375907] dump_stack+0x14b/0x190 [ 1905.379595] warn_alloc+0x472/0x690 [ 1905.383284] __vmalloc_node_range+0x203/0x1140 [ 1905.387954] __vmalloc_node_flags_caller+0x12b/0x140 [ 1905.393123] ? alloc_netdev_mqs+0x115a/0x1680 [ 1905.397672] ? alloc_netdev_mqs+0x115a/0x1680 [ 1905.402215] kvmalloc_node+0x3a1/0x3e0 [ 1905.406162] alloc_netdev_mqs+0x115a/0x1680 [ 1905.410591] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1905.415665] rtnl_create_link+0x3ad/0xf90 [ 1905.419863] rtnl_newlink+0x24d0/0x39e0 [ 1905.423891] ? rtnl_newlink+0x1731/0x39e0 [ 1905.428167] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1905.433645] ? balance_callback+0x48/0x260 [ 1905.438003] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1905.443534] ? __schedule+0x680/0x760 [ 1905.447442] ? __mutex_lock_slowpath+0x2c/0x30 [ 1905.452065] ? rtnl_setlink+0x6d0/0x6d0 [ 1905.456075] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1905.460478] ? ___sys_sendmsg+0xe70/0x1290 [ 1905.464789] ? kmsan_set_origin_inline+0x6b/0x120 [ 1905.469750] ? __msan_poison_alloca+0x173/0x1f0 [ 1905.474542] ? kmsan_set_origin_inline+0x6b/0x120 [ 1905.479470] ? kmsan_set_origin+0x93/0x150 [ 1905.483766] netlink_rcv_skb+0x36e/0x5f0 [ 1905.487931] ? rtnetlink_bind+0x120/0x120 [ 1905.492159] rtnetlink_rcv+0x50/0x60 [ 1905.495910] netlink_unicast+0x1638/0x1720 [ 1905.500212] ? rtnetlink_net_exit+0x90/0x90 [ 1905.504576] netlink_sendmsg+0x1205/0x1290 [ 1905.508916] ___sys_sendmsg+0xe70/0x1290 [ 1905.513048] ? netlink_getsockopt+0x11c0/0x11c0 [ 1905.517812] ? __fget_light+0x53/0x700 [ 1905.521773] ? __fdget+0x4e/0x60 [ 1905.525244] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1905.530693] ? __fget_light+0x6a3/0x700 [ 1905.534752] __x64_sys_sendmsg+0x32d/0x460 [ 1905.539054] ? ___sys_sendmsg+0x1290/0x1290 [ 1905.543415] do_syscall_64+0x15b/0x220 [ 1905.547376] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1905.552607] RIP: 0033:0x457089 [ 1905.555846] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1905.574768] RSP: 002b:00007f83db95ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1905.582516] RAX: ffffffffffffffda RBX: 00007f83db95f6d4 RCX: 0000000000457089 [ 1905.589821] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1905.597142] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.604441] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1905.611743] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 18:00:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7b) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r1, &(0x7f00000000c0)='D', 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) accept4(r0, 0x0, &(0x7f0000000080), 0x0) 18:00:57 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7000000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) 18:00:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000003031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 18:00:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x82) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000240)=0x10) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78}, 0x78) close(r0) [ 1905.872289] syz-executor6: vmalloc: allocation failure: 22548578304 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 1905.886365] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1905.891694] CPU: 1 PID: 28662 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1905.899010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.908412] Call Trace: [ 1905.911066] dump_stack+0x14b/0x190 [ 1905.914740] warn_alloc+0x472/0x690 [ 1905.918451] __vmalloc_node_range+0x203/0x1140 [ 1905.923108] __vmalloc_node_flags_caller+0x12b/0x140 [ 1905.928255] ? alloc_netdev_mqs+0x115a/0x1680 [ 1905.932803] ? alloc_netdev_mqs+0x115a/0x1680 [ 1905.937359] kvmalloc_node+0x3a1/0x3e0 [ 1905.941290] alloc_netdev_mqs+0x115a/0x1680 [ 1905.945698] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 1905.950768] rtnl_create_link+0x3ad/0xf90 [ 1905.954974] rtnl_newlink+0x24d0/0x39e0 [ 1905.958995] ? rtnl_newlink+0x1731/0x39e0 [ 1905.963282] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1905.968740] ? balance_callback+0x48/0x260 [ 1905.973060] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1905.978622] ? __schedule+0x680/0x760 [ 1905.982542] ? __mutex_lock_slowpath+0x2c/0x30 [ 1905.987166] ? rtnl_setlink+0x6d0/0x6d0 [ 1905.991719] rtnetlink_rcv_msg+0xa0b/0x1530 [ 1905.996121] ? ___sys_sendmsg+0xe70/0x1290 [ 1906.000402] ? kmem_cache_alloc_node+0xa2a/0xc00 [ 1906.005235] ? __alloc_skb+0x201/0x9e0 [ 1906.009188] ? netlink_sendmsg+0xb49/0x1290 [ 1906.013626] ? kmsan_set_origin_inline+0x6b/0x120 [ 1906.018553] ? __msan_poison_alloca+0x173/0x1f0 [ 1906.023283] ? kmsan_set_origin_inline+0x6b/0x120 [ 1906.028199] ? kmsan_set_origin_inline+0x6b/0x120 [ 1906.033112] ? kmsan_set_origin+0x93/0x150 [ 1906.037421] netlink_rcv_skb+0x36e/0x5f0 [ 1906.041532] ? rtnetlink_bind+0x120/0x120 [ 1906.045794] rtnetlink_rcv+0x50/0x60 [ 1906.049597] netlink_unicast+0x1638/0x1720 [ 1906.053907] ? rtnetlink_net_exit+0x90/0x90 [ 1906.058290] netlink_sendmsg+0x1205/0x1290 [ 1906.062617] ___sys_sendmsg+0xe70/0x1290 [ 1906.066746] ? netlink_getsockopt+0x11c0/0x11c0 18:00:58 executing program 1: r0 = socket(0x80000000000010, 0x802, 0x0) write(r0, &(0x7f0000000040)="240000001a0025d3046bbe04fef7001c020b49ff0000bca8c5dfad000800040001000000", 0x24) 18:00:58 executing program 4: r0 = socket(0xa, 0x80003, 0x5a) sendmmsg$unix(r0, &(0x7f0000004f00)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)='\\', 0x1}], 0x1, &(0x7f0000000600)=[@cred={0x20}], 0x20}], 0x1, 0x0) [ 1906.071512] ? __fget_light+0x53/0x700 [ 1906.075494] ? __fdget+0x4e/0x60 [ 1906.078939] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1906.084380] ? __fget_light+0x6a3/0x700 [ 1906.088463] __x64_sys_sendmsg+0x32d/0x460 [ 1906.093044] ? ___sys_sendmsg+0x1290/0x1290 [ 1906.097414] do_syscall_64+0x15b/0x220 [ 1906.101367] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1906.106600] RIP: 0033:0x457089 18:00:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)) 18:00:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f00000002c0), 0x0) close(r0) [ 1906.109841] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1906.128784] RSP: 002b:00007f328b417c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.136563] RAX: ffffffffffffffda RBX: 00007f328b4186d4 RCX: 0000000000457089 [ 1906.143863] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 1906.151166] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1906.158493] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1906.165821] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 [ 1906.173476] warn_alloc_show_mem: 1 callbacks suppressed [ 1906.173483] Mem-Info: [ 1906.181516] active_anon:32488 inactive_anon:110 isolated_anon:0 [ 1906.181516] active_file:6694 inactive_file:9987 isolated_file:0 [ 1906.181516] unevictable:0 dirty:107 writeback:0 unstable:0 [ 1906.181516] slab_reclaimable:4255 slab_unreclaimable:15105 [ 1906.181516] mapped:71354 shmem:188 pagetables:916 bounce:0 [ 1906.181516] free:68617 free_pcp:1192 free_cma:0 [ 1906.215157] Node 0 active_anon:130068kB inactive_anon:440kB active_file:26776kB inactive_file:39948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285416kB dirty:428kB writeback:0kB shmem:752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 118784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1906.243330] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1906.269723] lowmem_reserve[]: 0 2837 7263 7263 18:00:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) 18:00:58 executing program 7: setrlimit(0x0, &(0x7f0000000040)={0x2}) [ 1906.274494] Node 0 DMA32 free:198896kB min:26344kB low:32928kB high:39512kB active_anon:42632kB inactive_anon:164kB active_file:2440kB inactive_file:1088kB unevictable:0kB writepending:204kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4288kB pagetables:1136kB bounce:0kB free_pcp:876kB local_pcp:840kB free_cma:0kB [ 1906.304047] lowmem_reserve[]: 0 0 4425 4425 [ 1906.304086] Node 0 Normal free:51320kB min:41088kB low:51360kB high:61632kB active_anon:89588kB inactive_anon:276kB active_file:24336kB inactive_file:38860kB unevictable:0kB writepending:224kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9600kB pagetables:2824kB bounce:0kB free_pcp:2732kB local_pcp:1268kB free_cma:0kB [ 1906.304154] lowmem_reserve[]: 0 0 0 0 [ 1906.304188] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB 18:00:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="a4663b10b46b51dd6e5ffa2f746e082dca00fa9c2db635a6e2d955e914e4b68332", &(0x7f00000000c0)=""/146, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 18:00:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fadvise64(r0, 0x0, 0x40, 0x4) 18:00:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)) 18:00:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) 18:00:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x100, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="040400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b500340437e414efcb8d9ff57853000000faffffff00000000aeb46245004bae1356642490", 0x64, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000004, @remote}, 0x1c) 18:00:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) [ 1906.304341] Node 0 DMA32: 246*4kB (UM) 700*8kB (UME) 369*16kB (UM) 194*32kB (UME) 60*64kB (UM) 49*128kB (UME) 39*256kB (UME) 27*512kB (UM) 21*1024kB (M) 2*2048kB (ME) 26*4096kB (UM) = 184712kB 18:00:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x82) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000240)=0x10) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78}, 0x78) close(r0) [ 1906.304716] Node 0 Normal: 152*4kB (ME) 175*8kB (UME) 68*16kB (UME) 37*32kB (UM) 59*64kB (UM) 38*128kB (UM) 28*256kB (UME) 61*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 51320kB [ 1906.304911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.304920] 16868 total pagecache pages [ 1906.304932] 0 pages in swap cache [ 1906.304955] Swap cache stats: add 0, delete 0, find 0/0 [ 1906.304964] Free swap = 0kB [ 1906.304971] Total swap = 0kB [ 1906.304981] 1965969 pages RAM [ 1906.304989] 0 pages HighMem/MovableOnly 18:00:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) 18:00:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f0000a07fff)) 18:00:59 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x39}, 0x18) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) 18:00:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="a4663b10b46b51dd6e5ffa2f746e082dca00fa9c2db635a6e2d955e914e4b68332", &(0x7f00000000c0)=""/146, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 18:00:59 executing program 7: timerfd_settime(0xffffffffffffffff, 0xa21d20dd36090059, &(0x7f0000000000)={{0x0, 0x1c9c380}}, &(0x7f0000000080)) 18:00:59 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1, 0xdb, "3069a41573b36fe31cc37e7d5419a62343817cedef59f70100451caa46d273af9bc7122c1264abe378113fdad33cdfad331521fe21b4db5ff29c5d707e41092d738acccb2a740fc851db16e039fdeb770e098472d3eae3d23d755cf478f75cd26ba987e731334efd1485ae4782db667bc334a8390393b3830f56bf2920c5448e048f4cda565e9580b4d8eaea27de127c7070930eaab62c713286e673fd7daff1df3fc84c37a73624f837dc13f4e511b0e26133a85750cea3253248b42382294f2b19c4d893c5a75004b9fad8e678c3bdf3da4f35635b751c3dfd44"}, &(0x7f0000000040)=0xe3) [ 1906.304998] 101394 pages reserved [ 1906.681604] sd 0:0:1:0: [sg0] tag#3385 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1906.681660] sd 0:0:1:0: [sg0] tag#3385 CDB: Set identifying information [ 1906.681708] sd 0:0:1:0: [sg0] tag#3385 CDB[00]: a4 66 3b 10 b4 6b 51 dd 6e 5f fa 2f 74 6e 08 2d [ 1906.681753] sd 0:0:1:0: [sg0] tag#3385 CDB[10]: ca 00 fa 9c 2d b6 35 a6 e2 d9 55 e9 14 e4 b6 83 [ 1906.681794] sd 0:0:1:0: [sg0] tag#3385 CDB[20]: 32 18:00:59 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001300)={0x18}, 0x18) [ 1907.211151] sd 0:0:1:0: [sg0] tag#3385 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1907.220107] sd 0:0:1:0: [sg0] tag#3385 CDB: Set identifying information [ 1907.227130] sd 0:0:1:0: [sg0] tag#3385 CDB[00]: a4 66 3b 10 b4 6b 51 dd 6e 5f fa 2f 74 6e 08 2d [ 1907.236105] sd 0:0:1:0: [sg0] tag#3385 CDB[10]: ca 00 fa 9c 2d b6 35 a6 e2 d9 55 e9 14 e4 b6 83 [ 1907.245099] sd 0:0:1:0: [sg0] tag#3385 CDB[20]: 32 18:00:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) 18:00:59 executing program 2: unshare(0x20400) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getown(r0, 0x9) 18:00:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) 18:00:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:00:59 executing program 1: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}) 18:00:59 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x82) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000240)=0x10) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78}, 0x78) close(r0) [ 1907.543693] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 18:00:59 executing program 7: unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) [ 1907.579878] audit: type=1326 audit(1535565659.590:62): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28752 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 18:00:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="a4663b10b46b51dd6e5ffa2f746e082dca00fa9c2db635a6e2d955e914e4b68332", &(0x7f00000000c0)=""/146, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 18:00:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], []]}, 0x378) [ 1907.676768] audit: type=1326 audit(1535565659.634:63): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28752 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 18:00:59 executing program 2: rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='\x00') [ 1907.742958] IPVS: ftp: loaded support on port[0] = 21 18:00:59 executing program 6: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r1, &(0x7f0000000340)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4) 18:00:59 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x0, 0x0, "0950fe4adba7"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31111, 0x0, 0xf, @dev}, 0x80, &(0x7f0000000340), 0x160, &(0x7f0000000380)}, 0x0) [ 1907.857782] sd 0:0:1:0: [sg0] tag#3411 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1907.866774] sd 0:0:1:0: [sg0] tag#3411 CDB: Set identifying information [ 1907.873913] sd 0:0:1:0: [sg0] tag#3411 CDB[00]: a4 66 3b 10 b4 6b 51 dd 6e 5f fa 2f 74 6e 08 2d [ 1907.883311] sd 0:0:1:0: [sg0] tag#3411 CDB[10]: ca 00 fa 9c 2d b6 35 a6 e2 d9 55 e9 14 e4 b6 83 [ 1907.892329] sd 0:0:1:0: [sg0] tag#3411 CDB[20]: 32 18:01:00 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x0) lseek(r0, 0x4000000000, 0x1) 18:01:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], []]}, 0x378) [ 1908.118124] IPVS: ftp: loaded support on port[0] = 21 18:01:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1, 0xdb, "3069a41573b36fe31cc37e7d5419a62343817cedef59f70100451caa46d273af9bc7122c1264abe378113fdad33cdfad331521fe21b4db5ff29c5d707e41092d738acccb2a740fc851db16e039fdeb770e098472d3eae3d23d755cf478f75cd26ba987e731334efd1485ae4782db667bc334a8390393b3830f56bf2920c5448e048f4cda565e9580b4d8eaea27de127c7070930eaab62c713286e673fd7daff1df3fc84c37a73624f837dc13f4e511b0e26133a85750cea3253248b42382294f2b19c4d893c5a75004b9fad8e678c3bdf3da4f35635b751c3dfd44"}, &(0x7f0000000040)=0xe3) 18:01:00 executing program 6: sendmsg(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x34d}], 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c2604111, &(0x7f00000003c0)) 18:01:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 18:01:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="a4663b10b46b51dd6e5ffa2f746e082dca00fa9c2db635a6e2d955e914e4b68332", &(0x7f00000000c0)=""/146, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 18:01:00 executing program 6: sendmsg(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x34d}], 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c2604111, &(0x7f00000003c0)) 18:01:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f00000001c0)=0x2) [ 1908.355973] sd 0:0:1:0: [sg0] tag#3385 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1908.365023] sd 0:0:1:0: [sg0] tag#3385 CDB: Set identifying information [ 1908.371921] sd 0:0:1:0: [sg0] tag#3385 CDB[00]: a4 66 3b 10 b4 6b 51 dd 6e 5f fa 2f 74 6e 08 2d [ 1908.380907] sd 0:0:1:0: [sg0] tag#3385 CDB[10]: ca 00 fa 9c 2d b6 35 a6 e2 d9 55 e9 14 e4 b6 83 [ 1908.389941] sd 0:0:1:0: [sg0] tag#3385 CDB[20]: 32 18:01:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], []]}, 0x378) 18:01:00 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000564000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000), &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000f88000), &(0x7f00002b0ffc), &(0x7f0000714ffc), &(0x7f0000e1bf43)) exit(0x0) 18:01:00 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x5, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400000000010}, 0x7fc) 18:01:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000340)=0x30a, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0xfffffe8f) 18:01:00 executing program 6: sendmsg(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x34d}], 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c2604111, &(0x7f00000003c0)) 18:01:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], []]}, 0x378) 18:01:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x6c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x3c, 0x2, [@tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}], @IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PMTUDISC={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr}]}}}]}, 0x6c}}, 0x0) 18:01:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 18:01:01 executing program 6: sendmsg(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x34d}], 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c2604111, &(0x7f00000003c0)) [ 1909.150270] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 1909.157878] netlink: 'syz-executor7': attribute type 18 has an invalid length. [ 1909.165394] netlink: 'syz-executor7': attribute type 16 has an invalid length. [ 1909.172928] netlink: 'syz-executor7': attribute type 9 has an invalid length. [ 1909.180308] netlink: 'syz-executor7': attribute type 10 has an invalid length. 18:01:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1, 0xdb, "3069a41573b36fe31cc37e7d5419a62343817cedef59f70100451caa46d273af9bc7122c1264abe378113fdad33cdfad331521fe21b4db5ff29c5d707e41092d738acccb2a740fc851db16e039fdeb770e098472d3eae3d23d755cf478f75cd26ba987e731334efd1485ae4782db667bc334a8390393b3830f56bf2920c5448e048f4cda565e9580b4d8eaea27de127c7070930eaab62c713286e673fd7daff1df3fc84c37a73624f837dc13f4e511b0e26133a85750cea3253248b42382294f2b19c4d893c5a75004b9fad8e678c3bdf3da4f35635b751c3dfd44"}, &(0x7f0000000040)=0xe3) 18:01:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") dup2(r1, r0) 18:01:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000214000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000180)}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb", 0x1}], 0x1) shutdown(r2, 0x1) 18:01:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 18:01:02 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x4, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x78, 0x0) 18:01:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080), &(0x7f00000003c0)="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", 0xff1, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) 18:01:02 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x1ffffffc, 0x0, 0x0) 18:01:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/21, 0x15}}, {{&(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001640)=""/79, 0x4f}], 0x1, &(0x7f0000001900)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 18:01:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000340)=0x30a, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0xfffffe8f) 18:01:02 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="67a488c31b86d25e00000000001b00000419"], 0x12}}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f00000001c0)) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000140)) 18:01:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1, 0xdb, "3069a41573b36fe31cc37e7d5419a62343817cedef59f70100451caa46d273af9bc7122c1264abe378113fdad33cdfad331521fe21b4db5ff29c5d707e41092d738acccb2a740fc851db16e039fdeb770e098472d3eae3d23d755cf478f75cd26ba987e731334efd1485ae4782db667bc334a8390393b3830f56bf2920c5448e048f4cda565e9580b4d8eaea27de127c7070930eaab62c713286e673fd7daff1df3fc84c37a73624f837dc13f4e511b0e26133a85750cea3253248b42382294f2b19c4d893c5a75004b9fad8e678c3bdf3da4f35635b751c3dfd44"}, &(0x7f0000000040)=0xe3) 18:01:02 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x36) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000007000)=@canfd={{0x5}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5c037dc1250200000000000007496e6866856b76b5000300000000000000060000000118fa1efd9b0b"}, 0x38}}, 0x0) 18:01:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/21, 0x15}}, {{&(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001640)=""/79, 0x4f}], 0x1, &(0x7f0000001900)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 18:01:02 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001800)={0x0, 0x7}, 0x4) 18:01:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101d}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x2}, [@ldst={0x4, 0x18d1fb, 0x5, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 18:01:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/21, 0x15}}, {{&(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001640)=""/79, 0x4f}], 0x1, &(0x7f0000001900)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 18:01:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ptrace$setopts(0x4206, r1, 0xba, 0x0) 18:01:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xe) 18:01:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/21, 0x15}}, {{&(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001640)=""/79, 0x4f}], 0x1, &(0x7f0000001900)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 18:01:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), &(0x7f0000000100)=0x8) 18:01:03 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x0, 0x800}, 0x18) 18:01:03 executing program 0: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000ec0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='.\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x7080, &(0x7f0000000080)) mount(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="6265090005af2c29daf0f7eab4babdfc0516796b77d7be1b76b6ea9d13a05b33874fc6ceb0324814f7", 0x84000, 0x0) 18:01:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000000180)) 18:01:03 executing program 7: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000300)=[@cswp={0x58, 0x114, 0x7, {{0xfffffffffffffffd, 0x6}, &(0x7f00000000c0)=0xaaf8, &(0x7f0000000140)=0x3ff, 0xa505, 0x6, 0x9, 0x60, 0x30, 0x7}}, @rdma_dest={0x18}, @mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000280), &(0x7f00000002c0)}}], 0xc8, 0x4}, 0x0) 18:01:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 18:01:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000340)=0x30a, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0xfffffe8f) 18:01:03 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x3c, &(0x7f0000000080)={0x77359400}, 0x10) 18:01:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0xa, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x0) 18:01:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='%', 0x1}], 0x1) 18:01:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000004c0)="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", 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81807) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) fallocate(r0, 0x10, 0x0, 0x400) 18:01:05 executing program 7: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') mknod$loop(&(0x7f0000000280)='./file0\x00', 0x6100, 0xffffffffffffffff) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 18:01:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x0, [{r0}]}) 18:01:05 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 18:01:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000340)=0x30a, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0xfffffe8f) 18:01:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 18:01:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000780)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000080)=0x8) close(r2) r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) close(r1) 18:01:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3ff}, 0x94) dup2(r0, r1) 18:01:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000b, &(0x7f0000000180), 0x2af) 18:01:05 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x2000002, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 18:01:05 executing program 5: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3, 0x2}, &(0x7f0000001fee)='asymmetric\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfbd) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000002c0)="e348d382d2810a43d0f66958b49c0e4490a44eb11ada4544425c09bfa4fb9a688dead3ab16ced5c1dd25feb48ced023a383c527d31f31669d609e42d56e97d30da04d6c7fc184b676b4b84d23845dbc4b01396b3be0fe133eef6fcae649800b24c6e4c39bb11541fdb7f1431f745c9fd78aa29c359f93ca6be1f510d45075482c026a39bf0c2712b909cb9f288cf9ecac93487368ddc509fd94b05ae451fe19c3cc5afbfa23cd97d0b50f0f248b5", 0xae) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) pkey_alloc(0x0, 0x2) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000700)) fchdir(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8001, 0x2}, &(0x7f0000000800)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={r5, 0x8}, 0x8) fchmod(r1, 0x180) sendmsg$nl_xfrm(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x29, 0x400c00) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000008c0)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000900)=r7) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000a80)='.system$:(security(nodev\x00') 18:01:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000b, &(0x7f0000000180), 0x2af) 18:01:05 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x90ffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x21) 18:01:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000001180)="24000000180025f00485bc000400001c0a0b49ffed0000008000080008000200000000f8", 0x24) 18:01:06 executing program 5: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3, 0x2}, &(0x7f0000001fee)='asymmetric\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfbd) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000002c0)="e348d382d2810a43d0f66958b49c0e4490a44eb11ada4544425c09bfa4fb9a688dead3ab16ced5c1dd25feb48ced023a383c527d31f31669d609e42d56e97d30da04d6c7fc184b676b4b84d23845dbc4b01396b3be0fe133eef6fcae649800b24c6e4c39bb11541fdb7f1431f745c9fd78aa29c359f93ca6be1f510d45075482c026a39bf0c2712b909cb9f288cf9ecac93487368ddc509fd94b05ae451fe19c3cc5afbfa23cd97d0b50f0f248b5", 0xae) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) pkey_alloc(0x0, 0x2) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000700)) fchdir(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8001, 0x2}, &(0x7f0000000800)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={r5, 0x8}, 0x8) fchmod(r1, 0x180) sendmsg$nl_xfrm(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x29, 0x400c00) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000008c0)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000900)=r7) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000a80)='.system$:(security(nodev\x00') 18:01:06 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000b, &(0x7f0000000180), 0x2af) 18:01:06 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0xa, 0xa, 0x21, 0x0, 0x0, {}, [@generic="bf"]}, 0x18}}, 0x0) 18:01:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000100)={0x10, 0x5}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@allocspi={0x104, 0x16, 0x3, 0x0, 0x0, {{{@in6, @in=@rand_addr}, {@in=@multicast1, 0x0, 0x6c}, @in6}}, [@mark={0xc}]}, 0x104}}, 0x0) 18:01:06 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000200)) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0xc5a) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000001c0), 0x1c, 0x0) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000200), 0x2, 0x0) [ 1914.391107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 18:01:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x140, 0x0, 0x0, 0x0, 0x140, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x3, &(0x7f0000000080), {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'irlan0\x00'}, 0x0, 0xc8, 0xf0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0]}) 18:01:06 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000b, &(0x7f0000000180), 0x2af) 18:01:07 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="a7", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/132, &(0x7f00000001c0)=0x2) 18:01:07 executing program 5: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3, 0x2}, &(0x7f0000001fee)='asymmetric\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfbd) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000002c0)="e348d382d2810a43d0f66958b49c0e4490a44eb11ada4544425c09bfa4fb9a688dead3ab16ced5c1dd25feb48ced023a383c527d31f31669d609e42d56e97d30da04d6c7fc184b676b4b84d23845dbc4b01396b3be0fe133eef6fcae649800b24c6e4c39bb11541fdb7f1431f745c9fd78aa29c359f93ca6be1f510d45075482c026a39bf0c2712b909cb9f288cf9ecac93487368ddc509fd94b05ae451fe19c3cc5afbfa23cd97d0b50f0f248b5", 0xae) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) pkey_alloc(0x0, 0x2) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000700)) fchdir(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8001, 0x2}, &(0x7f0000000800)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={r5, 0x8}, 0x8) fchmod(r1, 0x180) sendmsg$nl_xfrm(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x29, 0x400c00) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000008c0)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000900)=r7) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000a80)='.system$:(security(nodev\x00') 18:01:07 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x804e20}, 0x1c) listen(r0, 0x20000004) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 18:01:07 executing program 0: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) close(r1) 18:01:07 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB]) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8004}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 18:01:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 18:01:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001240)={0x0, 0x2000000001}, 0x10001) r1 = dup2(r0, r0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000001200)={0x30}, 0x30) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9) write(r0, &(0x7f00005f1fe3)="c6", 0x1) shutdown(r0, 0x1) 18:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x6) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000008400000002000000"], 0x10}, 0x0) 18:01:07 executing program 5: request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3, 0x2}, &(0x7f0000001fee)='asymmetric\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfbd) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000002c0)="e348d382d2810a43d0f66958b49c0e4490a44eb11ada4544425c09bfa4fb9a688dead3ab16ced5c1dd25feb48ced023a383c527d31f31669d609e42d56e97d30da04d6c7fc184b676b4b84d23845dbc4b01396b3be0fe133eef6fcae649800b24c6e4c39bb11541fdb7f1431f745c9fd78aa29c359f93ca6be1f510d45075482c026a39bf0c2712b909cb9f288cf9ecac93487368ddc509fd94b05ae451fe19c3cc5afbfa23cd97d0b50f0f248b5", 0xae) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) pkey_alloc(0x0, 0x2) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000700)) fchdir(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8001, 0x2}, &(0x7f0000000800)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={r5, 0x8}, 0x8) fchmod(r1, 0x180) sendmsg$nl_xfrm(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in=@rand_addr, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@rand_addr}]}, 0x104}}, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x29, 0x400c00) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000008c0)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000900)=r7) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7fff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000a80)='.system$:(security(nodev\x00') 18:01:07 executing program 0: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) close(r1) 18:01:07 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 18:01:07 executing program 4: r0 = memfd_create(&(0x7f0000000000)="2e001b2121894de067a1504545d99e", 0x0) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(0xffffffffffffffff, &(0x7f0000000400), 0x1000) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0x78}, 0x78) clock_gettime(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mremap(&(0x7f0000896000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x0, @time}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000140)) 18:01:07 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x213}, @local, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x223}, @multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 18:01:07 executing program 0: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) close(r1) 18:01:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x2000000011, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c) 18:01:07 executing program 7: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00485bc04fef7001d0a0b48ff2265cea2037ea0b00800030001000000", 0x24) 18:01:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x60042, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x81, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@time}], 0x30) 18:01:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000014fc8)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000014000)={0x1, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d8451aa777ccf6f9"}}, 0x48}}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000080010000000000000000000000ae4e6c4d45603f20"], 0x1}}, 0x0) 18:01:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)) 18:01:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x2000000011, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c) 18:01:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000000100), 0x0) 18:01:08 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)={&(0x7f00000004c0), 0x8}) 18:01:08 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB]) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8004}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 18:01:08 executing program 0: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) close(r1) 18:01:08 executing program 6: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000002040)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 18:01:08 executing program 2: mprotect(&(0x7f000015d000/0x1000)=nil, 0x1000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:01:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x2000000011, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c) 18:01:08 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4013, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff) 18:01:08 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 18:01:08 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x8000000000000004, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0xa6) 18:01:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x2000000011, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c) 18:01:08 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = accept4(r0, &(0x7f0000000100)=@nl=@proc, &(0x7f0000000180)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_team\x00', 0x10) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 18:01:09 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/62, 0x774}) 18:01:09 executing program 2: mprotect(&(0x7f000015d000/0x1000)=nil, 0x1000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:01:09 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 18:01:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x3b, 0x0, 0x300) 18:01:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x13, &(0x7f00000036c0)=""/64, 0x40}}], 0x6, 0x0, &(0x7f0000000300)={0x77359400}) clock_gettime(0x0, &(0x7f0000002a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000000600)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f0000000780)=""/36, 0x24}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/251, 0xfb}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x7, &(0x7f0000000ac0)=""/11, 0xb}}], 0x1, 0x10002, &(0x7f0000002a80)={r1, r2+10000000}) 18:01:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)="62637366300000ff000000001000") 18:01:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB]) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8004}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 18:01:09 executing program 6: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000002040)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 18:01:09 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x44, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_PORT_SELF={0x4}]}, 0xfcd2}}, 0x0) 18:01:09 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 18:01:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000100)=0x90) 18:01:09 executing program 2: mprotect(&(0x7f000015d000/0x1000)=nil, 0x1000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:01:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/122, 0xfffffffffffffe82}], 0x1) [ 1917.730343] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. 18:01:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480), 0x100000000000021e, 0x0) 18:01:10 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) 18:01:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)) 18:01:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000b00)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000200)="1f78b75159e3b1870c2d69e0d75436d28b82ec7517f860248f042265648086232a3c449e7d6f0cbb829d81ad04f8b6bda073d6f5de0c4ce8d7908d977cf82f14c95e518bb784d9d4a4138935fb27f788aab74e41aa1f3e661348ac193a66f5280f5ce0c48cc100f89d2b230b36ebddfa2eb2b0d7f759483b38c70256496ee75bf49e6cc35866cf795293fcbe5c5e825bb976457fca84855c84d27be683cb53cc057f5577fff1a6c89b0a7de85da3", 0x80000, &(0x7f0000000140)) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='iso9660\x00', 0x1000, &(0x7f0000000440)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f0000000440)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 18:01:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) 18:01:10 executing program 2: mprotect(&(0x7f000015d000/0x1000)=nil, 0x1000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:01:10 executing program 6: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000002040)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 18:01:10 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB]) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8004}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 18:01:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in6, @in6=@dev}, {@in6=@remote}, @in6=@ipv4={[], [], @broadcast}}}}, 0xf8}, 0x8}, 0x0) 18:01:11 executing program 7: unshare(0x20400) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)) 18:01:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x39, '\''}], 0x18}, 0x0) 18:01:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) [ 1919.077190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 18:01:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 18:01:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)="2e030000000000000073797a3000", 0x1ff) 18:01:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480), 0x100000000000021e, 0x0) 18:01:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") setpriority(0x3, 0x0, 0x5) 18:01:11 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000b}}) 18:01:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:01:11 executing program 6: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000002040)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 18:01:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000001e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x36a, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 18:01:11 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 18:01:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') getdents64(r0, &(0x7f0000000180)=""/48, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000300)=""/102, 0x66) 18:01:11 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000b}}) 18:01:11 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") read$FUSE(r2, &(0x7f00000030c0), 0x1000) read$FUSE(r2, &(0x7f0000001000), 0x1000) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 18:01:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:01:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480), 0x100000000000021e, 0x0) 18:01:12 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/212) close(r0) 18:01:12 executing program 5: clock_getres(0x9fa26e329ae06eb3, &(0x7f0000000040)) 18:01:12 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000b}}) 18:01:12 executing program 4: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 18:01:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) 18:01:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f000000f000/0x2000)=nil, 0x2000) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) 18:01:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480), 0x100000000000021e, 0x0) 18:01:12 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:12 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000b}}) 18:01:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000040)=0x68) 18:01:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close(r2) close(r1) 18:01:12 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f4500fe01b2a4a280930a600800ffa84302910000002d00050023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 18:01:12 executing program 4: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 18:01:12 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)) [ 1920.711252] netlink: 9 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f00000006c0)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)=ANY=[@ANYBLOB="03"]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000480)=&(0x7f0000000140)) 18:01:12 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f4500fe01b2a4a280930a600800ffa84302910000002d00050023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) [ 1920.950371] netlink: 9 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x2000003e, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080), 0x3c1}]) 18:01:13 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) 18:01:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x90004524, &(0x7f0000000000)) 18:01:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x180000000000002, &(0x7f0000000140)=0x7b, 0xfe48) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x2e8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x1ab) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 18:01:13 executing program 6: semget(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) 18:01:13 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f4500fe01b2a4a280930a600800ffa84302910000002d00050023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 18:01:13 executing program 4: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) [ 1921.285246] netlink: 9 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:13 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000010c0)) tkill(r1, 0x1000000000016) 18:01:13 executing program 6: prctl$intptr(0x200000002f, 0x1) 18:01:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@dev, @local, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 18:01:13 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timerfd_create(0x2000000008, 0x0) 18:01:13 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f4500fe01b2a4a280930a600800ffa84302910000002d00050023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 18:01:13 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x71) 18:01:13 executing program 4: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) [ 1921.668759] netlink: 9 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:13 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=""/236) 18:01:13 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) fcntl$setpipe(r0, 0x407, 0x100000) fcntl$setpipe(r0, 0x407, 0x0) 18:01:13 executing program 2: unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) close(r0) preadv(r0, &(0x7f00000012c0), 0x0, 0x0) 18:01:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0xfc00000000000000}, 0x0, 0x0, 0xff, 0x1}, 0x20) 18:01:14 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x4000000, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 18:01:14 executing program 4: capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)) r0 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x2a) 18:01:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000040)=0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) io_submit(r2, 0x0, &(0x7f0000002640)) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}]) 18:01:14 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=""/236) 18:01:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x40000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg$inet_sctp(r2, &(0x7f000000b3c0)=[{&(0x7f0000002440)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000003a80), 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="1200f2ffffff00008400000006000000"], 0x10}], 0x1, 0x0) close(r2) close(r1) 18:01:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$P9_RWSTAT(r1, &(0x7f00000004c0)={0x7}, 0x7) write$9p(r2, &(0x7f0000000200)="d5b8", 0x2) 18:01:14 executing program 2: unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) close(r0) preadv(r0, &(0x7f00000012c0), 0x0, 0x0) 18:01:14 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond_slave_1\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x39}}) 18:01:14 executing program 0: r0 = memfd_create(&(0x7f0000000200)="00eb000000000000", 0x0) write(r0, &(0x7f0000000140)="c3b4beb2e5d406dd3456c00fbe133eec9b3b2a4dfe", 0x15) sendfile(r0, r0, &(0x7f0000000240), 0x10000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe, &(0x7f0000000180), &(0x7f0000000280)=0x4) 18:01:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") timer_create(0xfffffffffffffffc, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) 18:01:14 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:14 executing program 2: unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) close(r0) preadv(r0, &(0x7f00000012c0), 0x0, 0x0) 18:01:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=""/236) 18:01:14 executing program 3: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000010000000000000000200f30000000000", 0x14, 0x0) 18:01:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc807a851448f764070") setsockopt$inet6_int(r1, 0x29, 0x2f, &(0x7f0000000000), 0x2ac) 18:01:15 executing program 2: unshare(0x20400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) close(r0) preadv(r0, &(0x7f00000012c0), 0x0, 0x0) 18:01:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=""/236) 18:01:15 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='m', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf9, &(0x7f0000000080), &(0x7f0000000000)=0x4) 18:01:15 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:15 executing program 3: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000010000000000000000200f30000000000", 0x14, 0x0) 18:01:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) listen(r1, 0x0) listen(r0, 0x0) 18:01:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60da1f3ee39dcda1fa02290000002b3c"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 18:01:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d8568080003000800000016ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 18:01:15 executing program 4: clone(0x48000000, &(0x7f0000000080)="18b1f4b0bc6bc33192478ba69d7db55af15f6bb693d7146a2770beef3d59ac43b641b6c8a5dd8a6e0c90d862807b129ccdd42e003417568253e7a7b8795c5cbc3bad236ff5adee242d", &(0x7f00000010c0), &(0x7f0000000140), &(0x7f0000001200)="e2") madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x12) 18:01:15 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, "000000000000001000"}, 0x18) 18:01:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) listen(r1, 0x0) listen(r0, 0x0) [ 1923.856049] IPVS: ftp: loaded support on port[0] = 21 18:01:15 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0xffffff20}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x9) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 18:01:15 executing program 3: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000010000000000000000200f30000000000", 0x14, 0x0) 18:01:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') ioctl$FICLONE(r1, 0x40049409, r1) 18:01:15 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x190) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 18:01:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='security.capability\x00') 18:01:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) listen(r1, 0x0) listen(r0, 0x0) 18:01:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000800)=[{r1}], 0x1, &(0x7f0000000940)={0x0, 0x989680}, &(0x7f0000000980), 0x8) 18:01:16 executing program 0: socket$inet6(0xa, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000800)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[@ANYBLOB]) [ 1924.344863] IPVS: ftp: loaded support on port[0] = 21 18:01:16 executing program 3: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000010000000000000000200f30000000000", 0x14, 0x0) 18:01:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:01:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) listen(r1, 0x0) listen(r0, 0x0) 18:01:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0x0) 18:01:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r1, &(0x7f0000000140)="0000355ce0cccbf81e5129f98676", 0xe, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x1, @dev}, 0x1c) recvmmsg(r1, &(0x7f0000007b00)=[{{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000007600), 0x0, &(0x7f00000076c0)=""/14, 0xe}}], 0x1, 0x0, &(0x7f0000007d80)={0x0, 0x1c9c380}) 18:01:17 executing program 4: clone(0x48000000, &(0x7f0000000080)="18b1f4b0bc6bc33192478ba69d7db55af15f6bb693d7146a2770beef3d59ac43b641b6c8a5dd8a6e0c90d862807b129ccdd42e003417568253e7a7b8795c5cbc3bad236ff5adee242d", &(0x7f00000010c0), &(0x7f0000000140), &(0x7f0000001200)="e2") madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x12) 18:01:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 18:01:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x204000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0xe) dup2(r1, r0) 18:01:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)="6367726f75702e636f6e74726f6c6c657273007eb2293466ca5007637e7d01f9ca52eb6ebf4bda52c898924ccb2bfc6071fcd301d1fa8e6d1725ef93d4214a782d6187628efc0b1668977d82cf87734015c18bc3c9f9f7859987ff09fc7ba3355700a79cac606b064081db840ec7e1359a2fb97e65a0c7b240195788ffa3670744563721985649b2d71e4d31e5a991b8cd5a78a71d0b57d190fd41f03fb5c6f11b51", 0x0, 0x0) sendfile(r1, r3, 0x0, 0x7) 18:01:17 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x0, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 18:01:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 18:01:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0xeec5}) 18:01:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000000)='vboxnet1%\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x400000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='/dev/loop#\x00', r0}, 0x10) sendfile(r1, r1, &(0x7f00000000c0), 0x102000004) 18:01:18 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000fdb000)="61661300", 0x1003, 0x0) creat(&(0x7f00000005c0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000740)='n\x00\x00\x00\x00', 0x5010, &(0x7f0000000680)) 18:01:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) sendto$inet(r0, &(0x7f0000000300)='U', 0x1, 0x3, 0x0, 0x0) 18:01:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 18:01:18 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100007f, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c) 18:01:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000140), 0x4) [ 1926.233783] IPVS: ftp: loaded support on port[0] = 21 18:01:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x18, 0x11a, 0x1, '}'}], 0x18}}], 0x1, 0x0) 18:01:18 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000836000/0x400000)=nil, 0x400000, 0x3) 18:01:18 executing program 1: r0 = userfaultfd(0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/189, 0xbd}], 0x1) 18:01:18 executing program 4: clone(0x48000000, &(0x7f0000000080)="18b1f4b0bc6bc33192478ba69d7db55af15f6bb693d7146a2770beef3d59ac43b641b6c8a5dd8a6e0c90d862807b129ccdd42e003417568253e7a7b8795c5cbc3bad236ff5adee242d", &(0x7f00000010c0), &(0x7f0000000140), &(0x7f0000001200)="e2") madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x12) 18:01:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f00000000c0)={"73697430000080000000000000000002", @ifru_data=&(0x7f0000000080)="80a7da9d14b8db3ddff783ea97b3ebb3b81cf29056f17d539415589d06c50973"}) 18:01:18 executing program 0: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000440)="0795040000000029a77ce74fb58ddf0000356317b447d19ecd38b972a4220aae97", 0x21) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) 18:01:18 executing program 5: unshare(0x20400) unshare(0x8000400) 18:01:18 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setrlimit(0x400000000000007, &(0x7f0000000040)) dup(r0) 18:01:18 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=':', 0x1}], 0x1, 0x0) 18:01:18 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffffd, 0x3800) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xe, 0x400) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x4, 0x6e}, 'port1\x00', 0x1, 0x8, 0x9, 0x5a0ff290, 0x6, 0xfffffffffffffff8, 0xeea, 0x0, 0x5, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8, 0x311000) 18:01:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 18:01:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f00000000c0)={"73697430000080000000000000000002", @ifru_data=&(0x7f0000000080)="80a7da9d14b8db3ddff783ea97b3ebb3b81cf29056f17d539415589d06c50973"}) [ 1927.168253] IPVS: ftp: loaded support on port[0] = 21 18:01:19 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffffd, 0x3800) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xe, 0x400) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x4, 0x6e}, 'port1\x00', 0x1, 0x8, 0x9, 0x5a0ff290, 0x6, 0xfffffffffffffff8, 0xeea, 0x0, 0x5, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8, 0x311000) 18:01:19 executing program 5: unshare(0x20400) unshare(0x8000400) 18:01:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x80ffffff, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 18:01:19 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=':', 0x1}], 0x1, 0x0) 18:01:19 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffffd, 0x3800) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xe, 0x400) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x4, 0x6e}, 'port1\x00', 0x1, 0x8, 0x9, 0x5a0ff290, 0x6, 0xfffffffffffffff8, 0xeea, 0x0, 0x5, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8, 0x311000) 18:01:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f00000000c0)={"73697430000080000000000000000002", @ifru_data=&(0x7f0000000080)="80a7da9d14b8db3ddff783ea97b3ebb3b81cf29056f17d539415589d06c50973"}) 18:01:19 executing program 5: unshare(0x20400) unshare(0x8000400) 18:01:20 executing program 4: clone(0x48000000, &(0x7f0000000080)="18b1f4b0bc6bc33192478ba69d7db55af15f6bb693d7146a2770beef3d59ac43b641b6c8a5dd8a6e0c90d862807b129ccdd42e003417568253e7a7b8795c5cbc3bad236ff5adee242d", &(0x7f00000010c0), &(0x7f0000000140), &(0x7f0000001200)="e2") madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x12) 18:01:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 18:01:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=':', 0x1}], 0x1, 0x0) 18:01:20 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f00000000c0)={"73697430000080000000000000000002", @ifru_data=&(0x7f0000000080)="80a7da9d14b8db3ddff783ea97b3ebb3b81cf29056f17d539415589d06c50973"}) 18:01:20 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0xfffffffffffffffd, 0x3800) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xe, 0x400) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x4, 0x6e}, 'port1\x00', 0x1, 0x8, 0x9, 0x5a0ff290, 0x6, 0xfffffffffffffff8, 0xeea, 0x0, 0x5, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8, 0x311000) 18:01:20 executing program 5: unshare(0x20400) unshare(0x8000400) 18:01:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x200000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0), 0x10) 18:01:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 18:01:20 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000007c0)) 18:01:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=':', 0x1}], 0x1, 0x0) 18:01:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b8446) shutdown(r0, 0x0) 18:01:20 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 18:01:20 executing program 7: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4002, &(0x7f0000000000)=0x101, 0x100, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f00003e8000), 0x401, &(0x7f0000336000/0x3000)=nil, 0x2) [ 1928.375244] IPVS: ftp: loaded support on port[0] = 21 18:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0xe01}, 0x18}}, 0x0) 18:01:20 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00005ad000/0x3000)=nil, 0x3000, 0xf) mremap(&(0x7f0000402000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) 18:01:20 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}, 0x90) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)}}, 0x20) 18:01:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r2 = dup3(r1, r0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) 18:01:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) finit_module(0xffffffffffffffff, &(0x7f0000000180)='/dev/nbd#\x00', 0x0) 18:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0xe01}, 0x18}}, 0x0) 18:01:21 executing program 7: prctl$intptr(0x2a, 0x0) 18:01:21 executing program 3: mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffffffffff3f, &(0x7f0000c91000)=""/34) 18:01:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) [ 1929.231398] sctp: [Deprecated]: syz-executor5 (pid 29753) Use of int in max_burst socket option deprecated. [ 1929.231398] Use struct sctp_assoc_value instead 18:01:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000fffd}) epoll_wait(r1, &(0x7f0000001a40)=[{}], 0x1, 0x0) 18:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0xe01}, 0x18}}, 0x0) 18:01:21 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00') [ 1929.375092] sctp: [Deprecated]: syz-executor5 (pid 29760) Use of int in max_burst socket option deprecated. [ 1929.375092] Use struct sctp_assoc_value instead 18:01:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000180)="a98ad9c78e9d8005da92f3052437dec56cc179df94fad782f4d2bb7e72db06a8c5", &(0x7f0000000700)=""/239, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 18:01:21 executing program 0: unshare(0x20400) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x81) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xd07) 18:01:21 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 18:01:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x39, "270202"}], 0x18}, 0x0) 18:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0xe01}, 0x18}}, 0x0) [ 1929.686002] sd 0:0:1:0: [sg0] tag#3411 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1929.694922] sd 0:0:1:0: [sg0] tag#3411 CDB: Play track relative(12), sa=0xa [ 1929.702221] sd 0:0:1:0: [sg0] tag#3411 CDB[00]: a9 8a d9 c7 8e 9d 80 05 da 92 f3 05 24 37 de c5 [ 1929.711197] sd 0:0:1:0: [sg0] tag#3411 CDB[10]: 6c c1 79 df 94 fa d7 82 f4 d2 bb 7e 72 db 06 a8 [ 1929.720167] sd 0:0:1:0: [sg0] tag#3411 CDB[20]: c5 18:01:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) dup3(r1, r2, 0x0) 18:01:22 executing program 5: unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x81) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3131995a"}) 18:01:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000240)=""/224, &(0x7f0000000340)=0xe0) r0 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000015c0)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1) 18:01:22 executing program 0: semop(0x0, &(0x7f0000000080)=[{0x0, 0xe7fe}], 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") semctl$IPC_RMID(0x0, 0x0, 0x10) 18:01:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x401, 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00', 0x100}) 18:01:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x5c9de440fa4eee15, 0x0) 18:01:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x42002, 0x0) write$binfmt_aout(r0, &(0x7f0000000100), 0xffffff31) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x101}, 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x880000}) 18:01:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) init_module(&(0x7f0000000040)='syz1\x00', 0x5, &(0x7f0000000540)='\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) socketpair(0x0, 0x0, 0x0, &(0x7f0000d24ff8)) 18:01:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x5c9de440fa4eee15, 0x0) 18:01:22 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00') 18:01:22 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 18:01:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) init_module(&(0x7f0000000040)='syz1\x00', 0x5, &(0x7f0000000540)='\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) socketpair(0x0, 0x0, 0x0, &(0x7f0000d24ff8)) 18:01:22 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x401, 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00', 0x100}) 18:01:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x5c9de440fa4eee15, 0x0) 18:01:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 18:01:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000240)=""/224, &(0x7f0000000340)=0xe0) r0 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000015c0)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1) 18:01:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) init_module(&(0x7f0000000040)='syz1\x00', 0x5, &(0x7f0000000540)='\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) socketpair(0x0, 0x0, 0x0, &(0x7f0000d24ff8)) 18:01:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x5c9de440fa4eee15, 0x0) [ 1931.328220] input: syz0 as /devices/virtual/input/input172 [ 1931.426106] input: syz0 as /devices/virtual/input/input173 18:01:23 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 18:01:23 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x401, 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00', 0x100}) 18:01:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 18:01:23 executing program 6: syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000002340)='/dev/input/mice\x00', 0x0, 0x6000) [ 1931.856642] input: syz0 as /devices/virtual/input/input175 18:01:24 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) dup3(r0, r1, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) listen(r0, 0x0) 18:01:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) init_module(&(0x7f0000000040)='syz1\x00', 0x5, &(0x7f0000000540)='\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) socketpair(0x0, 0x0, 0x0, &(0x7f0000d24ff8)) 18:01:24 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00') 18:01:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="617474722f63757272656e74000dc69cc8a5e188370c25f2202d1242dbbcb84f543acbb5d18d2b28450148ba8cd8a8c2f726f4d3f807248cd07356855bde04c36b47fe28e786039d5cb4c2ef978fe0c99a2a5f9051dfdef06b998f58d65c2ddf7a3ab911160366f4d0918beb3c1f123df1fe478a7582e9dfd19c5df4a059440ed8d4f7e1519a1427527deced8c2bb6ea0a9388e5c8b8b1a3a74d") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='stat\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x2000000000000001) 18:01:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 18:01:24 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x401, 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00', 0x100}) 18:01:24 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x200000000000093, &(0x7f0000000080), &(0x7f0000000000)=0xc21) 18:01:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000240)=""/224, &(0x7f0000000340)=0xe0) r0 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000015c0)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1) [ 1932.362499] input: syz0 as /devices/virtual/input/input176 18:01:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x5, &(0x7f000059dffc), &(0x7f0000000100)=0x4) 18:01:24 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) dup3(r0, r1, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) listen(r0, 0x0) 18:01:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) ftruncate(r2, 0x8000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 18:01:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 18:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)="580000001400192340834b80040d7d560a06ab8cffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffefea309000000fff5dd00000010000100000c0900fcff0000040e0505", 0x58}], 0x1) [ 1932.853263] input: syz0 as /devices/virtual/input/input178 18:01:24 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dfd, &(0x7f00000001c0)) 18:01:25 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f0000000200)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "c402a368e29c3d8a05961692cec71d2f91bceaa205d2e2779ec5bad390cd1a6cbb530c44b6a2e410deabda4b4e7b000611e74df4df6115dd6c9a81b21aa1c992"}, 0x48}}, 0x0) 18:01:25 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) dup3(r0, r1, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) listen(r0, 0x0) 18:01:25 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0), &(0x7f0000000180)=0x2f3) 18:01:25 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000004c00)='./file0\x00', 0x2101, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000480)) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 18:01:25 executing program 4: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00') 18:01:25 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 18:01:25 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) dup3(r0, r1, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) listen(r0, 0x0) 18:01:25 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x3d, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) close(r0) 18:01:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000240)=""/224, &(0x7f0000000340)=0xe0) r0 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000015c0)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1) 18:01:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0xec4, 0x28, 0x1, 0x0, 0x0, {}, [@generic="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"]}, 0xec4}}, 0x0) 18:01:25 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000200)=0x1b) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000300)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x4, 0x1, 0x1}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0x9) 18:01:25 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = epoll_create(0x420000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) 18:01:25 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000300)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f00000000c0), &(0x7f0000000140)}}, @mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000280), &(0x7f00000002c0)}}], 0xb0}, 0x0) 18:01:25 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/userio\x00', 0x0, 0x0) 18:01:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "072c73a41f5e10f045caf9eac1430786f18697f5b206865c980865f8c2baa909ebcd451be2dbf67ad8bddd062e48b77bc1b7e0142c4c99d89269f1828a569976", "1fe6129a34f374ae1134cf0dab3274479bc996239c356605dbf8f4e9f4b9ad11468f263315fd732e160ee3e06553c95ad3bbc5acaf0c5def43efaf603ccdd4fb", "20ca0a8b5bc7bbe7e6cf7f29de4f0a2faeabebad5b55aa6803cf96a820b7476f"}) 18:01:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x34, {0x2, 0x0, @loopback}, 'bond_slave_0\x00'}) 18:01:26 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}) 18:01:26 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000050607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 18:01:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000001c0)='./file0/file0/../file0\x00', &(0x7f0000000340)) open(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x210000, 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x2}}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 18:01:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) read(r0, &(0x7f00000001c0)=""/11, 0xb) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 18:01:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x16, &(0x7f0000000040), 0x1) 18:01:26 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x200000000000081, 0x4000000000000001) ioctl$int_in(r1, 0x80000000005001, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000014) 18:01:26 executing program 1: munmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) 18:01:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x6, 0x1f, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 1934.899780] netlink: 'syz-executor6': attribute type 1 has an invalid length. 18:01:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) 18:01:27 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)='[:2ile:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 18:01:27 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020e2ffff030005231d856818000f0008f9ff000b00bb0600710b42fa3ccc", 0x2f}], 0x1}, 0x4000000000) 18:01:27 executing program 7: unshare(0x400) r0 = socket$kcm(0xa, 0x120000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x3a, 0x7, &(0x7f0000000040), 0x4) 18:01:27 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="0bd2ca0f000319", 0x7}], 0x1) 18:01:27 executing program 4: r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1935.235777] libceph: parse_ips bad ip '[:2ile' 18:01:27 executing program 2: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) 18:01:27 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) 18:01:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20000228}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 18:01:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) 18:01:27 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 18:01:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000240)) 18:01:27 executing program 7: unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x11, @local, 0x0, 0x1, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000500)={0x11, @broadcast, 0x0, 0x1, 'rr\x00'}, 0x2c) 18:01:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0xfffefffffffffffc}, 0x8) 18:01:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet6(r1, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r1, r0) 18:01:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) 18:01:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) 18:01:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0xffffffffffffffff) 18:01:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000004c0), 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x30, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4}]}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x30}}, 0x0) 18:01:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) [ 1936.149888] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. 18:01:28 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) 18:01:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) 18:01:28 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='team_slave_1\x00') 18:01:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 18:01:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20000228}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 18:01:28 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x0, 0x0, 0xfffffffffffffffd}}, 0x20) 18:01:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000009c0)=ANY=[], 0xfffffe51) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x8000000, 0x4) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/3, 0x3}, 0x42) 18:01:28 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) 18:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={"6e61748800", 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x220) 18:01:28 executing program 7: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = dup(r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000000), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'veth1_to_team\x00', 'dummy0\x00', 'gretap0\x00', @link_local, [], @random="7d33f03e71d9", [], 0xb0, 0xb0, 0xe0, [@connbytes={'connbytes\x00', 0x18, {{0x0, 0x0, 0x0, 0x3}}}]}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x1e8) 18:01:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f00000001c0)) 18:01:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) [ 1936.998905] xt_time: invalid argument - start or stop time greater than 23:59:59 18:01:29 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "41dc91170bec3473eedea8739e629dc3eccd08e81410bac08f530d826771e0aa679a91a6753a2b95dc4973d62734da84c47dbde54b02c2f21e5fdfa9d0cdd67f", "7f3c8d526780717776ae4fe688e57bd2f67ec253394e49629197026205484378f75ac3961a605751eb7c32116749d1e4904fd2646166f7d4a6584244d7712428", "f84ec266906a22987ccce5fc0cc510322d192bd67a19cf50c46175f05306fb2d"}) 18:01:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f00000001c0)) 18:01:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x200000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2a, &(0x7f0000000100), 0x10) 18:01:29 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) 18:01:29 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140), &(0x7f0000013000)=0xfb) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 18:01:29 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clone(0x0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f00000003c0)) ioprio_set$pid(0x2, 0x0, 0x0) 18:01:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") creat(&(0x7f000002bff8)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)={0x0, r2}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$notify(r1, 0xa, 0x34) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r3) 18:01:29 executing program 2: openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 18:01:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20000228}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 18:01:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f00000001c0)) 18:01:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480), &(0x7f0000000040)=0x8) 18:01:29 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/213, 0xd5}], 0x1) close(r1) 18:01:29 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000120affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:01:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140)="3d6b000000000000000091ddf3ddff9e814feab6", 0x14, 0x0, 0x0, 0x0) 18:01:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x84, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000000), 0x4) close(r2) close(r1) 18:01:29 executing program 6: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000480)=""/110) [ 1937.910212] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:30 executing program 6: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) 18:01:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f00000001c0)) 18:01:30 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000120affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:01:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140)="3d6b000000000000000091ddf3ddff9e814feab6", 0x14, 0x0, 0x0, 0x0) 18:01:30 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8981, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x0, @broadcast}}) close(r1) 18:01:30 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x65, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000040)="25b8ba50ee1576f0a6b2e96056587bbbb89e78a9ab8904aa594b2b78159d7d84"}) 18:01:30 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xffffffff80000005}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 18:01:30 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000400)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000380), 0x0, &(0x7f0000000480)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18}, 0x0) [ 1938.348273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x20000228}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 18:01:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000040)={&(0x7f0000001d80)={0x18, 0x27, 0xffffffffffffffff, 0x70bd2a, 0x0, {0x7}, [@nested={0x4, 0x68, [@generic]}]}, 0x18}}, 0x0) 18:01:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140)="3d6b000000000000000091ddf3ddff9e814feab6", 0x14, 0x0, 0x0, 0x0) 18:01:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5000000) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 18:01:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x2402, &(0x7f0000000080)) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:01:30 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000120affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:01:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="640000002c007fffffffaff8ffffffb0df70feffffffffff010000000100ff100000000000e461009e01486f663b8c07bb3d80f0884b9e81a99a638c91f288a002001cd5122bd21b71a8ca589272d4f00fe38b99afba987b5bb900000000000000000000", 0x64) 18:01:30 executing program 6: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208004e38af390100ffffffff08000047", 0x24) [ 1938.840316] netlink: 64 bytes leftover after parsing attributes in process `syz-executor1'. [ 1938.846234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1938.869323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 18:01:30 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x800004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @rumble}) write$evdev(r2, &(0x7f0000000040), 0x0) close(r0) 18:01:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140)="3d6b000000000000000091ddf3ddff9e814feab6", 0x14, 0x0, 0x0, 0x0) 18:01:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2000072e}]) 18:01:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x405) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2}) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x38}, [{}]}, 0x58) 18:01:31 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffe5d, &(0x7f0000d81ff8)=0x101) r3 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40045402, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) dup3(r1, r0, 0x0) 18:01:31 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000120affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:01:31 executing program 7: add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200), 0x0, 0x0, 0xfffffffffffffffd) [ 1939.244492] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 18:01:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24) 18:01:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x0, @dev}}) 18:01:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)) 18:01:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:01:31 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00002f0000/0x400000)=nil, 0x400000) 18:01:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x2cc) getdents(r1, &(0x7f0000000140)=""/2, 0x450) getdents64(r1, &(0x7f0000000080)=""/61, 0x3d) 18:01:31 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f0000000340)=""/174, 0xae) 18:01:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:01:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4a, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000020000000000000000000000", 0x10}]) 18:01:31 executing program 7: r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x70, 0x3, 0x3, 0x80000001, 0x0, 0x0, 0x401, 0xa0, 0x0, 0x8, 0x1ff, 0x0, 0x3, 0x1f, 0x1, 0xfffffffffffffbff, 0x4, 0x9, 0xe8, 0x5, 0x1, 0x20, 0x5f89, 0x3ff, 0x6, 0x5, 0x8, 0x5, 0x7f, 0x1000, 0x9, 0xf5, 0x4, 0x3, 0x3, 0x7b1, 0x3a, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x100, 0x0, 0x1ff, 0x5, 0x4, 0x100, 0x3f}, 0xffffffffffffff9c, 0x4, 0xffffffffffffffff, 0xa) fcntl$getown(r0, 0x9) semop(0x0, &(0x7f0000000080)=[{0x0, 0x8001}], 0xc0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x5}], 0x1) semop(0x0, &(0x7f0000000000)=[{}], 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x9, 0x200002) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000380)={@rand_addr, @loopback}, &(0x7f00000003c0)=0xc) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'dummy0\x00', 0x4}) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7, 0x80) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000140)="4c8f9e97098aef5573518327cfa733f20dbb7990d1a3a1e787cd4a7b941e30732c9576afda0bd914d5fc4dca9f99658b224587d425612dc68fe00a18da06f35fd133fdf88face426b48de846dceeced535984e809ea2f77b9e787c0fa5ad1d311a1dc75f1e0fd90fe694f7f141ff9718f78b266706d996c34ff3aad943afa9b9c771297839da6d19ff3f23329183d3a118dbb7306e4ab5dd139bca08b80d9d7d3ca81cac5af2e0e9b156cba95c4549703361e13c74eee24a212aaf6b246f7f30e27a67ad448237a0e3ca120d126fadcc136e6872fa5c0547105a17a4b222449329fca71c125e") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x7fff]) 18:01:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1) 18:01:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x3f) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 18:01:31 executing program 0: mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x1, 0x4000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 18:01:31 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000340)=""/233, 0xe9) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7}) 18:01:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0xe}, 0x20) 18:01:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$rds(r0, &(0x7f0000001800)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000017c0), 0xa6}, 0x0) 18:01:32 executing program 6: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) [ 1940.113973] netlink: 'syz-executor1': attribute type 10 has an invalid length. 18:01:32 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r0, 0x0) 18:01:32 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'dummy0\x00', 'ifb0\x00', 'gretap0\x00', @link_local, [], @dev, [], 0xa0, 0xa0, 0xf0, [@cpu={'cpu\x00', 0x8}]}}, @common=@log={'log\x00', 0x28, {{0x0, "21bff51985db7879646ccf04dc4408f5346bf7fd26f5fafbe09f83f47e59"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:01:32 executing program 4: socket$inet6(0xa, 0x0, 0x0) unshare(0x60000000) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000180)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8c442, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @local}, {0x306, @random="ce06880531a7"}, 0x4, {0x2, 0x4e23, @loopback}, 'bond0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73f97a6b04436c6564391f8eacf1978d", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x5, 0xffffffffffffffe1}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 18:01:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"98cf27ff99ecd3c3c35d36fe00", 0x2002}) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r0) 18:01:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x144) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x98) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000000)=""/108) close(r1) 18:01:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000140)="04c563783692c1a98b770b55fbe76648f985072c", 0x14) 18:01:32 executing program 0: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0xa, {{0xa, 0x0, 0x0, @mcast2}}}, 0x69) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) sendto(r0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) [ 1940.552703] IPVS: ftp: loaded support on port[0] = 21 18:01:32 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'dummy0\x00', 'ifb0\x00', 'gretap0\x00', @link_local, [], @dev, [], 0xa0, 0xa0, 0xf0, [@cpu={'cpu\x00', 0x8}]}}, @common=@log={'log\x00', 0x28, {{0x0, "21bff51985db7879646ccf04dc4408f5346bf7fd26f5fafbe09f83f47e59"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:01:33 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x1050000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_CARRIER={0x8}]}, 0x28}}, 0x0) 18:01:33 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'dummy0\x00', 'ifb0\x00', 'gretap0\x00', @link_local, [], @dev, [], 0xa0, 0xa0, 0xf0, [@cpu={'cpu\x00', 0x8}]}}, @common=@log={'log\x00', 0x28, {{0x0, "21bff51985db7879646ccf04dc4408f5346bf7fd26f5fafbe09f83f47e59"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:01:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c) 18:01:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x144) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x98) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000000)=""/108) close(r1) 18:01:33 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'dummy0\x00', 'ifb0\x00', 'gretap0\x00', @link_local, [], @dev, [], 0xa0, 0xa0, 0xf0, [@cpu={'cpu\x00', 0x8}]}}, @common=@log={'log\x00', 0x28, {{0x0, "21bff51985db7879646ccf04dc4408f5346bf7fd26f5fafbe09f83f47e59"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:01:33 executing program 2: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000006a000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x0) [ 1941.528855] netlink: 'syz-executor7': attribute type 33 has an invalid length. 18:01:33 executing program 6: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) 18:01:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"98cf27ff99ecd3c3c35d36fe00", 0x2002}) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r0) 18:01:33 executing program 7: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) 18:01:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x144) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x98) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000000)=""/108) close(r1) 18:01:33 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x2, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 18:01:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 18:01:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$unix(0x1, 0x1000000002, 0x0) r2 = socket$unix(0x1, 0x10000000002, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 18:01:33 executing program 2: unshare(0x20400) splice(0xffffffffffffffff, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f0000000080), 0x6, 0x0) [ 1942.006767] misc userio: The device must be registered before sending interrupts [ 1942.018307] misc userio: The device must be registered before sending interrupts 18:01:34 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x36e) close(r0) socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000d24ff8)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) 18:01:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 18:01:34 executing program 2: syslog(0x3, &(0x7f0000000040)=""/26, 0x1a) 18:01:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x144) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x98) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000000)=""/108) close(r1) 18:01:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_names='nr0\x00'}) 18:01:34 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvfrom$inet6(r0, &(0x7f00000004c0)=""/137, 0xdcd09a94ef9ef722, 0x3, 0x0, 0xfffffffffffffeac) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/251, 0x18c}], 0x1) 18:01:34 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000380)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30254d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000000)='\'', 0x1}], 0x1, 0x81806) sendfile(r1, r2, &(0x7f0000000240), 0x20000102000007) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) read(r0, &(0x7f00000001c0)=""/122, 0x7a) 18:01:34 executing program 6: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) 18:01:34 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x1, 0xa01) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0x5) write$P9_RFSYNC(r0, &(0x7f00000000c0)={0x7}, 0x7) 18:01:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"98cf27ff99ecd3c3c35d36fe00", 0x2002}) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r0) 18:01:35 executing program 7: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) 18:01:35 executing program 2: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x4, 0x6, 0x80000100000005, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000440), &(0x7f0000000580), 0x4}, 0x20) 18:01:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_names='nr0\x00'}) 18:01:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) 18:01:35 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x99b3) [ 1943.412574] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1943.423164] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1943.428312] CPU: 1 PID: 30520 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1943.435601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1943.444970] Call Trace: [ 1943.447601] dump_stack+0x14b/0x190 [ 1943.451287] warn_alloc+0x472/0x690 [ 1943.454982] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1943.459861] ? kernel_poison_pages+0x1a0/0x360 [ 1943.464544] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1943.470290] ? kmsan_set_origin_inline+0x6b/0x120 [ 1943.475188] ? __msan_poison_alloca+0x173/0x1f0 [ 1943.479938] kmsan_alloc_page+0x75/0xd0 [ 1943.483943] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1943.488719] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1943.494200] ? hrtimer_try_to_cancel+0x5c8/0xb90 [ 1943.498990] ? hrtimer_cancel+0x72/0x110 [ 1943.503178] ? futex_wait+0xa65/0xbe0 [ 1943.507039] alloc_pages_vma+0x1578/0x1830 [ 1943.511314] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1943.516452] ? kmsan_set_origin_inline+0x6b/0x120 [ 1943.521339] handle_mm_fault+0x4377/0x81b0 [ 1943.525604] ? kmsan_set_origin_inline+0x6b/0x120 [ 1943.530504] __do_page_fault+0xc8b/0x17e0 [ 1943.534691] do_page_fault+0x98/0xd0 [ 1943.538429] ? page_fault+0x8/0x30 [ 1943.542007] page_fault+0x1e/0x30 [ 1943.545474] RIP: 0033:0x4004d1 [ 1943.548725] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1943.567641] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1943.573019] RAX: 00000000208d4fe4 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1943.580302] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000002953848 [ 1943.587590] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1943.594877] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1943.602158] R13: 00000000009300ac R14: 00000000001da7ac R15: 00000000001da77f [ 1943.609455] Mem-Info: [ 1943.611927] active_anon:38418 inactive_anon:115 isolated_anon:0 [ 1943.611927] active_file:6824 inactive_file:9153 isolated_file:0 [ 1943.611927] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1943.611927] slab_reclaimable:4261 slab_unreclaimable:15195 [ 1943.611927] mapped:71361 shmem:190 pagetables:978 bounce:0 [ 1943.611927] free:31886 free_pcp:893 free_cma:0 [ 1943.645142] Node 0 active_anon:153672kB inactive_anon:460kB active_file:27992kB inactive_file:34720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285444kB dirty:72kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 126976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1943.673164] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.699337] lowmem_reserve[]: 0 2837 7263 7263 [ 1943.703997] Node 0 DMA32 free:58360kB min:26344kB low:32928kB high:39512kB active_anon:64084kB inactive_anon:184kB active_file:2496kB inactive_file:1148kB unevictable:0kB writepending:0kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4288kB pagetables:1088kB bounce:0kB free_pcp:816kB local_pcp:288kB free_cma:0kB [ 1943.733068] lowmem_reserve[]: 0 0 4425 4425 [ 1943.737440] Node 0 Normal free:55856kB min:41088kB low:51360kB high:61632kB active_anon:89588kB inactive_anon:276kB active_file:26856kB inactive_file:32320kB unevictable:0kB writepending:72kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9600kB pagetables:2824kB bounce:0kB free_pcp:2708kB local_pcp:1268kB free_cma:0kB [ 1943.767087] lowmem_reserve[]: 0 0 0 0 [ 1943.770954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1943.784273] Node 0 DMA32: 0*4kB 5*8kB (U) 63*16kB (UME) 87*32kB (UM) 71*64kB (UM) 39*128kB (UME) 38*256kB (UME) 25*512kB (UM) 22*1024kB (UM) 0*2048kB 0*4096kB = 58424kB [ 1943.799581] Node 0 Normal: 861*4kB (UME) 327*8kB (UME) 98*16kB (UME) 39*32kB (UM) 57*64kB (UM) 37*128kB (M) 27*256kB (ME) 62*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 55916kB [ 1943.815343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.823917] 15855 total pagecache pages [ 1943.827879] 0 pages in swap cache [ 1943.831343] Swap cache stats: add 0, delete 0, find 0/0 [ 1943.836707] Free swap = 0kB [ 1943.839743] Total swap = 0kB [ 1943.842763] 1965969 pages RAM [ 1943.845869] 0 pages HighMem/MovableOnly [ 1943.849858] 101394 pages reserved 18:01:35 executing program 2: r0 = socket$inet6(0xa, 0x400000000002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r0, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @dev}, 0x1c) 18:01:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x4, 0x4, 0xfffffffe, 0x0, r0}, 0x2c) 18:01:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x1c, &(0x7f0000000040)={&(0x7f0000012000/0x1000)=nil, 0x1000, 0xe0ffffff}, &(0x7f00000000c0)=0x10) close(r3) dup3(r1, r2, 0x0) 18:01:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) r0 = socket$kcm(0x2, 0x800000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) 18:01:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures}) close(0xffffffffffffffff) 18:01:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x99b3) 18:01:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_names='nr0\x00'}) 18:01:36 executing program 6: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) 18:01:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ip%dp0\x00', 0x5}) 18:01:36 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x99b3) 18:01:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"98cf27ff99ecd3c3c35d36fe00", 0x2002}) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r1, r0) 18:01:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', @ifru_names='nr0\x00'}) 18:01:37 executing program 7: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x007\x00'}) 18:01:37 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x99b3) 18:01:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000080)) ioctl$RTC_AIE_OFF(r1, 0x7004) 18:01:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x1, 0x7f, 0x2}], 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}], 0x18) 18:01:37 executing program 2: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x4, 0x74031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="6e756d615f6d617073003816775138a81798705a0e35cfe857de1b3001d448dda69c3d6787607d013ff3d3b8df312cac946543b210d35cce9c6cd5474086a93cfb7fd4c676a748379aea3bf90563745b589a5c55b739fa5cf0125d55dd83c3dfc70ebda3174ce44220ba0d916416feb4b664f0e6f59602cc5dae8d17bb") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 18:01:37 executing program 6: unshare(0x20400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200080, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000000c0)) 18:01:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2000001000000e7, &(0x7f0000000100), &(0x7f0000000040)=0x4) 18:01:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1945.909921] netlink: 'syz-executor0': attribute type 1 has an invalid length. 18:01:38 executing program 2: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x4, 0x74031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="6e756d615f6d617073003816775138a81798705a0e35cfe857de1b3001d448dda69c3d6787607d013ff3d3b8df312cac946543b210d35cce9c6cd5474086a93cfb7fd4c676a748379aea3bf90563745b589a5c55b739fa5cf0125d55dd83c3dfc70ebda3174ce44220ba0d916416feb4b664f0e6f59602cc5dae8d17bb") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 18:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001f00), 0x252, &(0x7f0000001fc0)=""/122, 0x7a}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x7, 0xee, &(0x7f00000002c0)=""/238}, &(0x7f0000000200)="da88aa5af197", &(0x7f0000000440)=""/95, 0x0, 0x0, 0x0, &(0x7f00000004c0)}) 18:01:38 executing program 6: fchmodat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0) 18:01:38 executing program 6: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:38 executing program 2: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x4, 0x74031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="6e756d615f6d617073003816775138a81798705a0e35cfe857de1b3001d448dda69c3d6787607d013ff3d3b8df312cac946543b210d35cce9c6cd5474086a93cfb7fd4c676a748379aea3bf90563745b589a5c55b739fa5cf0125d55dd83c3dfc70ebda3174ce44220ba0d916416feb4b664f0e6f59602cc5dae8d17bb") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 18:01:38 executing program 2: mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x4, 0x74031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="6e756d615f6d617073003816775138a81798705a0e35cfe857de1b3001d448dda69c3d6787607d013ff3d3b8df312cac946543b210d35cce9c6cd5474086a93cfb7fd4c676a748379aea3bf90563745b589a5c55b739fa5cf0125d55dd83c3dfc70ebda3174ce44220ba0d916416feb4b664f0e6f59602cc5dae8d17bb") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 18:01:38 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 18:01:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x1, 0x7f, 0x2}], 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}], 0x18) 18:01:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000004300)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4, 0x5}}}]}, 0xff5d}}, 0x0) 18:01:38 executing program 7: setrlimit(0x8, &(0x7f0000000080)) mlock2(&(0x7f00001d8000/0x1000)=nil, 0x1000, 0x0) 18:01:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') syz_open_procfs(0x0, &(0x7f0000000100)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e02940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824dff5d66a212ea1c9a31ce9f13627248946b0110ea3dd4e67ac2a53561cc2414a9ddb3108ae") 18:01:39 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) pread64(r0, &(0x7f0000001200)=""/131, 0x83, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/157, 0xf5}], 0x1) 18:01:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x22002) write$P9_RREAD(r2, &(0x7f0000000040)={0xb}, 0xb) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)=0x4) 18:01:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) 18:01:39 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x6, &(0x7f0000000000)="a5e471b6", 0x4) 18:01:39 executing program 7: r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1c0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0xd0, 0xd0, 0x100, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @loopback, 0x0, @empty, [], @dev}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x238) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001540)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 18:01:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x1, 0x7f, 0x2}], 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}], 0x18) 18:01:39 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0x2) 18:01:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0xffffffffffffff29, 0x2, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 18:01:39 executing program 6: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:39 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/51, &(0x7f00000001c0)=0x33) 18:01:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{}, 0x1, 0x7f, 0x2}], 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}}], 0x18) 18:01:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 18:01:39 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)={0x0, 0x7ff}) 18:01:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000)) [ 1948.014862] IPVS: length: 196868403 != 8 18:01:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x8912) close(r2) close(r1) 18:01:40 executing program 6: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 18:01:40 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = dup2(r0, r0) recvmmsg(r0, &(0x7f00000051c0), 0x0, 0x0, &(0x7f0000005300)) connect$can_bcm(r1, &(0x7f0000005340), 0x10) 18:01:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000400)=[{}], 0x18) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xd1c, 0x1, 0xa470c593c7ead6c4, 0x0, 0x0, 0x81}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xe9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 18:01:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x6]}) 18:01:40 executing program 4: r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) close(r0) 18:01:40 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 18:01:40 executing program 0: ioprio_set$uid(0x0, 0x0, 0x786c) 18:01:40 executing program 3: unshare(0x20400) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 18:01:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000013ff1)={&(0x7f0000000040)={0x28, 0x28, 0x7, 0x0, 0x0, {0x1}, [@typed={0x14, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) 18:01:40 executing program 6: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:01:40 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 18:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 18:01:41 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x3, 0xffffffffffffffff, &(0x7f0000000100)) 18:01:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/72, 0x7ff}) 18:01:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2400000021002553075f01650272fc0280000020001c000000fe000c0800150093000000", 0x24) 18:01:41 executing program 4: r0 = socket$inet(0x10, 0x4000000000002, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000200)={0x14}, 0x14) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2f0000001c000367ffffff000d0000000200000001000000000003c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) [ 1949.225712] netlink: 'syz-executor1': attribute type 21 has an invalid length. 18:01:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000400)=[{}], 0x18) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xd1c, 0x1, 0xa470c593c7ead6c4, 0x0, 0x0, 0x81}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xe9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 18:01:41 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd8, &(0x7f0000000100), &(0x7f0000000180)=0x4) 18:01:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}}, 0xfffffffffffffffd) 18:01:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x80}}) 18:01:41 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000000), 0x0, 0x2) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000001ac0)) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x20001) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xa3b) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)={&(0x7f0000001b00)='./file0\x00', 0x0, 0x8}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/mixer\x00', 0x80000, 0x0) 18:01:41 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0209000007000000000000fdffffffff04000700000000000a00000000000000ff0200000000000000000000000000010700000000000000"], 0x38}}, 0x0) 18:01:41 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mbind(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000200)=0x5, 0x7, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 18:01:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgid(0x0) 18:01:41 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='attr/fscreate\x00') exit(0x0) sendfile(r1, r1, &(0x7f0000000000), 0xffff) 18:01:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x7, 0x4) 18:01:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x80}, 'port1\x00'}) 18:01:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x80}}) 18:01:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000180)=0x1, 0x500000000033) 18:01:42 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2000001000000ce, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 18:01:42 executing program 1: r0 = socket$inet6(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x1, &(0x7f00000002c0)="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", 0x1a5) 18:01:42 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0xfffffffffffffed4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) sendmmsg(r1, &(0x7f0000001800)=[{{&(0x7f0000006b00)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001780), 0x31, &(0x7f0000009d80)}}, {{&(0x7f000000b1c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x2, 0x0) [ 1950.375351] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 18:01:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000400)=[{}], 0x18) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xd1c, 0x1, 0xa470c593c7ead6c4, 0x0, 0x0, 0x81}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xe9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 18:01:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x80}}) 18:01:42 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x401}}) 18:01:42 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2000001000000ce, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 18:01:42 executing program 7: r0 = shmget$private(0x0, 0x2000, 0x1806, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000e00000/0x200000)=nil, 0x6000) 18:01:42 executing program 1: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x2) mknod(&(0x7f00000002c0)='./file0\x00', 0x1040, 0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:01:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000440)=[@in, @in6={0xa, 0x0, 0x0, @local}]}, &(0x7f0000000200)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 18:01:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/228, 0xe4}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102}) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000840)=""/233, 0xe9}, 0x0) 18:01:42 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2000001000000ce, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 18:01:42 executing program 7: r0 = socket$inet6(0xa, 0x200000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000092c0), 0x6b2, 0x0) 18:01:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x80}}) 18:01:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000440)=[@in, @in6={0xa, 0x0, 0x0, @local}]}, &(0x7f0000000200)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 18:01:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) close(r0) 18:01:43 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) splice(r0, &(0x7f0000000040), r1, &(0x7f0000000080), 0x2, 0x0) 18:01:43 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2000001000000ce, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 18:01:43 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/228, 0xe4}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102}) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000840)=""/233, 0xe9}, 0x0) 18:01:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000000, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000400)=[{}], 0x18) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xd1c, 0x1, 0xa470c593c7ead6c4, 0x0, 0x0, 0x81}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0xe9}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") 18:01:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000440)=[@in, @in6={0xa, 0x0, 0x0, @local}]}, &(0x7f0000000200)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 18:01:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007840)=[{&(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000003c0)='Y', 0x1}], 0x1, &(0x7f0000000680)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21}], 0x10) 18:01:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) close(r0) 18:01:43 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040), 0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 18:01:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) 18:01:43 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/228, 0xe4}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102}) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000840)=""/233, 0xe9}, 0x0) 18:01:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) close(r0) 18:01:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000440)=[@in, @in6={0xa, 0x0, 0x0, @local}]}, &(0x7f0000000200)=0x10) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 18:01:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001000ffff00000000000000000000000008000100ffffffff"], 0x1c}}, 0x0) 18:01:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) 18:01:44 executing program 7: unshare(0x20400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) 18:01:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=""/228, 0xe4}}], 0x1, 0x0, &(0x7f0000000040)={0x77359400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102}) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000840)=""/233, 0xe9}, 0x0) 18:01:44 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:44 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) close(r0) 18:01:44 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, &(0x7f0000000180)=""/13, &(0x7f000033bffc)=0xd) 18:01:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000001280), 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 18:01:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/137, 0x89}], 0x1, &(0x7f0000000600)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000580), &(0x7f00000005c0)}}], 0x58}, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e40), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="c3e39384abf48461d04f2b5c7ce674b726a253807b0cdc509212676fc7994299d5e9fc2d812a0e6ddf01837854ff9d23223dc2f0b5", 0x35, 0x0, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0xfffffffffffffffd, &(0x7f0000000ac0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f0000004380)}}], 0x1, 0x0, &(0x7f0000004540)={0x0, 0x989680}) 18:01:44 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 18:01:44 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, &(0x7f0000000180)=""/13, &(0x7f000033bffc)=0xd) 18:01:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50}, 0x30) 18:01:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 18:01:44 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:44 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:44 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, &(0x7f0000000180)=""/13, &(0x7f000033bffc)=0xd) 18:01:44 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x6, 0x80000100000005, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 18:01:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000a00)}}, &(0x7f0000044000)) io_setup(0x5, &(0x7f0000002800)=0x0) io_submit(r1, 0x1, &(0x7f0000002700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)="bc", 0x1}]) shutdown(r0, 0x0) 18:01:45 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x4004092b, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)}) 18:01:45 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:45 executing program 3: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2720, &(0x7f0000000180)=""/13, &(0x7f000033bffc)=0xd) 18:01:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 18:01:45 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x22, &(0x7f0000000140)=""/244, &(0x7f00000002c0)=0xfffffffffffffe38) 18:01:45 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfeb5) clock_gettime(0x4, &(0x7f0000000240)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)) socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x6) shutdown(0xffffffffffffffff, 0x0) close(r0) 18:01:45 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) clone(0x400c0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000100)) 18:01:45 executing program 7: getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xe) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 18:01:45 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x83, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 18:01:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) fcntl$setflags(r1, 0x2, 0x0) 18:01:45 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 18:01:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) [ 1953.765366] IPVS: ftp: loaded support on port[0] = 21 18:01:45 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ptrace(0x8, r1) 18:01:45 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) 18:01:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 18:01:45 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x5) sendmmsg$inet_sctp(r0, &(0x7f0000001840)=[{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=[@prinfo={0x18, 0x84, 0x5, {0x69ce9263a083119a}}], 0x18}], 0x1, 0x0) 18:01:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000003000)=""/174) 18:01:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="e1", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0xfffffffffffff843}, 0x10) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000006ac0)) sendto$inet(r0, &(0x7f0000000000)="8e4fdb776e70faa1e5cb5b7ec44703", 0xf, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 18:01:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000008b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f757024636700000000000000000000000000000000"], 0x90) 18:01:46 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 18:01:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002240)={0x1, [0x0]}, &(0x7f0000003a40)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1}, &(0x7f0000000280)=0x8) [ 1954.331408] IPVS: ftp: loaded support on port[0] = 21 18:01:47 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) clone(0x400c0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000100)) 18:01:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)=':ose0\x00') 18:01:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x21, 0x4000000000000718) 18:01:47 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0bd2ca0f000319", 0x7}], 0x1) 18:01:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@rand_addr, @dev, @local}, 0x264) 18:01:47 executing program 6: r0 = socket$inet(0x2, 0x3, 0x820000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 18:01:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="e1", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0xfffffffffffff843}, 0x10) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000006ac0)) sendto$inet(r0, &(0x7f0000000000)="8e4fdb776e70faa1e5cb5b7ec44703", 0xf, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 18:01:47 executing program 3: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x201, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) write$P9_RWALK(r1, &(0x7f00000002c0)={0x9}, 0x9) dup2(r0, r2) 18:01:47 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 1955.932377] IPVS: ftp: loaded support on port[0] = 21 18:01:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x200000000001e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x401}, 0x1c) close(r1) 18:01:47 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 18:01:47 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0bd2ca0f000319", 0x7}], 0x1) 18:01:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@rand_addr, @dev, @local}, 0x264) 18:01:48 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000140)="6e732f70d1dcabf008000001bad0da60ed6d605800000000003f7ee85d3115405a5c3a696400e3500400000097a492bde7d1c20bbeab8b15a0f2cc11963ddabde44cddc82ddf77be0e0a28ecdd4b2b3d7968190a8ec96f244b34ed2035e1464079cef0c7efafc7e5bd807526439379b699289ac965891bc538fb72bd448ae4513e1223e1ff4bdafa579c001c6f5741a05b13271b3f5fd8860d1479bcd88d52089866969def3b0f9d672bc6c196952f078982910b164894b0fb0848272e3509e3de4950b1916cbac09731dde2ee079fb499565b7f09") 18:01:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x3b9) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {&(0x7f0000000240), r1, 0x1}}, 0x18) 18:01:48 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0bd2ca0f000319", 0x7}], 0x1) 18:01:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@rand_addr, @dev, @local}, 0x264) 18:01:48 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x80000) keyctl$join(0x1, &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}) 18:01:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x6) close(r2) close(r1) 18:01:48 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) clone(0x400c0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000100)) 18:01:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{}, 0xfffffffffffffffe, 0x0, 0x101, {}, 0xffffffff, 0x3}) 18:01:48 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0bd2ca0f000319", 0x7}], 0x1) 18:01:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="e1", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0xfffffffffffff843}, 0x10) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000006ac0)) sendto$inet(r0, &(0x7f0000000000)="8e4fdb776e70faa1e5cb5b7ec44703", 0xf, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 18:01:48 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="02") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000012000/0x3000)=nil, 0x3000) munlock(&(0x7f0000013000/0xf000)=nil, 0xf000) 18:01:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0xc, r2}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x71, 0x0) 18:01:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@rand_addr, @dev, @local}, 0x264) 18:01:48 executing program 6: perf_event_open(&(0x7f0000000000)={0xfffffffffffffffc, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x2) 18:01:49 executing program 7: sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 18:01:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="02") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000012000/0x3000)=nil, 0x3000) munlock(&(0x7f0000013000/0xf000)=nil, 0xf000) 18:01:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x14, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) 18:01:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x3) close(r2) close(r1) 18:01:49 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @loopback}, 0xc) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) dup3(r0, r1, 0x0) 18:01:49 executing program 1: unshare(0x20400) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 18:01:49 executing program 4: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040), 0x10) 18:01:50 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) clone(0x400c0000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000100)) 18:01:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="02") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000012000/0x3000)=nil, 0x3000) munlock(&(0x7f0000013000/0xf000)=nil, 0xf000) 18:01:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x6}, 0xb) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x2, &(0x7f0000001ac0)) r2 = accept4(r0, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='O'], 0x1) 18:01:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000040)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xd) 18:01:50 executing program 7: sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 18:01:50 executing program 6: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) 18:01:50 executing program 4: unshare(0x20400) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000038c0)='/dev/null\x00', 0x200000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000004580)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) 18:01:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="e1", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0xfffffffffffff843}, 0x10) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000006ac0)) sendto$inet(r0, &(0x7f0000000000)="8e4fdb776e70faa1e5cb5b7ec44703", 0xf, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) [ 1958.408938] IPVS: ftp: loaded support on port[0] = 21 18:01:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="02") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000012000/0x3000)=nil, 0x3000) munlock(&(0x7f0000013000/0xf000)=nil, 0xf000) 18:01:50 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e40), 0xffc, 0x0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) 18:01:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) 18:01:50 executing program 7: sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 18:01:50 executing program 4: r0 = inotify_init() r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) getpid() fstat(r0, &(0x7f0000001ac0)) fcntl$getown(r0, 0x9) geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b40), &(0x7f0000001b80)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001bc0)) getegid() getresgid(&(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)) getgroups(0x4, &(0x7f00000047c0)=[0xee00, 0xee01, 0x0, 0xee01]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000005cc0)) getuid() fcntl$getownex(r0, 0x10, &(0x7f00000060c0)) geteuid() fstat(r0, &(0x7f0000006100)) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006180)={{{@in6=@local, @in6}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000006280)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000062c0), &(0x7f0000006300)=0xc) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000000)={0xb}, 0xb) 18:01:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = semget$private(0x0, 0x20000000107, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x200400}, {}], 0x2) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000300)=""/208) 18:01:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fcntl$notify(r1, 0x402, 0x31) exit(0x0) fchown(r1, 0x0, 0x0) 18:01:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x27, 0x40007, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 18:01:51 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209000302000000a0b499a5439b2dc2c839b50000000000000000"], 0x1b}}, 0x0) 18:01:51 executing program 7: sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 18:01:51 executing program 0: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x1f8}, 0x460) recvfrom(r0, &(0x7f0000000300)=""/188, 0xbc, 0x0, 0x0, 0x464) 18:01:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="2400000058001f00ff03f479002304000a04f51108000100020100020800028101c9a800", 0x24) 18:01:51 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x1, 0x4) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r1, &(0x7f0000000000), 0xfefd, 0x0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 18:01:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f000086eff0)={0x2, 0x4e22, @multicast2}, 0x10) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @mcast2, 0x9}, 0x1c) 18:01:51 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xc, 0x1, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000180)="d3", &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140)='V', &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000950000)}, 0x20) 18:01:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x11, r2) 18:01:51 executing program 0: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x1f8}, 0x460) recvfrom(r0, &(0x7f0000000300)=""/188, 0xbc, 0x0, 0x0, 0x464) 18:01:51 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffffcd, &(0x7f00000005c0)=0x101) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@dev, @rand_addr=0xc82, @loopback}, 0xc) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000140)={{0xffffffffffff0000}, 'port1\x00', 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "1fe975932220801a", "61ff60d4b8614bf0281ef6b567b1e3338e59905e7cc0674aca3ef13ed5a27c67"}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r0, 0x1000000000013) 18:01:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r1 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r1, 0x40001) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) sendfile(r0, r1, &(0x7f000000a000), 0x4a1cb7e7) 18:01:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x4000000007, 0x0) perf_event_open(&(0x7f0000001000)={0x9, 0xffffffffffffff09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 18:01:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x8000000000001, 0x84) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) 18:01:52 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:01:52 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000380)='#vmnet1nodevem1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000001000/0x2000)=nil, 0x2000}) 18:01:52 executing program 0: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x1f8}, 0x460) recvfrom(r0, &(0x7f0000000300)=""/188, 0xbc, 0x0, 0x0, 0x464) 18:01:52 executing program 7: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x80, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000140)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, &(0x7f0000000000), 0x80000002) [ 1960.336883] syz-executor7: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1960.347526] syz-executor7 cpuset=syz7 mems_allowed=0 [ 1960.352675] CPU: 0 PID: 31351 Comm: syz-executor7 Not tainted 4.19.0-rc1+ #36 [ 1960.359957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1960.369326] Call Trace: [ 1960.371943] dump_stack+0x14b/0x190 [ 1960.375613] warn_alloc+0x472/0x690 [ 1960.379319] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1960.384198] ? kernel_poison_pages+0x1a0/0x360 [ 1960.388844] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1960.394233] ? update_load_avg+0x6c4/0x1a00 [ 1960.398633] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1960.404389] ? __msan_poison_alloca+0x173/0x1f0 [ 1960.409112] kmsan_alloc_page+0x75/0xd0 [ 1960.413113] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1960.417909] ? shrink_node_memcg+0x247b/0x4310 [ 1960.422541] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1960.427928] ? __update_load_avg_cfs_rq+0x102/0x1070 [ 1960.433107] alloc_pages_vma+0x1578/0x1830 [ 1960.437389] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1960.442531] ? kmsan_set_origin_inline+0x6b/0x120 [ 1960.447428] handle_mm_fault+0x4377/0x81b0 [ 1960.451707] ? kmsan_set_origin_inline+0x6b/0x120 [ 1960.456616] __do_page_fault+0xc8b/0x17e0 [ 1960.460812] do_page_fault+0x98/0xd0 [ 1960.464573] ? page_fault+0x8/0x30 [ 1960.468145] page_fault+0x1e/0x30 [ 1960.471613] RIP: 0033:0x43e461 [ 1960.474826] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1960.493743] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1960.499150] RAX: 0000000020d78000 RBX: fffffffffffffffe RCX: 000000000000002e [ 1960.506436] RDX: 0000000000000001 RSI: 0000000000730430 RDI: 0000000020d78000 [ 1960.513758] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000001 [ 1960.521054] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1960.528344] R13: 00000000009300ac R14: 00000000001de9b6 R15: 00000000001de989 [ 1960.535652] Mem-Info: [ 1960.538123] active_anon:35026 inactive_anon:111 isolated_anon:0 [ 1960.538123] active_file:7142 inactive_file:6623 isolated_file:0 [ 1960.538123] unevictable:0 dirty:78 writeback:0 unstable:0 [ 1960.538123] slab_reclaimable:4263 slab_unreclaimable:15168 [ 1960.538123] mapped:71340 shmem:190 pagetables:953 bounce:0 [ 1960.538123] free:36189 free_pcp:1235 free_cma:0 [ 1960.571432] Node 0 active_anon:140104kB inactive_anon:444kB active_file:28568kB inactive_file:26492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285360kB dirty:312kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 114688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1960.599550] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1960.625741] lowmem_reserve[]: 0 2837 7263 7263 [ 1960.630370] Node 0 DMA32 free:77340kB min:26344kB low:32928kB high:39512kB active_anon:48864kB inactive_anon:148kB active_file:2360kB inactive_file:1312kB unevictable:0kB writepending:28kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4160kB pagetables:364kB bounce:0kB free_pcp:2784kB local_pcp:1348kB free_cma:0kB [ 1960.659652] lowmem_reserve[]: 0 0 4425 4425 [ 1960.664014] Node 0 Normal free:53056kB min:41088kB low:51360kB high:61632kB active_anon:91148kB inactive_anon:296kB active_file:26208kB inactive_file:25288kB unevictable:0kB writepending:284kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9792kB pagetables:3448kB bounce:0kB free_pcp:2076kB local_pcp:756kB free_cma:0kB [ 1960.693643] lowmem_reserve[]: 0 0 0 0 [ 1960.697485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1960.710839] Node 0 DMA32: 673*4kB (UM) 123*8kB (UM) 96*16kB (UME) 100*32kB (UM) 88*64kB (UM) 51*128kB (UME) 42*256kB (UME) 30*512kB (UM) 24*1024kB (UM) 3*2048kB (UM) 0*4096kB = 77404kB 18:01:52 executing program 0: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x1f8}, 0x460) recvfrom(r0, &(0x7f0000000300)=""/188, 0xbc, 0x0, 0x0, 0x464) 18:01:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 18:01:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 1960.727801] Node 0 Normal: 275*4kB (UMEH) 175*8kB (UME) 112*16kB (UME) 167*32kB (UM) 117*64kB (UM) 54*128kB (UM) 27*256kB (UME) 35*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 52964kB [ 1960.744485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1960.753063] 13909 total pagecache pages [ 1960.757036] 0 pages in swap cache [ 1960.760507] Swap cache stats: add 0, delete 0, find 0/0 [ 1960.765912] Free swap = 0kB [ 1960.768942] Total swap = 0kB [ 1960.771959] 1965969 pages RAM [ 1960.775060] 0 pages HighMem/MovableOnly [ 1960.779034] 101394 pages reserved 18:01:52 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4003) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 18:01:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x8000000000001, 0x84) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) [ 1960.984691] syz-executor1: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1960.995701] syz-executor1 cpuset=syz1 mems_allowed=0 [ 1961.000854] CPU: 1 PID: 31372 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #36 [ 1961.008142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.017521] Call Trace: [ 1961.020143] dump_stack+0x14b/0x190 [ 1961.023814] warn_alloc+0x472/0x690 [ 1961.027516] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1961.032399] ? kernel_poison_pages+0x1a0/0x360 [ 1961.037079] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1961.042838] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1961.048276] kmsan_alloc_page+0x75/0xd0 [ 1961.052285] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1961.057067] ? copy_user_handle_tail+0x18e/0x270 [ 1961.061839] ? bsearch+0x215/0x260 [ 1961.065399] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1961.070883] ? __update_load_avg_cfs_rq+0x895/0x1070 [ 1961.076006] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.080868] ? __msan_poison_alloca+0x173/0x1f0 [ 1961.085595] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.090466] ? __msan_poison_alloca+0x173/0x1f0 [ 1961.095189] alloc_pages_vma+0x1578/0x1830 [ 1961.099562] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1961.105555] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.110602] handle_mm_fault+0x4377/0x81b0 [ 1961.114880] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.119779] __do_page_fault+0xc8b/0x17e0 [ 1961.123994] do_page_fault+0x98/0xd0 [ 1961.127741] page_fault+0x1e/0x30 [ 1961.131241] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1961.136885] Code: 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 40 00 [ 1961.155803] RSP: 0018:ffff88000bebfbd8 EFLAGS: 00010202 [ 1961.161181] RAX: ffffffff840b82ff RBX: 000000002059e000 RCX: 0000000000000004 [ 1961.168478] RDX: 0000000000000004 RSI: ffff88000bebfc78 RDI: 000000002059dffc [ 1961.175800] RBP: ffff88000bebfc40 R08: ffffffff7fffffff R09: ffff88002052fc78 [ 1961.183099] R10: 0000000000000000 R11: ffffffff8689fcc0 R12: 0000000000000000 [ 1961.190384] R13: ffff88000bebfbe0 R14: 0000000000000000 R15: ffff8800b4522680 [ 1961.197736] ? __ia32_sys_setsockopt+0x1c0/0x1c0 [ 1961.202527] ? _copy_to_user+0x12f/0x180 [ 1961.206612] ? _copy_to_user+0xed/0x180 [ 1961.210616] sock_getsockopt+0x22f0/0x3190 [ 1961.214885] ? __fget_light+0x6a3/0x700 [ 1961.218886] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1961.224266] ? security_socket_getsockopt+0x8f/0x1f0 [ 1961.229403] __sys_getsockopt+0x32e/0x550 [ 1961.233593] __x64_sys_getsockopt+0x15d/0x1c0 [ 1961.238137] ? __ia32_sys_setsockopt+0x1c0/0x1c0 [ 1961.242910] do_syscall_64+0x15b/0x220 [ 1961.246831] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1961.252031] RIP: 0033:0x457089 [ 1961.255239] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1961.274153] RSP: 002b:00007fc967e30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 18:01:53 executing program 2: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) 18:01:53 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 1961.281875] RAX: ffffffffffffffda RBX: 00007fc967e316d4 RCX: 0000000000457089 [ 1961.289150] RDX: 000000000000002a RSI: 0000000000000001 RDI: 0000000000000005 [ 1961.296429] RBP: 00000000009300a0 R08: 0000000020d8cffc R09: 0000000000000000 [ 1961.303717] R10: 000000002059dffc R11: 0000000000000246 R12: 00000000ffffffff [ 1961.310997] R13: 00000000004cd180 R14: 00000000004c3cd4 R15: 0000000000000000 [ 1961.366936] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1961.377470] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1961.382629] CPU: 1 PID: 31378 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1961.389920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.399291] Call Trace: [ 1961.401904] dump_stack+0x14b/0x190 [ 1961.405562] warn_alloc+0x472/0x690 [ 1961.409254] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1961.414136] ? kernel_poison_pages+0x1a0/0x360 [ 1961.418825] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1961.424589] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1961.430120] kmsan_alloc_page+0x75/0xd0 [ 1961.434129] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1961.438916] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.443784] ? __msan_poison_alloca+0x173/0x1f0 [ 1961.448493] ? should_fail+0x53/0xaa0 [ 1961.452333] ? __should_failslab+0x278/0x2a0 [ 1961.456777] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.461701] alloc_pages_vma+0x1578/0x1830 [ 1961.466026] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1961.471175] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.476062] handle_mm_fault+0x4377/0x81b0 [ 1961.480329] ? kmsan_set_origin_inline+0x6b/0x120 [ 1961.485246] __do_page_fault+0xc8b/0x17e0 [ 1961.489468] do_page_fault+0x98/0xd0 [ 1961.493210] ? page_fault+0x8/0x30 [ 1961.496808] page_fault+0x1e/0x30 [ 1961.500279] RIP: 0033:0x43e499 [ 1961.503489] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 [ 1961.522433] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1961.527833] RAX: 00000000200001c0 RBX: fffffffffffffffe RCX: 0030656c69662f2e [ 1961.535116] RDX: 0000000000000008 RSI: 0000000000730080 RDI: 00000000200001c0 [ 1961.542399] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000001 [ 1961.549705] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1961.556998] R13: 00000000009300ac R14: 00000000001dedc4 R15: 00000000001ded97 [ 1961.564637] warn_alloc_show_mem: 1 callbacks suppressed [ 1961.564643] Mem-Info: [ 1961.572466] active_anon:35556 inactive_anon:114 isolated_anon:0 [ 1961.572466] active_file:7102 inactive_file:6558 isolated_file:0 [ 1961.572466] unevictable:0 dirty:79 writeback:0 unstable:0 [ 1961.572466] slab_reclaimable:4263 slab_unreclaimable:15175 [ 1961.572466] mapped:71331 shmem:190 pagetables:907 bounce:0 [ 1961.572466] free:34804 free_pcp:1075 free_cma:0 18:01:53 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4003) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) [ 1961.605789] Node 0 active_anon:142224kB inactive_anon:456kB active_file:28408kB inactive_file:26232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285324kB dirty:316kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 116736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1961.633918] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1961.660096] lowmem_reserve[]: 0 2837 7263 7263 [ 1961.664776] Node 0 DMA32 free:70716kB min:26344kB low:32928kB high:39512kB active_anon:50912kB inactive_anon:148kB active_file:2360kB inactive_file:1312kB unevictable:0kB writepending:28kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4224kB pagetables:364kB bounce:0kB free_pcp:2784kB local_pcp:1436kB free_cma:0kB [ 1961.694078] lowmem_reserve[]: 0 0 4425 4425 [ 1961.698441] Node 0 Normal free:52596kB min:41088kB low:51360kB high:61632kB active_anon:91264kB inactive_anon:308kB active_file:26048kB inactive_file:24920kB unevictable:0kB writepending:288kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3264kB bounce:0kB free_pcp:1224kB local_pcp:312kB free_cma:0kB [ 1961.728099] lowmem_reserve[]: 0 0 0 0 [ 1961.731942] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1961.745290] Node 0 DMA32: 673*4kB (UM) 123*8kB (UM) 96*16kB (UME) 101*32kB (UM) 76*64kB (UM) 53*128kB (UME) 42*256kB (UME) 30*512kB (UM) 24*1024kB (UM) 0*2048kB 0*4096kB = 70780kB 18:01:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000100)='reiserfs\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rootfs\x00', 0x20008a0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000000c0)='.', &(0x7f0000187ff8)='.', &(0x7f0000000180)='rpc_pipefs\x00', 0x5010, &(0x7f0000000200)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 1961.761599] Node 0 Normal: 259*4kB (UMEH) 149*8kB (UME) 108*16kB (ME) 155*32kB (UM) 123*64kB (UM) 54*128kB (UM) 27*256kB (UME) 35*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 52628kB [ 1961.778325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1961.786935] 13846 total pagecache pages [ 1961.790929] 0 pages in swap cache [ 1961.794396] Swap cache stats: add 0, delete 0, find 0/0 [ 1961.799779] Free swap = 0kB [ 1961.802819] Total swap = 0kB [ 1961.805848] 1965969 pages RAM [ 1961.808961] 0 pages HighMem/MovableOnly [ 1961.812937] 101394 pages reserved 18:01:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) [ 1961.953293] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1961.963832] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1961.968973] CPU: 1 PID: 31397 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1961.976255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1961.985620] Call Trace: [ 1961.988236] dump_stack+0x14b/0x190 [ 1961.992366] warn_alloc+0x472/0x690 [ 1961.996073] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1962.000972] ? kernel_poison_pages+0x1a0/0x360 [ 1962.005604] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1962.010993] ? update_load_avg+0x6c4/0x1a00 [ 1962.015369] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1962.021113] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.026041] kmsan_alloc_page+0x75/0xd0 [ 1962.030042] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1962.034840] ? hrtimer_cancel+0x52/0x110 [ 1962.038931] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1962.044349] ? hrtimer_try_to_cancel+0x31b/0xb90 [ 1962.049143] ? hrtimer_cancel+0x72/0x110 [ 1962.053292] ? futex_wait+0xa65/0xbe0 [ 1962.057167] alloc_pages_vma+0x1578/0x1830 [ 1962.061440] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1962.066571] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.071466] handle_mm_fault+0x4377/0x81b0 [ 1962.075763] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.080691] __do_page_fault+0xc8b/0x17e0 [ 1962.084890] do_page_fault+0x98/0xd0 [ 1962.088625] ? page_fault+0x8/0x30 [ 1962.092184] page_fault+0x1e/0x30 [ 1962.095655] RIP: 0033:0x43e461 [ 1962.098871] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1962.117785] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1962.123172] RAX: 0000000020377ff8 RBX: fffffffffffffffe RCX: 000000000000002e [ 1962.130459] RDX: 0000000000000001 RSI: 0000000000730640 RDI: 0000000020377ff8 [ 1962.137748] RBP: 0000000000930aa0 R08: 000000000000000e R09: 0000000000000001 [ 1962.145046] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1962.152344] R13: 00000000009300ac R14: 00000000001df019 R15: 00000000001defec [ 1962.192331] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1962.202846] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1962.207978] CPU: 0 PID: 31397 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1962.215250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.224630] Call Trace: [ 1962.227248] dump_stack+0x14b/0x190 [ 1962.230902] warn_alloc+0x472/0x690 [ 1962.234575] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1962.239440] ? kernel_poison_pages+0x1a0/0x360 [ 1962.244124] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1962.249944] kmsan_alloc_page+0x75/0xd0 18:01:54 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000580)="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", 0x198) 18:01:54 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4003) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 18:01:54 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x20}, 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0x14}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f0, 0x0) [ 1962.253942] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1962.258731] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.263606] ? __msan_poison_alloca+0x173/0x1f0 [ 1962.268319] ? try_charge+0x14c/0x2f80 [ 1962.272225] ? mem_cgroup_try_charge+0x7c1/0xf20 [ 1962.277001] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1962.282499] alloc_pages_vma+0x1578/0x1830 [ 1962.286805] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1962.291929] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.296809] handle_mm_fault+0x4377/0x81b0 [ 1962.301065] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.305979] __do_page_fault+0xc8b/0x17e0 [ 1962.310202] do_page_fault+0x98/0xd0 [ 1962.313959] ? page_fault+0x8/0x30 [ 1962.317518] page_fault+0x1e/0x30 [ 1962.320984] RIP: 0033:0x43e471 [ 1962.324184] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 1962.343191] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 18:01:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 18:01:54 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 1962.348571] RAX: 0000000020753000 RBX: fffffffffffffffe RCX: 000000000000736d [ 1962.355855] RDX: 0000000000000006 RSI: 0000000000730690 RDI: 0000000020753000 [ 1962.363142] RBP: 0000000000930aa0 R08: 000000000000000e R09: 0000000000000001 [ 1962.370456] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1962.377743] R13: 00000000009300ac R14: 00000000001df019 R15: 00000000001defec [ 1962.506409] syz-executor1: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1962.516941] syz-executor1 cpuset=syz1 mems_allowed=0 [ 1962.522086] CPU: 1 PID: 31414 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #36 [ 1962.529386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1962.538754] Call Trace: [ 1962.541364] dump_stack+0x14b/0x190 [ 1962.545014] warn_alloc+0x472/0x690 [ 1962.548700] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1962.553770] ? kernel_poison_pages+0x1a0/0x360 [ 1962.558455] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1962.564218] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1962.569722] kmsan_alloc_page+0x75/0xd0 [ 1962.573712] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1962.578515] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.583410] ? __msan_poison_alloca+0x173/0x1f0 [ 1962.588122] ? should_fail+0x53/0xaa0 [ 1962.591940] ? __should_failslab+0x278/0x2a0 [ 1962.596378] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.601286] alloc_pages_vma+0x1578/0x1830 [ 1962.605577] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1962.610710] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.615592] handle_mm_fault+0x4377/0x81b0 [ 1962.619849] ? kmsan_set_origin_inline+0x6b/0x120 [ 1962.624740] __do_page_fault+0xc8b/0x17e0 [ 1962.628903] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1962.634314] do_page_fault+0x98/0xd0 [ 1962.638104] page_fault+0x1e/0x30 [ 1962.641585] RIP: 0010:__put_user_4+0x1c/0x30 18:01:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x8000000000001, 0x84) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) [ 1962.646016] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 fc 02 00 48 8b 9b d8 19 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 1962.664922] RSP: 0018:ffff880013dbfdb0 EFLAGS: 00010297 [ 1962.670290] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1962.677578] RDX: ffff8800b424fe14 RSI: aaaaaaaaaaaab000 RDI: ffffea00007727a0 [ 1962.684865] RBP: ffff880013dbfe78 R08: ffffffff7fffffff R09: 0000000000000002 [ 1962.692154] R10: 0000000000000000 R11: ffffffff86899350 R12: ffff880013dbfe14 [ 1962.699463] R13: 0000000020000000 R14: ffff8800b4524400 R15: 0000000000000000 [ 1962.706764] ? __sys_socketpair+0x1b00/0x1b00 [ 1962.711313] ? __sys_socketpair+0x22d/0x1b00 [ 1962.715777] __x64_sys_socketpair+0x117/0x170 [ 1962.720309] ? __sys_socketpair+0x1b00/0x1b00 [ 1962.724830] do_syscall_64+0x15b/0x220 [ 1962.728748] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1962.733947] RIP: 0033:0x457089 [ 1962.737164] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:54 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80001, 0x0) [ 1962.756084] RSP: 002b:00007fc967e30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1962.763815] RAX: ffffffffffffffda RBX: 00007fc967e316d4 RCX: 0000000000457089 [ 1962.771098] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1962.778380] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1962.785659] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1962.792947] R13: 00000000004d6378 R14: 00000000004c9aab R15: 0000000000000000 [ 1962.800246] warn_alloc_show_mem: 2 callbacks suppressed [ 1962.800252] Mem-Info: 18:01:54 executing program 7: unshare(0x20400) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 1962.808081] active_anon:34481 inactive_anon:115 isolated_anon:0 [ 1962.808081] active_file:7008 inactive_file:6489 isolated_file:0 [ 1962.808081] unevictable:0 dirty:89 writeback:0 unstable:0 [ 1962.808081] slab_reclaimable:4263 slab_unreclaimable:15182 [ 1962.808081] mapped:71312 shmem:190 pagetables:948 bounce:0 [ 1962.808081] free:36816 free_pcp:1166 free_cma:0 [ 1962.841420] Node 0 active_anon:139968kB inactive_anon:460kB active_file:28032kB inactive_file:25956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285248kB dirty:356kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 116736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1962.869538] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1962.895696] lowmem_reserve[]: 0 2837 7263 7263 [ 1962.900331] Node 0 DMA32 free:70840kB min:26344kB low:32928kB high:39512kB active_anon:48840kB inactive_anon:160kB active_file:2360kB inactive_file:1312kB unevictable:0kB writepending:28kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4096kB pagetables:364kB bounce:0kB free_pcp:3000kB local_pcp:1664kB free_cma:0kB [ 1962.929696] lowmem_reserve[]: 0 0 4425 4425 [ 1962.934063] Node 0 Normal free:52676kB min:41088kB low:51360kB high:61632kB active_anon:91376kB inactive_anon:300kB active_file:25788kB inactive_file:24760kB unevictable:0kB writepending:328kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3428kB bounce:0kB free_pcp:900kB local_pcp:584kB free_cma:0kB [ 1962.963606] lowmem_reserve[]: 0 0 0 0 [ 1962.966840] syz-executor4: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1962.967463] Node 0 [ 1962.977941] syz-executor4 cpuset= [ 1962.977947] DMA: 0*4kB [ 1962.980190] syz4 [ 1962.983642] 0*8kB [ 1962.986222] mems_allowed=0 [ 1962.988207] 0*16kB [ 1962.990359] CPU: 0 PID: 31425 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #36 [ 1962.993279] 1*32kB [ 1962.995514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1963.002799] (U) [ 1963.005031] Call Trace: [ 1963.014379] 2*64kB [ 1963.016384] dump_stack+0x14b/0x190 [ 1963.018939] (U) [ 1963.021183] warn_alloc+0x472/0x690 [ 1963.021240] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1963.024838] 1*128kB [ 1963.026826] ? kernel_poison_pages+0x1a0/0x360 [ 1963.030463] (U) [ 1963.035389] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1963.037636] 1*256kB [ 1963.042235] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1963.044175] (U) [ 1963.049937] kmsan_alloc_page+0x75/0xd0 [ 1963.052213] 0*512kB [ 1963.057669] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1963.059625] 1*1024kB [ 1963.063605] ? kmsan_set_origin_inline+0x6b/0x120 [ 1963.065923] (U) [ 1963.070678] ? __msan_poison_alloca+0x173/0x1f0 [ 1963.073071] 1*2048kB [ 1963.077917] ? should_fail+0x53/0xaa0 [ 1963.079869] (M) [ 1963.084549] ? __should_failslab+0x278/0x2a0 [ 1963.086941] 3*4096kB [ 1963.090748] ? kmsan_set_origin_inline+0x6b/0x120 [ 1963.092704] (M) [ 1963.097152] alloc_pages_vma+0x1578/0x1830 [ 1963.099503] = 15904kB [ 1963.104364] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1963.106315] Node 0 [ 1963.110558] ? kmsan_set_origin_inline+0x6b/0x120 [ 1963.112943] DMA32: [ 1963.118066] handle_mm_fault+0x4377/0x81b0 [ 1963.120272] 566*4kB [ 1963.125120] ? kmsan_set_origin_inline+0x6b/0x120 [ 1963.127344] (UM) [ 1963.131608] __do_page_fault+0xc8b/0x17e0 [ 1963.133874] 114*8kB [ 1963.138734] do_page_fault+0x98/0xd0 [ 1963.140758] (UM) [ 1963.144933] ? page_fault+0x8/0x30 [ 1963.147281] 95*16kB [ 1963.151002] page_fault+0x1e/0x30 [ 1963.153040] (UME) [ 1963.156579] RIP: 0033:0x40052d [ 1963.158886] 101*32kB [ 1963.162379] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1963.164522] (UM) [ 1963.167708] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1963.170112] 77*64kB [ 1963.191047] (UM) [ 1963.196403] RAX: 0000000020940000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1963.198712] 56*128kB [ 1963.200766] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000019ae848 [ 1963.208057] (UME) [ 1963.210463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1963.217723] 40*256kB [ 1963.219868] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1963.227119] (UME) [ 1963.229525] R13: 00000000001debb3 R14: 0000000000000bdf R15: badc0ffeebadface [ 1963.236779] 28*512kB (UM) 24*1024kB (UM) 0*2048kB 0*4096kB = 69176kB 18:01:55 executing program 6: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:01:55 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4003) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 18:01:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) [ 1963.252737] Node 0 Normal: 237*4kB (UMEH) 223*8kB (UME) 131*16kB (UME) 120*32kB (UM) 128*64kB (UM) 54*128kB (UM) 27*256kB (UME) 35*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 52700kB [ 1963.269479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1963.278051] 13657 total pagecache pages [ 1963.282024] 0 pages in swap cache [ 1963.285479] Swap cache stats: add 0, delete 0, find 0/0 [ 1963.290842] Free swap = 0kB [ 1963.293862] Total swap = 0kB [ 1963.296904] 1965969 pages RAM [ 1963.300037] 0 pages HighMem/MovableOnly [ 1963.304010] 101394 pages reserved 18:01:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000fffc0c00000000000000000000005b659a62250ffc380c2dbfdc5e9f13e1a04810d464fbc3b4c1b4e2bf501fb1bb949869c2984d914d9f04005e66cd4dd3050bc1700612dbc3080c91745fa158c20d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4c68ce4e8b6e6020"], 0x83}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) 18:01:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 18:01:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x8000000000001, 0x84) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000140)=""/244, &(0x7f0000000040)=0xf4) 18:01:55 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, 0x0, r1, r2) 18:01:55 executing program 6: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x20000007f7, 0x5}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/4096}, 0x18) 18:01:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f000000dff8)=@file={0x1}, 0x2) listen(r1, 0x0) poll(&(0x7f00000003c0)=[{r1, 0x4200}], 0x1, 0x10) 18:01:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000100)=0x10000000, 0x4) 18:01:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x200, 0x0, 0x0, 0x7}, 0x20) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 18:01:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 18:01:56 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12d) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x44}, 0xfffffffffffffe0c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 18:01:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000180)=0x100) 18:01:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f000000dff8)=@file={0x1}, 0x2) listen(r1, 0x0) poll(&(0x7f00000003c0)=[{r1, 0x4200}], 0x1, 0x10) 18:01:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/18, 0x12, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 18:01:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 18:01:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:01:56 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$cont(0x1f, r1, 0x0, 0xffffffff) [ 1964.617687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 1964.619172] syz-executor1: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1964.636765] syz-executor1 cpuset=syz1 mems_allowed=0 [ 1964.641903] CPU: 0 PID: 31499 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #36 [ 1964.649176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.658531] Call Trace: [ 1964.661155] dump_stack+0x14b/0x190 [ 1964.664820] warn_alloc+0x472/0x690 [ 1964.668514] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1964.673387] ? kernel_poison_pages+0x1a0/0x360 [ 1964.678111] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1964.683862] ? kmsan_set_origin_inline+0x6b/0x120 [ 1964.688779] kmsan_alloc_page+0x75/0xd0 [ 1964.692780] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1964.697565] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1964.702946] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1964.708326] ? memcg_check_events+0x74/0xf20 [ 1964.712783] ? kmsan_set_origin_inline+0x6b/0x120 [ 1964.717637] ? __msan_poison_alloca+0x173/0x1f0 [ 1964.722364] alloc_pages_vma+0x1578/0x1830 [ 1964.726630] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1964.731761] ? kmsan_set_origin_inline+0x6b/0x120 [ 1964.736678] handle_mm_fault+0x4377/0x81b0 [ 1964.740930] ? kmsan_set_origin_inline+0x6b/0x120 [ 1964.745827] __do_page_fault+0xc8b/0x17e0 [ 1964.750022] do_page_fault+0x98/0xd0 [ 1964.753749] ? page_fault+0x8/0x30 [ 1964.757313] page_fault+0x1e/0x30 [ 1964.760774] RIP: 0033:0x40052d [ 1964.763994] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1964.782914] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1964.788303] RAX: 0000000020d8cffc RBX: fffffffffffffffe RCX: 0000000000000000 [ 1964.795589] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000001b3f848 [ 1964.802873] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.810156] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1964.817446] R13: 000000000093014c R14: 00000000001dfa6a R15: 00000000001dfa3d [ 1964.824746] warn_alloc_show_mem: 1 callbacks suppressed [ 1964.824751] Mem-Info: [ 1964.832561] active_anon:33519 inactive_anon:112 isolated_anon:0 [ 1964.832561] active_file:6603 inactive_file:6087 isolated_file:1 [ 1964.832561] unevictable:0 dirty:98 writeback:0 unstable:0 [ 1964.832561] slab_reclaimable:4263 slab_unreclaimable:15166 [ 1964.832561] mapped:71383 shmem:190 pagetables:835 bounce:0 [ 1964.832561] free:36618 free_pcp:630 free_cma:0 [ 1964.865777] Node 0 active_anon:131928kB inactive_anon:448kB active_file:26412kB inactive_file:24348kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:285416kB dirty:392kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1964.893889] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1964.920075] lowmem_reserve[]: 0 2837 7263 7263 [ 1964.924692] Node 0 DMA32 free:95088kB min:26344kB low:32928kB high:39512kB active_anon:40924kB inactive_anon:160kB active_file:2360kB inactive_file:1312kB unevictable:0kB writepending:28kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3776kB pagetables:580kB bounce:0kB free_pcp:1784kB local_pcp:408kB free_cma:0kB [ 1964.953891] lowmem_reserve[]: 0 0 4425 4425 18:01:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/18, 0x12, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 18:01:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x40000000000009c, 0x8011) 18:01:56 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12d) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x44}, 0xfffffffffffffe0c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 18:01:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 1964.958293] Node 0 Normal free:53852kB min:41088kB low:51360kB high:61632kB active_anon:91072kB inactive_anon:288kB active_file:24048kB inactive_file:23032kB unevictable:0kB writepending:364kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9792kB pagetables:2760kB bounce:0kB free_pcp:2208kB local_pcp:1224kB free_cma:0kB [ 1964.988013] lowmem_reserve[]: 0 0 0 0 [ 1964.991858] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB 18:01:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f000000dff8)=@file={0x1}, 0x2) listen(r1, 0x0) poll(&(0x7f00000003c0)=[{r1, 0x4200}], 0x1, 0x10) [ 1965.005219] Node 0 DMA32: 496*4kB (UM) 130*8kB (UM) 86*16kB (UME) 95*32kB (UM) 87*64kB (UM) 48*128kB (UME) 39*256kB (UME) 28*512kB (UM) 25*1024kB (UM) 7*2048kB (UM) 3*4096kB (U) = 95696kB [ 1965.022243] Node 0 Normal: 403*4kB (UMEH) 266*8kB (UME) 144*16kB (UME) 99*32kB (UM) 116*64kB (UM) 60*128kB (UM) 27*256kB (UME) 35*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 53244kB [ 1965.038855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1965.047442] 12894 total pagecache pages [ 1965.051430] 0 pages in swap cache [ 1965.054899] Swap cache stats: add 0, delete 0, find 0/0 [ 1965.060270] Free swap = 0kB [ 1965.063315] Total swap = 0kB [ 1965.066341] 1965969 pages RAM [ 1965.069455] 0 pages HighMem/MovableOnly [ 1965.073434] 101394 pages reserved [ 1965.162847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 18:01:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002ac0), &(0x7f0000002b00)=0x8) 18:01:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 18:01:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f000000dff8)=@file={0x1}, 0x2) listen(r1, 0x0) poll(&(0x7f00000003c0)=[{r1, 0x4200}], 0x1, 0x10) 18:01:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:01:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/18, 0x12, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) [ 1965.545184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 18:01:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000180)=0x100) 18:01:57 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045406, &(0x7f0000b18000)) 18:01:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002ac0), &(0x7f0000002b00)=0x8) 18:01:57 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12d) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x44}, 0xfffffffffffffe0c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 18:01:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 18:01:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80), 0x0, 0xfffffffffffffffc, &(0x7f0000002b00)) 18:01:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:01:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, &(0x7f0000000180)=""/18, 0x12, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) [ 1966.051170] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 18:01:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x1, 0x7, 0x5}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000000), &(0x7f00000003c0)=""/137}, 0x18) 18:01:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 18:01:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002ac0), &(0x7f0000002b00)=0x8) 18:01:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x6, &(0x7f0000000ff0)={0x0, 0x2}, 0x10) 18:01:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r0, 0x4, 0x4800) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000300)=@un=@file={0x1, './bus\x00'}, 0x80}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x1ffffffe0) [ 1966.419610] syz-executor7: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1966.430192] syz-executor7 cpuset=syz7 mems_allowed=0 [ 1966.435350] CPU: 0 PID: 31594 Comm: syz-executor7 Not tainted 4.19.0-rc1+ #36 [ 1966.442645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.452018] Call Trace: [ 1966.454646] dump_stack+0x14b/0x190 [ 1966.458309] warn_alloc+0x472/0x690 [ 1966.461984] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1966.466921] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1966.472677] ? kmsan_set_origin_inline+0x6b/0x120 [ 1966.477556] ? kmsan_set_origin_inline+0x6b/0x120 [ 1966.482452] kmsan_alloc_page+0x75/0xd0 [ 1966.486459] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1966.491265] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1966.496666] ? find_next_bit+0x25b/0x2a0 [ 1966.500755] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1966.506142] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1966.511537] ? memcg_check_events+0x74/0xf20 [ 1966.515967] ? kmsan_set_origin_inline+0x6b/0x120 [ 1966.520857] ? __msan_poison_alloca+0x173/0x1f0 [ 1966.525571] alloc_pages_vma+0x1578/0x1830 [ 1966.529853] do_huge_pmd_wp_page+0x3249/0x5260 [ 1966.534509] handle_mm_fault+0x23b7/0x81b0 [ 1966.538769] ? kmsan_set_origin_inline+0x6b/0x120 [ 1966.543689] __do_page_fault+0xc8b/0x17e0 [ 1966.547882] do_page_fault+0x98/0xd0 [ 1966.551615] ? page_fault+0x8/0x30 [ 1966.555176] page_fault+0x1e/0x30 [ 1966.558635] RIP: 0033:0x43e461 18:01:58 executing program 1: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "e93b18e3c4b67fa415aac8a69bd1c42e00b0770739693d5db43a3431703c27644c6b1250e40259d751ca8c248b57196450b64b77f5abc1cba4a86be51ebb84c1", "08c9381f95bd474a911eff5ab793e7e8b67a346c345b9b8186d525e799a334f1", [0x101]}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x840) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 1966.561837] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1966.580745] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1966.586141] RAX: 0000000020000080 RBX: fffffffffffffffe RCX: 000000000000000a [ 1966.593436] RDX: 000000000000000b RSI: 0000000000730080 RDI: 0000000020000080 [ 1966.600717] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000001 [ 1966.608001] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1966.615279] R13: 00000000009300ac R14: 00000000001e0189 R15: 00000000001e015c [ 1966.622580] Mem-Info: [ 1966.625038] active_anon:33977 inactive_anon:114 isolated_anon:0 [ 1966.625038] active_file:6509 inactive_file:5987 isolated_file:0 [ 1966.625038] unevictable:0 dirty:113 writeback:0 unstable:0 [ 1966.625038] slab_reclaimable:4263 slab_unreclaimable:15168 [ 1966.625038] mapped:71323 shmem:190 pagetables:984 bounce:0 [ 1966.625038] free:38793 free_pcp:766 free_cma:0 18:01:58 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) mlockall(0x2) 18:01:58 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12d) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x44}, 0xfffffffffffffe0c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) [ 1966.658346] Node 0 active_anon:135908kB inactive_anon:456kB active_file:25920kB inactive_file:23948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285408kB dirty:452kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1966.686467] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1966.712657] lowmem_reserve[]: 0 2837 7263 7263 [ 1966.717297] Node 0 DMA32 free:86568kB min:26344kB low:32928kB high:39512kB active_anon:44980kB inactive_anon:148kB active_file:2368kB inactive_file:1316kB unevictable:0kB writepending:32kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4032kB pagetables:664kB bounce:0kB free_pcp:1972kB local_pcp:480kB free_cma:0kB [ 1966.746500] lowmem_reserve[]: 0 0 4425 4425 [ 1966.750902] Node 0 Normal free:52700kB min:41088kB low:51360kB high:61632kB active_anon:90956kB inactive_anon:300kB active_file:23616kB inactive_file:22368kB unevictable:0kB writepending:420kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3296kB bounce:0kB free_pcp:1016kB local_pcp:452kB free_cma:0kB [ 1966.780527] lowmem_reserve[]: 0 0 0 0 [ 1966.784375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1966.797749] Node 0 DMA32: 429*4kB (UM) 140*8kB (UM) 115*16kB (UME) 114*32kB (UM) 77*64kB (UM) 62*128kB (UME) 47*256kB (UME) 25*512kB (UM) 21*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 73668kB [ 1966.814848] Node 0 Normal: 167*4kB (UMEH) 153*8kB (ME) 119*16kB (UME) 101*32kB (UM) 108*64kB (UM) 65*128kB (UM) 27*256kB (UME) 35*512kB (UME) 4*1024kB (M) 0*2048kB 0*4096kB = 51188kB [ 1966.831509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1966.840083] 12649 total pagecache pages [ 1966.844058] 0 pages in swap cache [ 1966.847517] Swap cache stats: add 0, delete 0, find 0/0 [ 1966.852900] Free swap = 0kB [ 1966.855931] Total swap = 0kB [ 1966.858956] 1965969 pages RAM [ 1966.862054] 0 pages HighMem/MovableOnly [ 1966.866023] 101394 pages reserved 18:01:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000180)=0x100) 18:01:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/249, 0x4a}, {&(0x7f0000000200)=""/148, 0x94}], 0x2, 0x0) 18:01:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002ac0), &(0x7f0000002b00)=0x8) 18:01:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 18:01:59 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x10000000000015, 0x0, 0x0, 0x2a8}, {0x6}]}, 0x10) 18:01:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000540)) 18:01:59 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) mlockall(0x2) 18:01:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000003400)='+selfsystem-system\x00', 0x0) unshare(0x20400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic) 18:01:59 executing program 5: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000140)='./file0\x00', 0x20001840, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27b, 0x0) 18:01:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 1967.491032] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1967.501594] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1967.506744] CPU: 1 PID: 31644 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1967.514065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.523529] Call Trace: [ 1967.526141] dump_stack+0x14b/0x190 [ 1967.529802] warn_alloc+0x472/0x690 [ 1967.533506] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1967.538383] ? kernel_poison_pages+0x1a0/0x360 [ 1967.543052] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1967.548853] ? kmem_cache_free+0x85f/0x2b60 [ 1967.553256] kmsan_alloc_page+0x75/0xd0 [ 1967.557303] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1967.562112] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1967.567494] ? radix_tree_lookup+0x3cb/0x400 [ 1967.571941] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1967.577331] ? balance_dirty_pages_ratelimited+0x942/0x4720 [ 1967.583098] ? __set_page_dirty_buffers+0x3d3/0x640 [ 1967.588161] ? wait_for_stable_page+0x1fc/0x350 [ 1967.592876] alloc_pages_vma+0x1578/0x1830 [ 1967.597159] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1967.602303] ? kmsan_set_origin_inline+0x6b/0x120 [ 1967.607202] handle_mm_fault+0x4377/0x81b0 [ 1967.611476] ? kmsan_set_origin_inline+0x6b/0x120 [ 1967.616379] __do_page_fault+0xc8b/0x17e0 [ 1967.620573] do_page_fault+0x98/0xd0 [ 1967.624311] ? page_fault+0x8/0x30 [ 1967.627878] page_fault+0x1e/0x30 [ 1967.631353] RIP: 0033:0x4004d1 [ 1967.634558] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1967.653485] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1967.658887] RAX: 000000002047b000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1967.666164] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000002953848 [ 1967.673444] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.680723] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 18:01:59 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x10000000000015, 0x0, 0x0, 0x2a8}, {0x6}]}, 0x10) 18:01:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r0, 0x4, 0x4800) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000300)=@un=@file={0x1, './bus\x00'}, 0x80}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x1ffffffe0) [ 1967.687996] R13: 00000000009300ac R14: 00000000001e05b5 R15: 00000000001e0588 [ 1967.750849] syz-executor1: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1967.761353] syz-executor1 cpuset=syz1 mems_allowed=0 [ 1967.766498] CPU: 1 PID: 31652 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #36 [ 1967.773809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.783168] Call Trace: [ 1967.785787] dump_stack+0x14b/0x190 [ 1967.789449] warn_alloc+0x472/0x690 [ 1967.793142] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1967.798012] ? kernel_poison_pages+0x1a0/0x360 [ 1967.802696] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1967.808447] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1967.813964] kmsan_alloc_page+0x75/0xd0 [ 1967.817965] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1967.822766] ? kmsan_set_origin_inline+0x6b/0x120 [ 1967.827650] ? __msan_poison_alloca+0x173/0x1f0 [ 1967.832359] ? should_fail+0x53/0xaa0 [ 1967.836176] ? __should_failslab+0x278/0x2a0 [ 1967.840612] ? kmsan_set_origin_inline+0x6b/0x120 [ 1967.845513] alloc_pages_vma+0x1578/0x1830 [ 1967.849793] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1967.854925] ? kmsan_set_origin_inline+0x6b/0x120 [ 1967.859818] handle_mm_fault+0x4377/0x81b0 [ 1967.864075] ? kmsan_set_origin_inline+0x6b/0x120 [ 1967.868975] __do_page_fault+0xc8b/0x17e0 [ 1967.873169] do_page_fault+0x98/0xd0 [ 1967.876907] ? page_fault+0x8/0x30 [ 1967.880469] page_fault+0x1e/0x30 [ 1967.884231] RIP: 0033:0x4004d1 [ 1967.887440] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1967.906352] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1967.911722] RAX: 0000000020004ff0 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1967.919004] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000001b3f848 [ 1967.926290] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.933587] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1967.940872] R13: 00000000009300ac R14: 00000000001e06be R15: 00000000001e0691 [ 1967.948173] warn_alloc_show_mem: 1 callbacks suppressed [ 1967.948179] Mem-Info: [ 1967.956023] active_anon:35097 inactive_anon:440 isolated_anon:0 [ 1967.956023] active_file:6677 inactive_file:5777 isolated_file:0 [ 1967.956023] unevictable:0 dirty:122 writeback:0 unstable:0 [ 1967.956023] slab_reclaimable:4263 slab_unreclaimable:15160 [ 1967.956023] mapped:72039 shmem:516 pagetables:937 bounce:0 [ 1967.956023] free:30311 free_pcp:606 free_cma:0 [ 1967.989934] Node 0 active_anon:142360kB inactive_anon:2224kB active_file:26708kB inactive_file:23108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:288968kB dirty:488kB writeback:0kB shmem:2528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 118784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1968.018222] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.044417] lowmem_reserve[]: 0 2837 7263 7263 [ 1968.049050] Node 0 DMA32 free:50908kB min:26344kB low:32928kB high:39512kB active_anon:51172kB inactive_anon:1940kB active_file:2496kB inactive_file:1336kB unevictable:0kB writepending:56kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4160kB pagetables:588kB bounce:0kB free_pcp:948kB local_pcp:436kB free_cma:0kB [ 1968.078253] lowmem_reserve[]: 0 0 4425 4425 [ 1968.082624] Node 0 Normal free:50936kB min:41088kB low:51360kB high:61632kB active_anon:90884kB inactive_anon:288kB active_file:24212kB inactive_file:21772kB unevictable:0kB writepending:432kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3160kB bounce:0kB free_pcp:1492kB local_pcp:304kB free_cma:0kB [ 1968.112258] lowmem_reserve[]: 0 0 0 0 [ 1968.116107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1968.129461] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 2*16kB (UE) 1*32kB (U) 30*64kB (UM) 37*128kB (UME) 41*256kB (UME) 23*512kB (M) 21*1024kB (UM) 3*2048kB (UMH) 0*4096kB = 56660kB 18:01:59 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) mlockall(0x2) 18:01:59 executing program 7: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 18:02:00 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4000000000000001, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff8ffffff69a4f0ff00000000b7060000220000002d6405000000000065040300010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x48) 18:02:00 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00), 0x0, 0x0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440), &(0x7f00000006c0)="01a20228947c39e9df9703014800f5e552d1a8fa86486489aceb331f7647cf9e1f0229c800f60cc6724fd50b0ceca62413f842d79331e64703e946e4e676278c68c0fb160e29766e889d4cb413c488a453fb2486ecc5ee94335a2dbe0abf04a09e64cb9e9a74dea17bac7c5153cb0ca215df61a89dfe78991957f1f7518cbb6b85fc34c72c6cb39589cf0fec0000000000000000000000000000000000000000000000000000000000000000ddd957f3ecbf1c5617a97aa2a3", 0xb9, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000580), 0x1b8, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'crc32-generic\x00'}}) [ 1968.145370] Node 0 Normal: 51*4kB (UMEH) 154*8kB (UME) 118*16kB (UME) 100*32kB (UM) 101*64kB (UM) 67*128kB (UM) 27*256kB (UME) 35*512kB (UMEH) 4*1024kB (M) 0*2048kB 0*4096kB = 50492kB [ 1968.162067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1968.170660] 12972 total pagecache pages [ 1968.174643] 0 pages in swap cache [ 1968.178099] Swap cache stats: add 0, delete 0, find 0/0 [ 1968.183481] Free swap = 0kB [ 1968.186505] Total swap = 0kB [ 1968.189530] 1965969 pages RAM [ 1968.192643] 0 pages HighMem/MovableOnly [ 1968.196624] 101394 pages reserved 18:02:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000180)=0x100) 18:02:00 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) unshare(0x20400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f00000001c0)) 18:02:00 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) mlockall(0x2) 18:02:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 18:02:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x10000000000015, 0x0, 0x0, 0x2a8}, {0x6}]}, 0x10) 18:02:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6}, 0x90) [ 1968.577744] syz-executor4: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1968.588267] syz-executor4 cpuset=syz4 mems_allowed=0 [ 1968.593433] CPU: 0 PID: 31675 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #36 [ 1968.600737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.610099] Call Trace: [ 1968.612707] dump_stack+0x14b/0x190 [ 1968.616365] warn_alloc+0x472/0x690 [ 1968.620055] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1968.624949] ? kernel_poison_pages+0x1a0/0x360 [ 1968.629627] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1968.635441] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1968.640914] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1968.646423] kmsan_alloc_page+0x75/0xd0 [ 1968.650421] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1968.655212] ? hrtimer_cancel+0x52/0x110 [ 1968.659329] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1968.664704] ? hrtimer_try_to_cancel+0x31b/0xb90 [ 1968.669480] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1968.674853] ? vmalloc_to_page+0x57d/0x6b0 [ 1968.679127] ? hrtimer_cancel+0x72/0x110 [ 1968.683228] ? futex_wait+0xa65/0xbe0 [ 1968.687089] alloc_pages_vma+0x1578/0x1830 [ 1968.691371] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1968.696504] ? kmsan_set_origin_inline+0x6b/0x120 [ 1968.701380] handle_mm_fault+0x4377/0x81b0 [ 1968.705629] ? kmsan_set_origin_inline+0x6b/0x120 [ 1968.710530] __do_page_fault+0xc8b/0x17e0 [ 1968.714715] do_page_fault+0x98/0xd0 [ 1968.718451] ? page_fault+0x8/0x30 [ 1968.722017] page_fault+0x1e/0x30 [ 1968.725482] RIP: 0033:0x43e461 [ 1968.728698] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1968.747608] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1968.752987] RAX: 000000002026cfff RBX: fffffffffffffffe RCX: 00000000000000c6 [ 1968.760274] RDX: 0000000000000001 RSI: 0000000000730398 RDI: 000000002026cfff [ 1968.767564] RBP: 0000000000930aa0 R08: ffffffffffffffff R09: ffffffffffffffff 18:02:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 1968.774862] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1968.782140] R13: 00000000009300ac R14: 00000000001e09cc R15: 00000000001e099f [ 1968.789439] Mem-Info: [ 1968.791906] active_anon:34516 inactive_anon:920 isolated_anon:0 [ 1968.791906] active_file:6395 inactive_file:5552 isolated_file:5 [ 1968.791906] unevictable:0 dirty:127 writeback:0 unstable:0 [ 1968.791906] slab_reclaimable:4263 slab_unreclaimable:15162 [ 1968.791906] mapped:72209 shmem:999 pagetables:970 bounce:0 [ 1968.791906] free:35814 free_pcp:772 free_cma:0 [ 1968.825213] Node 0 active_anon:138064kB inactive_anon:3680kB active_file:25340kB inactive_file:22080kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:284892kB dirty:508kB writeback:0kB shmem:3996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 116736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1968.853603] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1968.879771] lowmem_reserve[]: 0 2837 7263 7263 [ 1968.884887] Node 0 DMA32 free:75660kB min:26344kB low:32928kB high:39512kB active_anon:47260kB inactive_anon:2672kB active_file:2496kB inactive_file:336kB unevictable:0kB writepending:76kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4032kB pagetables:820kB bounce:0kB free_pcp:1680kB local_pcp:308kB free_cma:0kB [ 1968.914104] lowmem_reserve[]: 0 0 4425 4425 18:02:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000401ff07008fbda33d88c000001018fd"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) [ 1968.918470] Node 0 Normal free:51692kB min:41088kB low:51360kB high:61632kB active_anon:90864kB inactive_anon:712kB active_file:22812kB inactive_file:21588kB unevictable:0kB writepending:432kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3060kB bounce:0kB free_pcp:2128kB local_pcp:940kB free_cma:0kB [ 1968.948106] lowmem_reserve[]: 0 0 0 0 [ 1968.951944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1968.965308] Node 0 DMA32: 1110*4kB (UM) 298*8kB (UM) 121*16kB (UME) 89*32kB (UM) 78*64kB (UM) 54*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 2*2048kB (M) 2*4096kB (U) = 79832kB [ 1968.982348] Node 0 Normal: 339*4kB (UMEH) 229*8kB (UMEH) 132*16kB (UME) 101*32kB (UM) 110*64kB (UMH) 68*128kB (UM) 27*256kB (UME) 35*512kB (UMEH) 4*1024kB (M) 0*2048kB 0*4096kB = 53204kB [ 1968.999284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1969.007878] 12345 total pagecache pages [ 1969.011858] 0 pages in swap cache [ 1969.015330] Swap cache stats: add 0, delete 0, find 0/0 [ 1969.020702] Free swap = 0kB [ 1969.023764] Total swap = 0kB 18:02:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x2a, 0x4, 0x100000001, 0x0, r0}, 0x1f0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f0000000380), &(0x7f0000000180)=""/34}, 0x18) [ 1969.026782] 1965969 pages RAM [ 1969.029886] 0 pages HighMem/MovableOnly [ 1969.033851] 101394 pages reserved [ 1969.065087] syz-executor2: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1969.075625] syz-executor2 cpuset=syz2 mems_allowed=0 [ 1969.080778] CPU: 0 PID: 31687 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #36 [ 1969.088059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.097425] Call Trace: [ 1969.100050] dump_stack+0x14b/0x190 [ 1969.103703] warn_alloc+0x472/0x690 [ 1969.107411] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1969.112309] ? kernel_poison_pages+0x1a0/0x360 [ 1969.116980] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1969.122727] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1969.128242] kmsan_alloc_page+0x75/0xd0 [ 1969.132254] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1969.137053] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.141915] ? __msan_poison_alloca+0x173/0x1f0 [ 1969.146608] ? should_fail+0x53/0xaa0 [ 1969.150422] ? __should_failslab+0x278/0x2a0 [ 1969.154877] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.159773] alloc_pages_vma+0x1578/0x1830 [ 1969.164041] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1969.169166] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.174064] handle_mm_fault+0x4377/0x81b0 [ 1969.178318] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.183208] __do_page_fault+0xc8b/0x17e0 [ 1969.187427] do_page_fault+0x98/0xd0 [ 1969.191176] ? page_fault+0x8/0x30 [ 1969.194739] page_fault+0x1e/0x30 [ 1969.198199] RIP: 0033:0x400581 [ 1969.201417] Code: 08 f7 d2 23 11 8a 4c 24 10 d3 e0 09 d0 89 06 e9 ab 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 12 48 8b 44 24 08 48 8b 54 24 20 <48> 89 10 e9 8d 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 7c 24 08 [ 1969.220337] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1969.225726] RAX: 0000000020000080 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1969.233014] RDX: 0000000020de2ff4 RSI: 0000000000000000 RDI: 0000000001ba0848 [ 1969.240316] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.247602] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1969.254887] R13: 00000000009300ac R14: 00000000001e0bda R15: 00000000001e0bad 18:02:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic) [ 1969.280185] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1969.290708] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1969.295852] CPU: 0 PID: 31698 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1969.303133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.312499] Call Trace: [ 1969.315109] dump_stack+0x14b/0x190 [ 1969.318757] warn_alloc+0x472/0x690 [ 1969.322437] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1969.327317] ? kernel_poison_pages+0x1a0/0x360 [ 1969.331993] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1969.337729] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.342656] kmsan_alloc_page+0x75/0xd0 [ 1969.346661] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1969.351440] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1969.356831] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1969.362207] ? memcg_check_events+0x74/0xf20 [ 1969.366676] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.371540] ? __msan_poison_alloca+0x173/0x1f0 [ 1969.376290] alloc_pages_vma+0x1578/0x1830 [ 1969.380566] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1969.385696] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.390609] handle_mm_fault+0x4377/0x81b0 [ 1969.394862] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.399751] __do_page_fault+0xc8b/0x17e0 [ 1969.403936] do_page_fault+0x98/0xd0 [ 1969.407664] ? page_fault+0x8/0x30 [ 1969.411235] page_fault+0x1e/0x30 [ 1969.414701] RIP: 0033:0x40052d 18:02:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r0, 0x4, 0x4800) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000300)=@un=@file={0x1, './bus\x00'}, 0x80}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x1ffffffe0) [ 1969.417911] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1969.436823] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1969.442204] RAX: 00000000204f9fe4 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1969.449492] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000001c60848 [ 1969.456802] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.464077] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1969.471354] R13: 00000000009300ac R14: 00000000001e0cb7 R15: 00000000001e0c8a [ 1969.484542] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1969.495036] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1969.500164] CPU: 0 PID: 31700 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1969.507440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.516800] Call Trace: [ 1969.519428] dump_stack+0x14b/0x190 [ 1969.523076] warn_alloc+0x472/0x690 [ 1969.526799] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1969.531684] ? apic_timer_interrupt+0xa/0x20 [ 1969.536242] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1969.542005] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1969.547516] kmsan_alloc_page+0x75/0xd0 [ 1969.551514] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1969.556301] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.561161] ? __msan_poison_alloca+0x173/0x1f0 [ 1969.565857] ? should_fail+0x53/0xaa0 [ 1969.569675] ? __should_failslab+0x278/0x2a0 [ 1969.574120] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.579025] alloc_pages_vma+0x1578/0x1830 18:02:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x0, &(0x7f0000001540)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000900)={&(0x7f0000000040)={0x14, 0x1e, 0x201}, 0x14}}, 0x0) [ 1969.583340] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1969.588486] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.593384] handle_mm_fault+0x4377/0x81b0 [ 1969.597670] ? kmsan_set_origin_inline+0x6b/0x120 [ 1969.602620] __do_page_fault+0xc8b/0x17e0 [ 1969.606827] do_page_fault+0x98/0xd0 [ 1969.610818] ? page_fault+0x8/0x30 [ 1969.614372] page_fault+0x1e/0x30 [ 1969.617843] RIP: 0033:0x40052d [ 1969.621071] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1969.639991] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1969.645382] RAX: 0000000020000140 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1969.652667] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000002953848 [ 1969.659955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1969.667242] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 1969.674531] R13: 00000000001e0b01 R14: 0000000000000be0 R15: badc0ffeebadface 18:02:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x10000000000015, 0x0, 0x0, 0x2a8}, {0x6}]}, 0x10) 18:02:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000401ff07008fbda33d88c000001018fd"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 18:02:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0xc01}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/98, 0x62}], 0x2, &(0x7f0000000200)=""/30, 0x291}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 18:02:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:02:02 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="8d", 0x1) 18:02:02 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00), 0x0, 0x0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440), &(0x7f00000006c0)="01a20228947c39e9df9703014800f5e552d1a8fa86486489aceb331f7647cf9e1f0229c800f60cc6724fd50b0ceca62413f842d79331e64703e946e4e676278c68c0fb160e29766e889d4cb413c488a453fb2486ecc5ee94335a2dbe0abf04a09e64cb9e9a74dea17bac7c5153cb0ca215df61a89dfe78991957f1f7518cbb6b85fc34c72c6cb39589cf0fec0000000000000000000000000000000000000000000000000000000000000000ddd957f3ecbf1c5617a97aa2a3", 0xb9, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000580), 0x1b8, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'crc32-generic\x00'}}) 18:02:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r0, 0x4, 0x4800) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000300)=@un=@file={0x1, './bus\x00'}, 0x80}, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x1ffffffe0) 18:02:02 executing program 1: syz_emit_ethernet(0x1a, &(0x7f00000000c0)={@local, @empty, [{[], {0x8100, 0x0, 0x5}}], {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, '(', "9dad2c"}}}}}}, &(0x7f0000000040)) 18:02:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000401ff07008fbda33d88c000001018fd"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) 18:02:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020607031dfffd946fa2830020200a0009000100061d85680c1baba204007f7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:02:02 executing program 0: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x7}) r0 = socket$inet(0x2, 0x802, 0x0) accept4(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x0) [ 1970.682542] netlink: 'syz-executor4': attribute type 1 has an invalid length. 18:02:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000401ff07008fbda33d88c000001018fd"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x2ca3bfc89d2264d, 0x2, &(0x7f0000000c40)={0x0, 0x989680}) [ 1970.728570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 1970.741581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:02:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) dup2(r1, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 18:02:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote}, 0x1c) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) 18:02:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000080)=""/147, 0x93}], 0x2, 0x0) 18:02:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") umount2(&(0x7f00000002c0)='\x00', 0x0) 18:02:03 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b51100000000000000004e2f9663a918fa1efd9b0b"}, 0x9d8}}, 0x0) dup3(r0, r1, 0x0) 18:02:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000001d40)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 18:02:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}, {}], 0x2, 0x0) 18:02:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x2) r2 = accept(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000e00)=@nat={'nat\x00', 0x19, 0x2, 0x188, [0x20000a80, 0x0, 0x0, 0x20000d58, 0x20000d88], 0x0, &(0x7f0000000280), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bridge_slave_0\x00', 'bpq0\x00', 'lo\x00', 'vcan0\x00', @remote, [], @dev={[], 0x16}, [], 0x70, 0xa8, 0xf8}, [@snat={'snat\x00', 0x10, {{@dev={[], 0x15}, 0xfffffffffffffffd}}}]}, @common=@log={'log\x00', 0x28, {{0x6, "d47377fcb351da9499a0e59d79f7a22741a1421de062354b9db7aa866cf1", 0xc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x200) 18:02:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) dup2(r1, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 18:02:04 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x7b9, &(0x7f0000000040)) 18:02:04 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00), 0x0, 0x0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440), &(0x7f00000006c0)="01a20228947c39e9df9703014800f5e552d1a8fa86486489aceb331f7647cf9e1f0229c800f60cc6724fd50b0ceca62413f842d79331e64703e946e4e676278c68c0fb160e29766e889d4cb413c488a453fb2486ecc5ee94335a2dbe0abf04a09e64cb9e9a74dea17bac7c5153cb0ca215df61a89dfe78991957f1f7518cbb6b85fc34c72c6cb39589cf0fec0000000000000000000000000000000000000000000000000000000000000000ddd957f3ecbf1c5617a97aa2a3", 0xb9, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000580), 0x1b8, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'crc32-generic\x00'}}) 18:02:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)="88", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='A', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x3}}}, 0x90) 18:02:04 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r1, 0x40007) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0xc) sendfile(r0, r1, &(0x7f000064d000), 0x40fffffffd) 18:02:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000001d40)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 18:02:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) dup2(r1, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 18:02:04 executing program 4: socket$inet6(0xa, 0x803, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)="666400cfcc65f0f102aa54fda86755417eac2ecd77d8f194f38b1c5964103c85b823df3b250417c09b837368f3bd266fa8a89cb0e5b965bd1cd4604a6fb1dff08880976d9b73547eea310b313969bccaaa4f9dfffed63c0f51311da6564072151a333e15fdf8020068bc03eed791581336c55f37b70baf84c93b80b60b2cb55ddb96078aca59c95304d4ddb2bc8e4699e5a7e67baaeb16de87c5ea5c26cceec19e3dcd81e47e") r1 = memfd_create(&(0x7f0000000140)="666400cfcc65f0f102aa54fda86755417eac2ecd77d8f194f38b1c5964103c85b823df3b250417c09b837368f3bd266fa8a89cb0e5b965bd1cd4604a6fb1dff08880976d9b73547eea310b313969bccaaa4f9dfffed63c0f51311da6564072151a333e15fdf8020068bc03eed791581336c55f37b70baf84c93b80b60b2cb55ddb96078aca59c95304d4ddb2bc8e4699e5a7e67baaeb16de87c5ea5c26cceec19e3dcd81e47e", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) [ 1972.095970] syz-executor6: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1972.106508] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1972.111646] CPU: 1 PID: 31796 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1972.118927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.128288] Call Trace: [ 1972.130893] dump_stack+0x14b/0x190 [ 1972.134531] warn_alloc+0x472/0x690 [ 1972.138199] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1972.143072] ? kernel_poison_pages+0x1a0/0x360 [ 1972.147732] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1972.153483] ? kmsan_set_origin_inline+0x6b/0x120 [ 1972.158359] ? __msan_poison_alloca+0x173/0x1f0 [ 1972.163081] kmsan_alloc_page+0x75/0xd0 [ 1972.167068] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1972.171838] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1972.177329] ? hrtimer_try_to_cancel+0x5c8/0xb90 [ 1972.182118] ? hrtimer_cancel+0x72/0x110 [ 1972.186232] ? futex_wait+0xa65/0xbe0 [ 1972.190099] alloc_pages_vma+0x1578/0x1830 18:02:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000001d40)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 18:02:04 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000003, 0x2) getsockopt$inet6_buf(r1, 0x29, 0xcd, &(0x7f0000000440)=""/242, &(0x7f00000002c0)=0xf2) [ 1972.194372] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1972.199494] ? kmsan_set_origin_inline+0x6b/0x120 [ 1972.204380] handle_mm_fault+0x4377/0x81b0 [ 1972.208636] ? kmsan_set_origin_inline+0x6b/0x120 [ 1972.213538] __do_page_fault+0xc8b/0x17e0 [ 1972.217734] do_page_fault+0x98/0xd0 [ 1972.221468] ? page_fault+0x8/0x30 [ 1972.225026] page_fault+0x1e/0x30 [ 1972.228492] RIP: 0033:0x43e461 [ 1972.231723] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1972.250643] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1972.256026] RAX: 0000000020000280 RBX: fffffffffffffffe RCX: 0000000000000088 [ 1972.263306] RDX: 0000000000000001 RSI: 0000000000730460 RDI: 0000000020000280 [ 1972.270587] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000001 [ 1972.277870] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1972.285150] R13: 00000000009300ac R14: 00000000001e17b7 R15: 00000000001e178a [ 1972.292455] warn_alloc_show_mem: 3 callbacks suppressed [ 1972.292460] Mem-Info: [ 1972.300277] active_anon:35072 inactive_anon:114 isolated_anon:0 [ 1972.300277] active_file:6260 inactive_file:5239 isolated_file:0 [ 1972.300277] unevictable:0 dirty:140 writeback:0 unstable:0 [ 1972.300277] slab_reclaimable:4263 slab_unreclaimable:15173 [ 1972.300277] mapped:71072 shmem:190 pagetables:1020 bounce:0 [ 1972.300277] free:35143 free_pcp:687 free_cma:0 18:02:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) close(r0) unshare(0x8000400) fstat(r0, &(0x7f0000002dc0)) [ 1972.333682] Node 0 active_anon:142472kB inactive_anon:456kB active_file:25040kB inactive_file:20956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:284288kB dirty:560kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1972.361803] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1972.387970] lowmem_reserve[]: 0 2837 7263 7263 [ 1972.392622] Node 0 DMA32 free:73548kB min:26344kB low:32928kB high:39512kB active_anon:49420kB inactive_anon:156kB active_file:2508kB inactive_file:208kB unevictable:0kB writepending:76kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4480kB pagetables:824kB bounce:0kB free_pcp:1004kB local_pcp:180kB free_cma:0kB [ 1972.421773] lowmem_reserve[]: 0 0 4425 4425 [ 1972.426130] Node 0 Normal free:51672kB min:41088kB low:51360kB high:61632kB active_anon:90920kB inactive_anon:300kB active_file:22532kB inactive_file:20748kB unevictable:0kB writepending:484kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3092kB bounce:0kB free_pcp:1568kB local_pcp:804kB free_cma:0kB [ 1972.455778] lowmem_reserve[]: 0 0 0 0 [ 1972.459639] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1972.473014] Node 0 DMA32: 349*4kB (UM) 186*8kB (UM) 192*16kB (UME) 123*32kB (UM) 86*64kB (UM) 59*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 66980kB 18:02:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000001d40)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) [ 1972.489326] Node 0 Normal: 223*4kB (UMEH) 239*8kB (UMEH) 138*16kB (UMEH) 107*32kB (UM) 92*64kB (UMH) 62*128kB (UM) 27*256kB (UME) 35*512kB (UMEH) 4*1024kB (M) 0*2048kB 0*4096kB = 51188kB [ 1972.506257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1972.514838] 11717 total pagecache pages [ 1972.518810] 0 pages in swap cache [ 1972.522271] Swap cache stats: add 0, delete 0, find 0/0 [ 1972.527746] Free swap = 0kB [ 1972.530776] Total swap = 0kB [ 1972.533807] 1965969 pages RAM [ 1972.536913] 0 pages HighMem/MovableOnly [ 1972.540890] 101394 pages reserved 18:02:04 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000008680)='/dev/audio\x00', 0x10002, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000086c0)={'security\x00', 0xffffe6b, [{}, {}, {}, {}]}, 0x68) ioctl(r1, 0xeb72, &(0x7f0000000480)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8) r2 = dup(r0) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x4) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) read(r1, &(0x7f0000000640)=""/154, 0x9a) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="12", 0x1, 0x80, &(0x7f0000000140)={0xa, 0x0, 0x7fffffff, @loopback, 0x1000000}, 0x1c) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r0, r6, &(0x7f0000000040), 0x8000ffffffee) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xa8c0d674f945bf66) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@remote, 0x58, r7}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/248, &(0x7f0000000080)=0xf8) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x100, 0x22) 18:02:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) close(r1) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) 18:02:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000200)="5f004080000022ca400955a49551585b0c952808bec3cad648ab848bb2c7ec63f4", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f0000000c00)}) 18:02:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_nanosleep(0x0, 0xb8ef9e4c5c28237b, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) 18:02:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) dup2(r1, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 18:02:04 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00), 0x0, 0x0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000440), &(0x7f00000006c0)="01a20228947c39e9df9703014800f5e552d1a8fa86486489aceb331f7647cf9e1f0229c800f60cc6724fd50b0ceca62413f842d79331e64703e946e4e676278c68c0fb160e29766e889d4cb413c488a453fb2486ecc5ee94335a2dbe0abf04a09e64cb9e9a74dea17bac7c5153cb0ca215df61a89dfe78991957f1f7518cbb6b85fc34c72c6cb39589cf0fec0000000000000000000000000000000000000000000000000000000000000000ddd957f3ecbf1c5617a97aa2a3", 0xb9, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000580), 0x1b8, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'crc32-generic\x00'}}) [ 1972.845771] syz-executor2: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1972.856323] syz-executor2 cpuset=syz2 mems_allowed=0 [ 1972.861473] CPU: 0 PID: 31835 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #36 [ 1972.868753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.878114] Call Trace: [ 1972.880720] dump_stack+0x14b/0x190 [ 1972.882569] sd 0:0:1:0: [sg0] tag#3422 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1972.884373] warn_alloc+0x472/0x690 [ 1972.884429] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1972.884477] ? apic_timer_interrupt+0xa/0x20 [ 1972.893267] sd 0:0:1:0: [sg0] tag#3422 CDB: Persistent reserve out, register [ 1972.896877] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1972.896917] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1972.901823] sd 0:0:1:0: [sg0] tag#3422 CDB[00]: 5f 00 40 80 00 00 22 ca 40 09 55 a4 95 51 58 5b [ 1972.906193] kmsan_alloc_page+0x75/0xd0 [ 1972.906232] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1972.913478] sd 0:0:1:0: [sg0] tag#3422 CDB[10]: 0c 95 28 08 be c3 ca d6 48 ab 84 8b b2 c7 ec 63 [ 1972.919121] ? kmsan_set_origin_inline+0x6b/0x120 [ 1972.919145] ? __msan_poison_alloca+0x173/0x1f0 [ 1972.919173] ? should_fail+0x53/0xaa0 [ 1972.919203] ? __should_failslab+0x278/0x2a0 [ 1972.924713] sd 0:0:1:0: [sg0] tag#3422 CDB[20]: f4 [ 1972.933486] ? kmsan_set_origin_inline+0x6b/0x120 [ 1972.933564] alloc_pages_vma+0x1578/0x1830 [ 1972.982835] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1972.987957] ? kmsan_set_origin_inline+0x6b/0x120 [ 1972.992845] handle_mm_fault+0x4377/0x81b0 [ 1972.997106] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.002041] __do_page_fault+0xc8b/0x17e0 [ 1973.006262] do_page_fault+0x98/0xd0 [ 1973.010005] ? page_fault+0x8/0x30 [ 1973.013569] page_fault+0x1e/0x30 [ 1973.017041] RIP: 0033:0x43e461 [ 1973.020252] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1973.039188] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1973.044573] RAX: 0000000020000280 RBX: fffffffffffffffe RCX: 0000000000000002 [ 1973.051847] RDX: 000000000000000b RSI: 0000000000730080 RDI: 0000000020000280 [ 1973.059129] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000001 [ 1973.066432] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1973.073723] R13: 00000000009300ac R14: 00000000001e1a9a R15: 00000000001e1a6d [ 1973.088771] syz-executor4: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1973.099283] syz-executor4 cpuset=syz4 mems_allowed=0 [ 1973.104431] CPU: 0 PID: 31830 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #36 [ 1973.111713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.121075] Call Trace: [ 1973.123677] dump_stack+0x14b/0x190 [ 1973.127326] warn_alloc+0x472/0x690 [ 1973.131007] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1973.135878] ? kernel_poison_pages+0x1a0/0x360 [ 1973.140547] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1973.146291] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.151152] ? __msan_poison_alloca+0x173/0x1f0 [ 1973.155930] kmsan_alloc_page+0x75/0xd0 [ 1973.159933] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1973.164701] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1973.170161] ? hrtimer_try_to_cancel+0x5c8/0xb90 [ 1973.174937] ? hrtimer_cancel+0x72/0x110 [ 1973.179017] ? futex_wait+0xa65/0xbe0 [ 1973.182871] alloc_pages_vma+0x1578/0x1830 [ 1973.187136] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1973.192312] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.197191] handle_mm_fault+0x4377/0x81b0 [ 1973.201457] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.206383] __do_page_fault+0xc8b/0x17e0 [ 1973.210577] do_page_fault+0x98/0xd0 [ 1973.214317] ? page_fault+0x8/0x30 [ 1973.217908] page_fault+0x1e/0x30 [ 1973.221378] RIP: 0033:0x40052d [ 1973.224594] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 18:02:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pread64(0xffffffffffffffff, &(0x7f00009f3000), 0xfffffffffffffdbe, 0xffffffffffffffff) [ 1973.243510] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1973.248891] RAX: 00000000207b1000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1973.256179] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 00000000019ae848 [ 1973.263487] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1973.270764] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1973.278051] R13: 00000000009300ac R14: 00000000001e1b98 R15: 00000000001e1b6b [ 1973.331518] syz-executor1: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1973.342040] syz-executor1 cpuset=syz1 mems_allowed=0 [ 1973.347188] CPU: 0 PID: 31855 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #36 [ 1973.354478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.363834] Call Trace: [ 1973.366463] dump_stack+0x14b/0x190 [ 1973.370178] warn_alloc+0x472/0x690 [ 1973.373887] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1973.378757] ? kernel_poison_pages+0x1a0/0x360 [ 1973.383445] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1973.389199] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1973.394728] kmsan_alloc_page+0x75/0xd0 [ 1973.398725] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1973.403507] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.408374] ? __msan_poison_alloca+0x173/0x1f0 [ 1973.413077] ? should_fail+0x53/0xaa0 [ 1973.416905] ? __should_failslab+0x278/0x2a0 [ 1973.421352] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.426279] alloc_pages_vma+0x1578/0x1830 [ 1973.430560] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1973.435707] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.440604] handle_mm_fault+0x4377/0x81b0 [ 1973.444865] ? kmsan_set_origin_inline+0x6b/0x120 [ 1973.450509] __do_page_fault+0xc8b/0x17e0 [ 1973.454709] do_page_fault+0x98/0xd0 [ 1973.458448] ? page_fault+0x8/0x30 [ 1973.462022] page_fault+0x1e/0x30 [ 1973.465493] RIP: 0033:0x40052d [ 1973.468707] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1973.487633] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1973.493020] RAX: 0000000020000140 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1973.500310] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000001b3f848 [ 1973.507592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1973.514900] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000002 [ 1973.522185] R13: 00000000001e1a58 R14: 0000000000000c46 R15: badc0ffeebadface [ 1973.529494] warn_alloc_show_mem: 2 callbacks suppressed [ 1973.529500] Mem-Info: [ 1973.537325] active_anon:35589 inactive_anon:142 isolated_anon:0 [ 1973.537325] active_file:6260 inactive_file:5245 isolated_file:0 [ 1973.537325] unevictable:0 dirty:147 writeback:0 unstable:0 [ 1973.537325] slab_reclaimable:4264 slab_unreclaimable:15175 [ 1973.537325] mapped:71042 shmem:223 pagetables:957 bounce:0 [ 1973.537325] free:33155 free_pcp:786 free_cma:0 [ 1973.570664] Node 0 active_anon:142356kB inactive_anon:568kB active_file:25040kB inactive_file:20980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:284168kB dirty:588kB writeback:0kB shmem:892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 114688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1973.598802] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1973.624977] lowmem_reserve[]: 0 2837 7263 7263 [ 1973.629612] Node 0 DMA32 free:65528kB min:26344kB low:32928kB high:39512kB active_anon:51548kB inactive_anon:220kB active_file:2508kB inactive_file:232kB unevictable:0kB writepending:100kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4352kB pagetables:800kB bounce:0kB free_pcp:1876kB local_pcp:612kB free_cma:0kB [ 1973.658854] lowmem_reserve[]: 0 0 4425 4425 [ 1973.663229] Node 0 Normal free:51188kB min:41088kB low:51360kB high:61632kB active_anon:90804kB inactive_anon:348kB active_file:22532kB inactive_file:20748kB unevictable:0kB writepending:488kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3028kB bounce:0kB free_pcp:1268kB local_pcp:452kB free_cma:0kB [ 1973.692871] lowmem_reserve[]: 0 0 0 0 [ 1973.696758] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1973.710115] Node 0 DMA32: 120*4kB (ME) 59*8kB (UM) 188*16kB (UME) 122*32kB (UM) 99*64kB (UM) 59*128kB (UME) 41*256kB (UM) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 65528kB 18:02:05 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x2000, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r1, 0xc}, 0x10) [ 1973.726364] Node 0 Normal: 275*4kB (MEH) 223*8kB (MEH) 137*16kB (MEH) 107*32kB (UM) 91*64kB (MH) 62*128kB (UM) 27*256kB (UME) 35*512kB (UMEH) 4*1024kB (M) 0*2048kB 0*4096kB = 51188kB [ 1973.742962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1973.751542] 11727 total pagecache pages [ 1973.755522] 0 pages in swap cache [ 1973.758994] Swap cache stats: add 0, delete 0, find 0/0 [ 1973.764373] Free swap = 0kB [ 1973.767396] Total swap = 0kB [ 1973.770430] 1965969 pages RAM [ 1973.773541] 0 pages HighMem/MovableOnly [ 1973.777522] 101394 pages reserved 18:02:07 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x1, 0x4) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 18:02:07 executing program 6: unshare(0x20400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 18:02:07 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}) 18:02:07 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 18:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb95090001000a0c0900fcff0000040e05a5", 0x58}], 0x1) 18:02:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigsuspend(&(0x7f00000000c0), 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 18:02:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(r1, 0x8000000008b0f, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_map}) [ 1975.144921] audit: type=1326 audit(1535565727.155:64): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31877 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 1975.158128] syz-executor4: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1975.174938] syz-executor4 cpuset=syz4 mems_allowed=0 [ 1975.180085] CPU: 1 PID: 31872 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #36 [ 1975.187362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.196740] Call Trace: [ 1975.199359] dump_stack+0x14b/0x190 [ 1975.203021] warn_alloc+0x472/0x690 [ 1975.206707] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1975.211577] ? kernel_poison_pages+0x1a0/0x360 [ 1975.216266] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1975.222016] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.226899] ? __msan_poison_alloca+0x173/0x1f0 [ 1975.231655] kmsan_alloc_page+0x75/0xd0 [ 1975.235653] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1975.240433] ? task_kmsan_context_state+0x5e/0x110 [ 1975.245391] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1975.250788] ? vmalloc_to_page+0x57d/0x6b0 [ 1975.255054] ? task_kmsan_context_state+0x5e/0x110 [ 1975.260015] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1975.265424] ? vmalloc_to_page+0x57d/0x6b0 [ 1975.269695] ? vmalloc_to_page_or_null+0x3b/0xa0 [ 1975.274498] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1975.280021] alloc_pages_vma+0x1578/0x1830 [ 1975.284302] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1975.289683] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.294902] handle_mm_fault+0x4377/0x81b0 [ 1975.299475] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.304858] __do_page_fault+0xc8b/0x17e0 [ 1975.309448] do_page_fault+0x98/0xd0 [ 1975.313609] ? page_fault+0x8/0x30 [ 1975.317171] page_fault+0x1e/0x30 [ 1975.320826] RIP: 0033:0x400581 [ 1975.324047] Code: 08 f7 d2 23 11 8a 4c 24 10 d3 e0 09 d0 89 06 e9 ab 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 12 48 8b 44 24 08 48 8b 54 24 20 <48> 89 10 e9 8d 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 7c 24 08 [ 1975.342964] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1975.348344] RAX: 0000000020871fc8 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1975.355625] RDX: 000000002086c000 RSI: 0000000000000000 RDI: 00000000019ae848 [ 1975.362911] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1975.370198] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1975.377491] R13: 00000000009300ac R14: 00000000001e23ae R15: 00000000001e2381 [ 1975.384804] Mem-Info: [ 1975.387293] active_anon:35579 inactive_anon:117 isolated_anon:0 [ 1975.387293] active_file:5484 inactive_file:4984 isolated_file:0 [ 1975.387293] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1975.387293] slab_reclaimable:4264 slab_unreclaimable:15175 [ 1975.387293] mapped:70771 shmem:194 pagetables:903 bounce:0 [ 1975.387293] free:34233 free_pcp:652 free_cma:0 [ 1975.420678] Node 0 active_anon:142316kB inactive_anon:468kB active_file:21936kB inactive_file:19936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:283084kB dirty:388kB writeback:0kB shmem:776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1975.449225] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1975.475876] lowmem_reserve[]: 0 2837 7263 7263 [ 1975.480494] Node 0 DMA32 free:66816kB min:26344kB low:32928kB high:39512kB active_anon:51472kB inactive_anon:224kB active_file:2508kB inactive_file:264kB unevictable:0kB writepending:120kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4288kB pagetables:572kB bounce:0kB free_pcp:1184kB local_pcp:372kB free_cma:0kB [ 1975.510148] lowmem_reserve[]: 0 0 4425 4425 [ 1975.514504] Node 0 Normal free:54212kB min:41088kB low:51360kB high:61632kB active_anon:90760kB inactive_anon:360kB active_file:19428kB inactive_file:19712kB unevictable:0kB writepending:268kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3040kB bounce:0kB free_pcp:1848kB local_pcp:540kB free_cma:0kB [ 1975.544126] lowmem_reserve[]: 0 0 0 0 [ 1975.547961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1975.561305] Node 0 DMA32: 286*4kB (UME) 95*8kB (UME) 171*16kB (UM) 124*32kB (UM) 103*64kB (UM) 59*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 66784kB [ 1975.577737] Node 0 Normal: 574*4kB (UMEH) 311*8kB (UMEH) 181*16kB (MEH) 122*32kB (M) 94*64kB (UMH) 62*128kB (UM) 27*256kB (UME) 35*512kB (UMEH) 4*1024kB (M) 0*2048kB 0*4096kB = 54464kB [ 1975.594494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1975.603068] 10694 total pagecache pages [ 1975.607037] 0 pages in swap cache [ 1975.610523] Swap cache stats: add 0, delete 0, find 0/0 [ 1975.615885] Free swap = 0kB [ 1975.618907] Total swap = 0kB [ 1975.621922] 1965969 pages RAM [ 1975.625025] 0 pages HighMem/MovableOnly [ 1975.628994] 101394 pages reserved [ 1975.636536] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1975.647033] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1975.652170] CPU: 0 PID: 31873 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1975.659460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.668823] Call Trace: [ 1975.671425] dump_stack+0x14b/0x190 [ 1975.675072] warn_alloc+0x472/0x690 [ 1975.678738] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1975.683598] ? kernel_poison_pages+0x1a0/0x360 [ 1975.688221] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1975.693606] ? update_load_avg+0x6c4/0x1a00 [ 1975.698019] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1975.703763] ? __msan_poison_alloca+0x173/0x1f0 [ 1975.708500] kmsan_alloc_page+0x75/0xd0 [ 1975.712491] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1975.717268] ? shrink_node_memcg+0x247b/0x4310 [ 1975.721878] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1975.727253] ? __update_load_avg_cfs_rq+0x102/0x1070 [ 1975.732441] alloc_pages_vma+0x1578/0x1830 [ 1975.736710] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1975.741831] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.746708] handle_mm_fault+0x4377/0x81b0 [ 1975.750957] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.755848] __do_page_fault+0xc8b/0x17e0 [ 1975.760033] do_page_fault+0x98/0xd0 [ 1975.763770] ? page_fault+0x8/0x30 [ 1975.767336] page_fault+0x1e/0x30 [ 1975.770799] RIP: 0033:0x43e531 [ 1975.773998] Code: 2e 0f 1f 84 00 00 00 00 00 48 81 fa 00 04 00 00 77 77 89 d1 c1 e9 05 74 60 ff c9 48 8b 06 4c 8b 46 08 4c 8b 4e 10 4c 8b 56 18 <48> 89 07 4c 89 47 08 4c 89 4f 10 4c 89 57 18 48 8d 76 20 48 8d 7f [ 1975.792902] RSP: 002b:0000000000a3fc18 EFLAGS: 00010203 [ 1975.798289] RAX: 2319001400000058 RBX: fffffffffffffffe RCX: 0000000000000001 [ 1975.805577] RDX: 0000000000000058 RSI: 00000000007300a8 RDI: 0000000020299f3e [ 1975.812849] RBP: 0000000000930aa0 R08: 568c0d04804b8340 R09: 0081ffffff7f060a [ 1975.820122] R10: 005800000000224e R11: 0000000000000246 R12: 00000000000003e8 [ 1975.827408] R13: 00000000009300ac R14: 00000000001e239b R15: 00000000001e236e [ 1975.841313] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1975.851825] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1975.856965] CPU: 0 PID: 31888 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1975.864245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.873606] Call Trace: [ 1975.876228] dump_stack+0x14b/0x190 [ 1975.879890] warn_alloc+0x472/0x690 [ 1975.884028] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1975.888894] ? kernel_poison_pages+0x1a0/0x360 [ 1975.893594] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1975.899349] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1975.904865] kmsan_alloc_page+0x75/0xd0 [ 1975.908870] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1975.913648] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.918601] ? __msan_poison_alloca+0x173/0x1f0 [ 1975.923300] ? should_fail+0x53/0xaa0 [ 1975.927122] ? __should_failslab+0x278/0x2a0 [ 1975.931565] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.936475] alloc_pages_vma+0x1578/0x1830 [ 1975.940755] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1975.945878] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.950759] handle_mm_fault+0x4377/0x81b0 [ 1975.955011] ? kmsan_set_origin_inline+0x6b/0x120 [ 1975.959904] __do_page_fault+0xc8b/0x17e0 [ 1975.964075] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1975.969475] do_page_fault+0x98/0xd0 [ 1975.973242] page_fault+0x1e/0x30 [ 1975.976739] RIP: 0010:__put_user_4+0x1c/0x30 [ 1975.981160] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 fc 02 00 48 8b 9b d8 19 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 1976.000230] RSP: 0018:ffff88001298fdb0 EFLAGS: 00010293 [ 1976.005611] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000440 [ 1976.012918] RDX: ffff88004d96fe14 RSI: aaaaaaaaaaaab000 RDI: ffffea00006f95a0 [ 1976.020193] RBP: ffff88001298fe78 R08: ffffffff7fffffff R09: 0000000000000002 [ 1976.027482] R10: 0000000000000000 R11: ffffffff86899350 R12: ffff88001298fe14 [ 1976.034759] R13: 0000000020000440 R14: ffff88015779e180 R15: 0000000000000000 [ 1976.042051] ? __sys_socketpair+0x1b00/0x1b00 [ 1976.046581] ? __sys_socketpair+0x22d/0x1b00 [ 1976.051023] __x64_sys_socketpair+0x117/0x170 [ 1976.055552] ? __sys_socketpair+0x1b00/0x1b00 [ 1976.060060] do_syscall_64+0x15b/0x220 [ 1976.063975] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1976.069173] RIP: 0033:0x457089 [ 1976.072406] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1976.091321] RSP: 002b:00007f83db95ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 18:02:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)) [ 1976.099055] RAX: ffffffffffffffda RBX: 00007f83db95f6d4 RCX: 0000000000457089 [ 1976.106330] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1976.113611] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 1976.120886] R10: 0000000020000440 R11: 0000000000000246 R12: 00000000ffffffff [ 1976.128176] R13: 00000000004d6378 R14: 00000000004c9aab R15: 0000000000000000 18:02:08 executing program 2: r0 = getpid() setpgid(0xffffffffffffffff, r0) 18:02:08 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) 18:02:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close(r2) close(r1) 18:02:08 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) [ 1976.329108] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 18:02:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x38c0}}, 0x1c) 18:02:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000200)) [ 1976.488250] team0: Device sit0 is of different type 18:02:08 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 18:02:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0x15f}], 0x1}}], 0x40000000000015f, 0x0, 0x0) 18:02:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x1, 0x4) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 18:02:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x38c0}}, 0x1c) 18:02:08 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000180)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x74}], &(0x7f00005fc000)="e5ffffff", 0x20, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 18:02:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x3, 0x4, 0x100000001, 0x0, r1}, 0x2c) dup3(r2, r1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/240}, 0x18) 18:02:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7472}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 18:02:10 executing program 3: r0 = shmat(0x0, &(0x7f0000fea000/0x3000)=nil, 0x7000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmdt(r0) 18:02:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000200)) 18:02:10 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x38c0}}, 0x1c) 18:02:10 executing program 5: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) writev(r1, &(0x7f0000000000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r1, r0) 18:02:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x1, 0x4) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 18:02:10 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)}}], 0x1, 0x0, 0x0) 18:02:10 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbe, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 18:02:10 executing program 2: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1', "9e3ac5f587192e3d98408d8303865f6ee26f6387a71979570cb9290c1d449dd2d21d672c63e4a04d8ae00829a778ce11f87c1a3570a073d6e835473e34a8fc806bed177600a44d1d6f03e02adcabd8025336de7f8103"}, 0x5a) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000002002, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xf6}, 0x1000f) [ 1978.221618] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1978.232154] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1978.237309] CPU: 1 PID: 31954 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1978.244590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.253958] Call Trace: [ 1978.256591] dump_stack+0x14b/0x190 [ 1978.260268] warn_alloc+0x472/0x690 [ 1978.263959] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1978.268859] ? kernel_poison_pages+0x1a0/0x360 [ 1978.273534] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1978.279291] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1978.284774] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1978.290217] kmsan_alloc_page+0x75/0xd0 [ 1978.294269] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1978.299046] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1978.304534] ? hrtimer_try_to_cancel+0x5c8/0xb90 [ 1978.309338] ? hrtimer_cancel+0x72/0x110 [ 1978.313430] ? futex_wait+0xa65/0xbe0 [ 1978.317301] alloc_pages_vma+0x1578/0x1830 [ 1978.321578] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1978.326710] ? kmsan_set_origin_inline+0x6b/0x120 [ 1978.331604] handle_mm_fault+0x4377/0x81b0 [ 1978.335868] ? kmsan_set_origin_inline+0x6b/0x120 [ 1978.340786] __do_page_fault+0xc8b/0x17e0 [ 1978.344989] do_page_fault+0x98/0xd0 [ 1978.348762] ? page_fault+0x8/0x30 [ 1978.352329] page_fault+0x1e/0x30 [ 1978.355808] RIP: 0033:0x43e5ab [ 1978.359024] Code: e2 1f 48 8b 44 24 f8 0f 85 cb fe ff ff f3 c3 4c 8b 1d 59 d9 2c 00 49 39 d3 4c 0f 47 da 4c 89 d9 49 83 e3 f8 48 c1 e9 03 74 05 48 a5 66 90 4c 29 da 48 f7 c2 f8 ff ff ff 75 14 83 e2 07 48 8b [ 1978.377940] RSP: 002b:0000000000a3fc18 EFLAGS: 00010206 [ 1978.383328] RAX: 0000000020c01f96 RBX: fffffffffffffffe RCX: 0000000000000200 [ 1978.390614] RDX: 0000000000001001 RSI: 0000000000730338 RDI: 0000000020c01f96 [ 1978.397896] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.405205] R10: 0000000000a3fcf0 R11: 0000000000001000 R12: 00000000000003e8 [ 1978.412517] R13: 00000000009300ac R14: 00000000001e2fa5 R15: 00000000001e2f78 [ 1978.419834] warn_alloc_show_mem: 2 callbacks suppressed [ 1978.419839] Mem-Info: [ 1978.427703] active_anon:35571 inactive_anon:114 isolated_anon:0 [ 1978.427703] active_file:5074 inactive_file:4666 isolated_file:0 [ 1978.427703] unevictable:0 dirty:125 writeback:0 unstable:0 [ 1978.427703] slab_reclaimable:4261 slab_unreclaimable:15177 [ 1978.427703] mapped:70244 shmem:190 pagetables:982 bounce:0 [ 1978.427703] free:34991 free_pcp:698 free_cma:0 18:02:10 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x38c0}}, 0x1c) 18:02:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$TIOCSBRK(r2, 0x5427) [ 1978.461047] Node 0 active_anon:140168kB inactive_anon:456kB active_file:20180kB inactive_file:18664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:280628kB dirty:500kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 110592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1978.489164] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1978.515340] lowmem_reserve[]: 0 2837 7263 7263 [ 1978.519970] Node 0 DMA32 free:73448kB min:26344kB low:32928kB high:39512kB active_anon:49268kB inactive_anon:148kB active_file:912kB inactive_file:1776kB unevictable:0kB writepending:120kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4096kB pagetables:660kB bounce:0kB free_pcp:1080kB local_pcp:232kB free_cma:0kB [ 1978.549174] lowmem_reserve[]: 0 0 4425 4425 [ 1978.553569] Node 0 Normal free:58748kB min:41088kB low:51360kB high:61632kB active_anon:91052kB inactive_anon:308kB active_file:19424kB inactive_file:16156kB unevictable:0kB writepending:380kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9792kB pagetables:3268kB bounce:0kB free_pcp:1556kB local_pcp:676kB free_cma:0kB [ 1978.583206] lowmem_reserve[]: 0 0 0 0 [ 1978.587045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1978.600408] Node 0 DMA32: 226*4kB (UME) 95*8kB (UME) 172*16kB (UM) 128*32kB (UM) 120*64kB (UM) 60*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 4*2048kB (UM) 1*4096kB (U) = 80192kB 18:02:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x7) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 18:02:10 executing program 6: syz_emit_ethernet(0xcf6, &(0x7f00000000c0)={@link_local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d63eb7", 0xcc0, 0x0, 0x0, @empty, @dev, {[@hopopts], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18a875", 0x0, 0x0, 0x0, @dev, @remote, [@hopopts={0x0, 0x179, [], [@generic={0x0, 0xbc7, "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"}]}], "1e29eedf3cebbb7c5d3eca6843b8df7ec7a3eb5a83c3d5efc51823f8ff7011ed3180cde0ec37b4b818a8a292b03e1f67fb002f553ff289c427ccba6e5293140a9cf2594d1f72119fb96068c1a9badf9a2b84bad3d40696894ca0afbc5635bbcfa2186a8bdc1357eb4498f3d5fe5e50ec0e4b94cf4bc1f3f12aba5a51728f84aedc6bde4ccf92fab64e061569891894760a11137539231152f8515671d56eddcf4b5e249f77c89e2042f8ee0f4a3194a6"}}}}}}}, 0x0) [ 1978.617628] Node 0 Normal: 1117*4kB (UMEH) 525*8kB (UMEH) 279*16kB (UMEH) 163*32kB (UM) 109*64kB (UMH) 54*128kB (M) 25*256kB (ME) 31*512kB (UMEH) 4*1024kB (UM) 0*2048kB 0*4096kB = 58604kB [ 1978.634659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1978.643263] 9678 total pagecache pages [ 1978.647155] 0 pages in swap cache [ 1978.650626] Swap cache stats: add 0, delete 0, find 0/0 [ 1978.655988] Free swap = 0kB [ 1978.659006] Total swap = 0kB [ 1978.662029] 1965969 pages RAM [ 1978.665144] 0 pages HighMem/MovableOnly [ 1978.669117] 101394 pages reserved 18:02:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x1, 0x4) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 18:02:10 executing program 2: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1', "9e3ac5f587192e3d98408d8303865f6ee26f6387a71979570cb9290c1d449dd2d21d672c63e4a04d8ae00829a778ce11f87c1a3570a073d6e835473e34a8fc806bed177600a44d1d6f03e02adcabd8025336de7f8103"}, 0x5a) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000002002, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xf6}, 0x1000f) 18:02:10 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) poll(&(0x7f0000000040), 0x0, 0xfffffffffffffffc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x14) tkill(r0, 0x1000000000016) 18:02:10 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbe, &(0x7f0000000580), &(0x7f00000005c0)=0x4) [ 1978.880742] input: syz0 as /devices/virtual/input/input179 18:02:10 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2012, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) [ 1978.958132] input: syz0 as /devices/virtual/input/input180 18:02:11 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x0, 0xff}}) 18:02:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e756d615f6d61707300b5c62e9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224c3925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e780781b6a8d091f88658ef4f16a21417d83d000000000000000000000000000000") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000df6000), 0x0, 0x800000000000) 18:02:11 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 18:02:11 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000500), 0x3528a9c0}], 0x100000000000009e, 0xa) 18:02:11 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbe, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 18:02:11 executing program 2: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1', "9e3ac5f587192e3d98408d8303865f6ee26f6387a71979570cb9290c1d449dd2d21d672c63e4a04d8ae00829a778ce11f87c1a3570a073d6e835473e34a8fc806bed177600a44d1d6f03e02adcabd8025336de7f8103"}, 0x5a) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000002002, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xf6}, 0x1000f) 18:02:11 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 18:02:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x3c, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000100)) [ 1979.516065] syz-executor6: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1979.526599] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1979.531759] CPU: 0 PID: 32019 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1979.539051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.548414] Call Trace: [ 1979.551040] dump_stack+0x14b/0x190 [ 1979.554691] warn_alloc+0x472/0x690 [ 1979.558379] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1979.563274] ? kernel_poison_pages+0x1a0/0x360 [ 1979.567898] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1979.573306] ? update_load_avg+0x6c4/0x1a00 [ 1979.577692] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1979.583444] ? kmsan_set_origin_inline+0x6b/0x120 [ 1979.588358] kmsan_alloc_page+0x75/0xd0 [ 1979.592363] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1979.597145] ? hrtimer_cancel+0x52/0x110 [ 1979.601240] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1979.606634] ? hrtimer_try_to_cancel+0x31b/0xb90 [ 1979.611426] ? hrtimer_cancel+0x72/0x110 18:02:11 executing program 2: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1', "9e3ac5f587192e3d98408d8303865f6ee26f6387a71979570cb9290c1d449dd2d21d672c63e4a04d8ae00829a778ce11f87c1a3570a073d6e835473e34a8fc806bed177600a44d1d6f03e02adcabd8025336de7f8103"}, 0x5a) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000002002, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xf6}, 0x1000f) 18:02:11 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbe, &(0x7f0000000580), &(0x7f00000005c0)=0x4) [ 1979.615535] ? futex_wait+0xa65/0xbe0 [ 1979.619399] alloc_pages_vma+0x1578/0x1830 [ 1979.623677] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1979.628803] ? kmsan_set_origin_inline+0x6b/0x120 [ 1979.633882] handle_mm_fault+0x4377/0x81b0 [ 1979.638143] ? kmsan_set_origin_inline+0x6b/0x120 [ 1979.643081] __do_page_fault+0xc8b/0x17e0 [ 1979.647305] do_page_fault+0x98/0xd0 [ 1979.651050] ? page_fault+0x8/0x30 [ 1979.654627] page_fault+0x1e/0x30 [ 1979.658098] RIP: 0033:0x4004d1 [ 1979.661307] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1979.680233] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1979.685620] RAX: 0000000020b86000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1979.692925] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000279e848 [ 1979.700217] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.707503] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1979.714786] R13: 00000000009300ac R14: 00000000001e34b4 R15: 00000000001e3487 [ 1979.722085] Mem-Info: [ 1979.724537] active_anon:35064 inactive_anon:110 isolated_anon:0 [ 1979.724537] active_file:4970 inactive_file:4522 isolated_file:0 [ 1979.724537] unevictable:0 dirty:52 writeback:0 unstable:0 [ 1979.724537] slab_reclaimable:4257 slab_unreclaimable:15178 [ 1979.724537] mapped:69980 shmem:190 pagetables:991 bounce:0 [ 1979.724537] free:36599 free_pcp:770 free_cma:0 18:02:11 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000200), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000100)=""/111) [ 1979.757755] Node 0 active_anon:140256kB inactive_anon:440kB active_file:19880kB inactive_file:18088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:279920kB dirty:208kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1979.785866] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1979.812020] lowmem_reserve[]: 0 2837 7263 7263 [ 1979.816651] Node 0 DMA32 free:74132kB min:26344kB low:32928kB high:39512kB active_anon:48844kB inactive_anon:148kB active_file:592kB inactive_file:2180kB unevictable:0kB writepending:0kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4352kB pagetables:488kB bounce:0kB free_pcp:2552kB local_pcp:1444kB free_cma:0kB [ 1979.845759] lowmem_reserve[]: 0 0 4425 4425 [ 1979.850119] Node 0 Normal free:56384kB min:41088kB low:51360kB high:61632kB active_anon:91304kB inactive_anon:292kB active_file:19288kB inactive_file:15908kB unevictable:0kB writepending:92kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3476kB bounce:0kB free_pcp:432kB local_pcp:136kB free_cma:0kB [ 1979.879629] lowmem_reserve[]: 0 0 0 0 [ 1979.883731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1979.897083] Node 0 DMA32: 379*4kB (UME) 99*8kB (UME) 172*16kB (UM) 128*32kB (UM) 104*64kB (UM) 64*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 3*2048kB (UM) 0*4096kB = 74180kB [ 1979.913954] Node 0 Normal: 523*4kB (UMEH) 403*8kB (UMEH) 272*16kB (UMEH) 158*32kB (UM) 123*64kB (UMH) 56*128kB (UM) 25*256kB (ME) 31*512kB (UMEH) 4*1024kB (UM) 0*2048kB 0*4096kB = 56132kB [ 1979.930982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1979.939581] 9683 total pagecache pages [ 1979.943486] 0 pages in swap cache [ 1979.946948] Swap cache stats: add 0, delete 0, find 0/0 [ 1979.952316] Free swap = 0kB [ 1979.955336] Total swap = 0kB [ 1979.958359] 1965969 pages RAM [ 1979.961469] 0 pages HighMem/MovableOnly 18:02:11 executing program 1: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x22}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') writev(r0, &(0x7f00000000c0), 0x20000000000003fa) [ 1979.965452] 101394 pages reserved 18:02:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="df69cf25c588748bcb33166e0312bb1e70b1095c77963d42aaaea6969c67414f04a9b78b023ada5918531d1b04cb1c797df84b56d5ba66cbe2ee29ace4f3ecc5e029e420c5bd286a7b066dfe788752e70419b5daa4739d8f", 0x58}], 0x1) 18:02:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x1, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) 18:02:12 executing program 0: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x200040184150, &(0x7f0000000080)) [ 1980.246175] syz-executor2: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1980.256764] syz-executor2 cpuset=syz2 mems_allowed=0 [ 1980.261931] CPU: 0 PID: 32048 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #36 [ 1980.269257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.278635] Call Trace: [ 1980.281284] dump_stack+0x14b/0x190 [ 1980.284948] warn_alloc+0x472/0x690 [ 1980.288634] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1980.293506] ? kernel_poison_pages+0x1a0/0x360 [ 1980.298183] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1980.303954] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.308895] kmsan_alloc_page+0x75/0xd0 [ 1980.312902] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1980.317675] ? hrtimer_cancel+0x52/0x110 [ 1980.321779] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1980.327158] ? hrtimer_try_to_cancel+0x31b/0xb90 [ 1980.332016] ? hrtimer_cancel+0x72/0x110 [ 1980.336111] ? futex_wait+0xa65/0xbe0 [ 1980.339975] alloc_pages_vma+0x1578/0x1830 [ 1980.344267] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1980.349403] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.354307] handle_mm_fault+0x4377/0x81b0 [ 1980.358571] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.363474] __do_page_fault+0xc8b/0x17e0 [ 1980.367679] do_page_fault+0x98/0xd0 [ 1980.371417] ? page_fault+0x8/0x30 [ 1980.374986] page_fault+0x1e/0x30 [ 1980.378458] RIP: 0033:0x4004d1 [ 1980.381700] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1980.400635] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1980.406015] RAX: 0000000020d80f80 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1980.413321] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000001ba0848 [ 1980.420603] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.427901] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1980.435209] R13: 00000000009300ac R14: 00000000001e378e R15: 00000000001e3761 18:02:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) 18:02:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000534000), &(0x7f0000000100)=0x4) 18:02:12 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x4, 0x4000000000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000180), &(0x7f0000000080)=0x4) 18:02:12 executing program 1: socketpair$unix(0x1, 0x100000000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000140)=""/8, &(0x7f0000000080)=0x8) 18:02:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000c8d000)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) [ 1980.622242] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1980.632791] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1980.637965] CPU: 0 PID: 32067 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1980.645259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.654628] Call Trace: [ 1980.657257] dump_stack+0x14b/0x190 [ 1980.660916] warn_alloc+0x472/0x690 [ 1980.664606] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1980.669483] ? kernel_poison_pages+0x1a0/0x360 [ 1980.674162] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1980.679931] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1980.685455] kmsan_alloc_page+0x75/0xd0 [ 1980.689458] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1980.694271] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.699144] ? __msan_poison_alloca+0x173/0x1f0 [ 1980.703865] ? should_fail+0x53/0xaa0 [ 1980.707692] ? __should_failslab+0x278/0x2a0 [ 1980.712131] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.717034] alloc_pages_vma+0x1578/0x1830 [ 1980.721318] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1980.726447] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.731334] handle_mm_fault+0x4377/0x81b0 [ 1980.735625] ? kmsan_set_origin_inline+0x6b/0x120 [ 1980.740523] __do_page_fault+0xc8b/0x17e0 [ 1980.744716] do_page_fault+0x98/0xd0 [ 1980.748452] ? page_fault+0x8/0x30 [ 1980.752011] page_fault+0x1e/0x30 [ 1980.755474] RIP: 0033:0x400581 [ 1980.758678] Code: 08 f7 d2 23 11 8a 4c 24 10 d3 e0 09 d0 89 06 e9 ab 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 12 48 8b 44 24 08 48 8b 54 24 20 <48> 89 10 e9 8d 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 7c 24 08 [ 1980.777609] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1980.782994] RAX: 0000000020498000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1980.790303] RDX: 0000000020d55000 RSI: 0000000000000000 RDI: 0000000001c60848 [ 1980.797582] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.804861] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1980.812139] R13: 00000000009300ac R14: 00000000001e3905 R15: 00000000001e38d8 [ 1980.819438] warn_alloc_show_mem: 1 callbacks suppressed [ 1980.819444] Mem-Info: [ 1980.827272] active_anon:35563 inactive_anon:111 isolated_anon:0 [ 1980.827272] active_file:5021 inactive_file:4541 isolated_file:0 [ 1980.827272] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1980.827272] slab_reclaimable:4257 slab_unreclaimable:15188 [ 1980.827272] mapped:69996 shmem:190 pagetables:997 bounce:0 [ 1980.827272] free:33959 free_pcp:1176 free_cma:0 [ 1980.860581] Node 0 active_anon:142252kB inactive_anon:444kB active_file:20084kB inactive_file:18164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:279984kB dirty:136kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 120832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1980.889144] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1980.915321] lowmem_reserve[]: 0 2837 7263 7263 [ 1980.919940] Node 0 DMA32 free:66476kB min:26344kB low:32928kB high:39512kB active_anon:50900kB inactive_anon:148kB active_file:588kB inactive_file:2184kB unevictable:0kB writepending:0kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4480kB pagetables:512kB bounce:0kB free_pcp:2896kB local_pcp:1472kB free_cma:0kB [ 1980.949056] lowmem_reserve[]: 0 0 4425 4425 [ 1980.953437] Node 0 Normal free:53456kB min:41088kB low:51360kB high:61632kB active_anon:91456kB inactive_anon:296kB active_file:19496kB inactive_file:15864kB unevictable:0kB writepending:136kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3476kB bounce:0kB free_pcp:1808kB local_pcp:1196kB free_cma:0kB [ 1980.983176] lowmem_reserve[]: 0 0 0 0 [ 1980.987028] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1981.000381] Node 0 DMA32: 401*4kB (UME) 105*8kB (UME) 126*16kB (UM) 112*32kB (UM) 95*64kB (UM) 65*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 66476kB 18:02:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) recvfrom(r2, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc, 0x709000) [ 1981.016794] Node 0 Normal: 309*4kB (UMEH) 384*8kB (MEH) 246*16kB (UMEH) 163*32kB (UM) 115*64kB (UMH) 57*128kB (UM) 26*256kB (UME) 30*512kB (MEH) 3*1024kB (M) 0*2048kB 0*4096kB = 53204kB [ 1981.033628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1981.042223] 9736 total pagecache pages [ 1981.046116] 0 pages in swap cache [ 1981.049570] Swap cache stats: add 0, delete 0, find 0/0 [ 1981.054932] Free swap = 0kB [ 1981.057953] Total swap = 0kB [ 1981.060977] 1965969 pages RAM [ 1981.064085] 0 pages HighMem/MovableOnly [ 1981.068061] 101394 pages reserved 18:02:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='nilfs2\x00', 0x1008, &(0x7f00000003c0)) umount2(&(0x7f0000000380)='./file0\x00', 0x2) 18:02:13 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 18:02:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xe, 0x4, 0x3, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 18:02:13 executing program 1: unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') close(r0) signalfd4(r0, &(0x7f0000000240), 0x8, 0x0) 18:02:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x1, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) 18:02:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCGETS(r1, 0x80045439, &(0x7f0000000000)) 18:02:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x14000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0xc, 0x0, 0xffffffffffffffff}}, 0x50) 18:02:13 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 18:02:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='nilfs2\x00', 0x1008, &(0x7f00000003c0)) umount2(&(0x7f0000000380)='./file0\x00', 0x2) [ 1981.501774] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1981.512313] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1981.517459] CPU: 1 PID: 32092 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1981.524740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.534109] Call Trace: [ 1981.536740] dump_stack+0x14b/0x190 [ 1981.540407] warn_alloc+0x472/0x690 [ 1981.544094] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1981.548972] ? kernel_poison_pages+0x1a0/0x360 [ 1981.553670] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1981.559429] ? kmsan_set_origin_inline+0x6b/0x120 [ 1981.564356] kmsan_alloc_page+0x75/0xd0 [ 1981.568373] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1981.573162] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1981.578574] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1981.584008] ? __update_load_avg_cfs_rq+0x102/0x1070 [ 1981.589223] alloc_pages_vma+0x1578/0x1830 [ 1981.593510] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1981.598640] ? kmsan_set_origin_inline+0x6b/0x120 [ 1981.603526] handle_mm_fault+0x4377/0x81b0 [ 1981.607807] ? kmsan_set_origin_inline+0x6b/0x120 [ 1981.612706] __do_page_fault+0xc8b/0x17e0 [ 1981.616913] do_page_fault+0x98/0xd0 [ 1981.620663] ? page_fault+0x8/0x30 [ 1981.624231] page_fault+0x1e/0x30 [ 1981.627697] RIP: 0033:0x40052d [ 1981.630920] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1981.649842] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1981.655231] RAX: 0000000020000180 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1981.662513] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000001cc5848 [ 1981.669817] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.677101] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1981.684383] R13: 00000000009300ac R14: 00000000001e3c6e R15: 00000000001e3c41 [ 1981.691717] Mem-Info: [ 1981.694223] active_anon:35062 inactive_anon:111 isolated_anon:0 [ 1981.694223] active_file:5021 inactive_file:4541 isolated_file:0 [ 1981.694223] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1981.694223] slab_reclaimable:4257 slab_unreclaimable:15188 [ 1981.694223] mapped:69996 shmem:190 pagetables:1016 bounce:0 [ 1981.694223] free:35612 free_pcp:1101 free_cma:0 [ 1981.727627] Node 0 active_anon:140304kB inactive_anon:444kB active_file:19996kB inactive_file:18128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:279964kB dirty:144kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 110592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1981.755766] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.781938] lowmem_reserve[]: 0 2837 7263 7263 [ 1981.786572] Node 0 DMA32 free:73544kB min:26344kB low:32928kB high:39512kB active_anon:48832kB inactive_anon:148kB active_file:588kB inactive_file:2168kB unevictable:0kB writepending:0kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4288kB pagetables:476kB bounce:0kB free_pcp:2944kB local_pcp:1436kB free_cma:0kB [ 1981.815699] lowmem_reserve[]: 0 0 4425 4425 [ 1981.820070] Node 0 Normal free:52952kB min:41088kB low:51360kB high:61632kB active_anon:91476kB inactive_anon:296kB active_file:19408kB inactive_file:15960kB unevictable:0kB writepending:144kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3392kB bounce:0kB free_pcp:788kB local_pcp:236kB free_cma:0kB [ 1981.849625] lowmem_reserve[]: 0 0 0 0 [ 1981.853502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1981.866867] Node 0 DMA32: 454*4kB (UME) 105*8kB (UME) 130*16kB (UM) 113*32kB (UM) 106*64kB (UM) 66*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 73760kB [ 1981.884328] Node 0 Normal: 418*4kB (UMEH) 396*8kB (UMEH) 217*16kB (UMEH) 153*32kB (UM) 115*64kB (UMH) 57*128kB (UM) 26*256kB (UME) 30*512kB (MEH) 3*1024kB (M) 0*2048kB 0*4096kB = 52952kB 18:02:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00'}) 18:02:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1, &(0x7f0000003780)=""/232, 0xe8}}], 0x1, 0x0, &(0x7f0000003bc0)) 18:02:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x1, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) [ 1981.901283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1981.909876] 9763 total pagecache pages [ 1981.913779] 0 pages in swap cache [ 1981.917240] Swap cache stats: add 0, delete 0, find 0/0 [ 1981.922612] Free swap = 0kB [ 1981.925642] Total swap = 0kB [ 1981.928673] 1965969 pages RAM [ 1981.931783] 0 pages HighMem/MovableOnly [ 1981.935771] 101394 pages reserved 18:02:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x1e, 0x1, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) 18:02:14 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 18:02:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0xb818e7676b02eff5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8}]}, 0x28}}, 0x0) 18:02:14 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='nilfs2\x00', 0x1008, &(0x7f00000003c0)) umount2(&(0x7f0000000380)='./file0\x00', 0x2) 18:02:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1, &(0x7f0000003780)=""/232, 0xe8}}], 0x1, 0x0, &(0x7f0000003bc0)) 18:02:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') [ 1982.269236] syz-executor1: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1982.279818] syz-executor1 cpuset=syz1 mems_allowed=0 [ 1982.285004] CPU: 0 PID: 32137 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #36 [ 1982.292286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.301663] Call Trace: [ 1982.304280] dump_stack+0x14b/0x190 [ 1982.307931] warn_alloc+0x472/0x690 [ 1982.311606] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1982.316490] ? kernel_poison_pages+0x1a0/0x360 [ 1982.321156] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1982.326921] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1982.332433] kmsan_alloc_page+0x75/0xd0 [ 1982.336440] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1982.341228] ? kmsan_set_origin_inline+0x6b/0x120 [ 1982.346094] ? __msan_poison_alloca+0x173/0x1f0 [ 1982.350784] ? should_fail+0x53/0xaa0 [ 1982.354597] ? __should_failslab+0x278/0x2a0 [ 1982.359033] ? kmsan_set_origin_inline+0x6b/0x120 [ 1982.363929] alloc_pages_vma+0x1578/0x1830 [ 1982.368220] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1982.373343] ? kmsan_set_origin_inline+0x6b/0x120 [ 1982.378287] handle_mm_fault+0x4377/0x81b0 [ 1982.382540] ? kmsan_set_origin_inline+0x6b/0x120 [ 1982.387432] __do_page_fault+0xc8b/0x17e0 [ 1982.391646] do_page_fault+0x98/0xd0 [ 1982.395385] ? page_fault+0x8/0x30 [ 1982.398941] page_fault+0x1e/0x30 [ 1982.402403] RIP: 0033:0x43e4b7 [ 1982.405614] Code: 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 00 48 8b 0e 4c 8b 46 08 <48> 89 0f 4c 89 47 08 83 ea 10 48 8d 76 10 48 8d 7f 10 75 e5 f3 c3 [ 1982.424522] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1982.429894] RAX: 0000000020000000 RBX: fffffffffffffffe RCX: 6f745f3068746576 [ 1982.437170] RDX: 0000000000000010 RSI: 00000000007300e0 RDI: 0000000020000000 [ 1982.444457] RBP: 0000000000930aa0 R08: 006567646972625f R09: 0000000000000001 [ 1982.451735] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1982.459063] R13: 00000000009300ac R14: 00000000001e3f75 R15: 00000000001e3f48 [ 1982.474548] syz-executor2: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1982.485063] syz-executor2 cpuset=syz2 mems_allowed=0 [ 1982.490217] CPU: 1 PID: 32129 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #36 [ 1982.497507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.506887] Call Trace: [ 1982.509517] dump_stack+0x14b/0x190 [ 1982.513209] warn_alloc+0x472/0x690 [ 1982.516896] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1982.521781] ? kernel_poison_pages+0x1a0/0x360 [ 1982.526416] ? __kernel_text_address+0x250/0x350 [ 1982.531286] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1982.537053] ? kmem_cache_free+0x85f/0x2b60 [ 1982.541553] kmsan_alloc_page+0x75/0xd0 [ 1982.545656] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1982.550547] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1982.555931] ? radix_tree_lookup+0x3cb/0x400 [ 1982.560375] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1982.565762] ? balance_dirty_pages_ratelimited+0x942/0x4720 [ 1982.571508] ? __set_page_dirty_buffers+0x3d3/0x640 [ 1982.576573] ? wait_for_stable_page+0x1fc/0x350 [ 1982.581297] alloc_pages_vma+0x1578/0x1830 [ 1982.585577] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1982.590707] ? kmsan_set_origin_inline+0x6b/0x120 [ 1982.595604] handle_mm_fault+0x4377/0x81b0 [ 1982.599861] ? kmsan_set_origin_inline+0x6b/0x120 [ 1982.604800] __do_page_fault+0xc8b/0x17e0 [ 1982.609001] do_page_fault+0x98/0xd0 [ 1982.612746] ? page_fault+0x8/0x30 [ 1982.616311] page_fault+0x1e/0x30 [ 1982.619782] RIP: 0033:0x4004d1 [ 1982.622994] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1982.641908] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1982.647291] RAX: 0000000020afb000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1982.654586] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000001ba0848 [ 1982.661913] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1982.669345] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1982.676724] R13: 00000000009300ac R14: 00000000001e4042 R15: 00000000001e4015 18:02:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0xe, &(0x7f000000a000)) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x1200) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000100)='reiserfs\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000000c0)='.', &(0x7f0000187ff8)='.', &(0x7f0000000180)='rpc_pipefs\x00', 0x5010, &(0x7f0000000200)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 18:02:14 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff88, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [0x0, 0x11], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 18:02:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1, &(0x7f0000003780)=""/232, 0xe8}}], 0x1, 0x0, &(0x7f0000003bc0)) 18:02:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18:02:14 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='nilfs2\x00', 0x1008, &(0x7f00000003c0)) umount2(&(0x7f0000000380)='./file0\x00', 0x2) [ 1982.942675] syz-executor4: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1982.953241] syz-executor4 cpuset=syz4 mems_allowed=0 [ 1982.958385] CPU: 1 PID: 32158 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #36 [ 1982.965667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.975032] Call Trace: [ 1982.977648] dump_stack+0x14b/0x190 [ 1982.981303] warn_alloc+0x472/0x690 [ 1982.984991] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1982.990615] ? kernel_poison_pages+0x1a0/0x360 [ 1982.995295] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1983.001058] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1983.006581] kmsan_alloc_page+0x75/0xd0 [ 1983.010585] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1983.015377] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.020250] ? __msan_poison_alloca+0x173/0x1f0 [ 1983.024950] ? should_fail+0x53/0xaa0 [ 1983.028802] ? __should_failslab+0x278/0x2a0 [ 1983.033253] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.038178] alloc_pages_vma+0x1578/0x1830 [ 1983.042465] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1983.047593] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.052492] handle_mm_fault+0x4377/0x81b0 [ 1983.056760] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.061652] __do_page_fault+0xc8b/0x17e0 [ 1983.065840] do_page_fault+0x98/0xd0 [ 1983.069571] ? page_fault+0x8/0x30 [ 1983.073144] page_fault+0x1e/0x30 [ 1983.076620] RIP: 0033:0x43e499 [ 1983.079822] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 [ 1983.098732] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1983.104138] RAX: 0000000020000100 RBX: fffffffffffffffe RCX: 0030656c69662f2e [ 1983.111418] RDX: 0000000000000008 RSI: 0000000000730020 RDI: 0000000020000100 [ 1983.118705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 1983.126105] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 1983.133410] R13: 00000000001e4013 R14: 0000000000000bf3 R15: badc0ffeebadface [ 1983.140726] warn_alloc_show_mem: 2 callbacks suppressed [ 1983.140731] Mem-Info: [ 1983.148551] active_anon:35573 inactive_anon:114 isolated_anon:0 [ 1983.148551] active_file:4291 inactive_file:4184 isolated_file:13 [ 1983.148551] unevictable:0 dirty:58 writeback:0 unstable:0 [ 1983.148551] slab_reclaimable:4248 slab_unreclaimable:15189 [ 1983.148551] mapped:69479 shmem:190 pagetables:1011 bounce:0 [ 1983.148551] free:35935 free_pcp:1046 free_cma:0 [ 1983.182141] Node 0 active_anon:142292kB inactive_anon:456kB active_file:17048kB inactive_file:16736kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:277916kB dirty:232kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1983.210479] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1983.236641] lowmem_reserve[]: 0 2837 7263 7263 [ 1983.241290] Node 0 DMA32 free:69964kB min:26344kB low:32928kB high:39512kB active_anon:50880kB inactive_anon:152kB active_file:588kB inactive_file:2168kB unevictable:0kB writepending:12kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3584kB pagetables:372kB bounce:0kB free_pcp:2804kB local_pcp:1448kB free_cma:0kB [ 1983.270500] lowmem_reserve[]: 0 0 4425 4425 [ 1983.274864] Node 0 Normal free:58376kB min:41088kB low:51360kB high:61632kB active_anon:91300kB inactive_anon:304kB active_file:16032kB inactive_file:14568kB unevictable:0kB writepending:220kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:10496kB pagetables:3672kB bounce:0kB free_pcp:1872kB local_pcp:412kB free_cma:0kB [ 1983.304587] lowmem_reserve[]: 0 0 0 0 [ 1983.308570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1983.321931] Node 0 DMA32: 564*4kB (UME) 128*8kB (UME) 129*16kB (UM) 112*32kB (UM) 136*64kB (UM) 67*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 70240kB 18:02:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1, &(0x7f0000003780)=""/232, 0xe8}}], 0x1, 0x0, &(0x7f0000003bc0)) 18:02:15 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5}, 0xb) sendto$inet(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8000000028, &(0x7f0000000300)=0x5, 0x4) recvmmsg(r0, &(0x7f0000009f00)=[{{&(0x7f0000006180)=@ax25, 0x80, &(0x7f0000000040)}}], 0x1, 0x0, &(0x7f000000a080)={0x0, 0x989680}) 18:02:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 18:02:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000002640)=@ipv6_getaddr={0x40, 0x16, 0x821, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) [ 1983.338536] Node 0 Normal: 1024*4kB (UMEH) 657*8kB (UMEH) 325*16kB (UMEH) 174*32kB (UM) 126*64kB (MH) 58*128kB (M) 25*256kB (UME) 29*512kB (MEH) 2*1024kB (M) 0*2048kB 0*4096kB = 58904kB [ 1983.355407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1983.364081] 8446 total pagecache pages [ 1983.367966] 0 pages in swap cache [ 1983.371425] Swap cache stats: add 0, delete 0, find 0/0 [ 1983.376909] Free swap = 0kB [ 1983.379943] Total swap = 0kB [ 1983.382961] 1965969 pages RAM [ 1983.386083] 0 pages HighMem/MovableOnly [ 1983.390060] 101394 pages reserved [ 1983.416669] netlink: 'syz-executor1': attribute type 17 has an invalid length. [ 1983.438398] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1983.448948] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1983.454108] CPU: 1 PID: 32171 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1983.461483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.470854] Call Trace: [ 1983.473462] dump_stack+0x14b/0x190 [ 1983.477110] warn_alloc+0x472/0x690 [ 1983.480794] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1983.485659] ? kernel_poison_pages+0x1a0/0x360 [ 1983.490340] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1983.496087] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1983.501614] kmsan_alloc_page+0x75/0xd0 [ 1983.505614] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1983.510397] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.515279] ? __msan_poison_alloca+0x173/0x1f0 [ 1983.519990] ? should_fail+0x53/0xaa0 [ 1983.523805] ? __should_failslab+0x278/0x2a0 [ 1983.528247] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.533156] alloc_pages_vma+0x1578/0x1830 [ 1983.534653] netlink: 'syz-executor1': attribute type 17 has an invalid length. [ 1983.537448] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1983.537473] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.537517] handle_mm_fault+0x4377/0x81b0 [ 1983.537540] ? kmsan_set_origin_inline+0x6b/0x120 [ 1983.537596] __do_page_fault+0xc8b/0x17e0 [ 1983.537649] do_page_fault+0x98/0xd0 [ 1983.571863] ? page_fault+0x8/0x30 [ 1983.575432] page_fault+0x1e/0x30 [ 1983.578896] RIP: 0033:0x40052d [ 1983.582101] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1983.601013] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1983.606386] RAX: 0000000020000140 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1983.613667] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000001c60848 [ 1983.620950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1983.628221] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 1983.635512] R13: 00000000001e40ec R14: 0000000000000c33 R15: badc0ffeebadface 18:02:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x80000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [0xff]}, 0x45c) 18:02:15 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280000000000003e, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="1768f85043812fb50e04483cb4d58d06e59171bb1024fc6110147da463d50b8d9827972eb2f23a73d12c254a556459fa746b1b270aeeac4506b4005fba", 0x3d}], 0x1, 0x0) 18:02:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 18:02:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000002640)=@ipv6_getaddr={0x40, 0x16, 0x821, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 18:02:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40)}}], 0x1, 0x0) 18:02:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x52, 0x4) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 18:02:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 18:02:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) 18:02:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0205000009000000000000000000000007001900000000000200000000faffffff000000000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x48}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 18:02:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x30, 0x12, 0x301, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0xffc2}}, 0x0) 18:02:16 executing program 5: unshare(0x20400) fchown(0xffffffffffffffff, 0x0, 0x0) 18:02:16 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:16 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x5, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000140)='sit0\x00') 18:02:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000002640)=@ipv6_getaddr={0x40, 0x16, 0x821, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 18:02:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') [ 1984.416904] syz-executor7: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1984.427454] syz-executor7 cpuset=syz7 mems_allowed=0 [ 1984.432604] CPU: 0 PID: 32222 Comm: syz-executor7 Not tainted 4.19.0-rc1+ #36 [ 1984.439898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.449274] Call Trace: [ 1984.451899] dump_stack+0x14b/0x190 [ 1984.455561] warn_alloc+0x472/0x690 [ 1984.459279] __alloc_pages_nodemask+0x5ae3/0x5c80 18:02:16 executing program 1: mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x0, 0x4000000000032, 0xffffffffffffffff, 0x0) unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0xffffff72) [ 1984.464231] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1984.469959] ? rb_erase_cached+0xba0/0x2c60 [ 1984.474318] ? kmsan_set_origin_inline+0x6b/0x120 [ 1984.479254] ? kmsan_set_origin_inline+0x6b/0x120 [ 1984.484141] kmsan_alloc_page+0x75/0xd0 [ 1984.488164] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1984.492994] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1984.498464] ? hrtimer_try_to_cancel+0x5c8/0xb90 [ 1984.503275] ? __msan_poison_alloca+0x173/0x1f0 [ 1984.508001] alloc_pages_vma+0x1578/0x1830 [ 1984.512309] do_huge_pmd_wp_page+0x3249/0x5260 [ 1984.516985] handle_mm_fault+0x23b7/0x81b0 [ 1984.521271] ? kmsan_set_origin_inline+0x6b/0x120 [ 1984.526206] __do_page_fault+0xc8b/0x17e0 [ 1984.530428] do_page_fault+0x98/0xd0 [ 1984.534169] ? page_fault+0x8/0x30 [ 1984.537765] page_fault+0x1e/0x30 [ 1984.541240] RIP: 0033:0x40052d [ 1984.544473] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1984.563400] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1984.568793] RAX: 0000000020000140 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1984.576076] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000002705848 [ 1984.583360] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.590649] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1984.597947] R13: 00000000009300ac R14: 00000000001e47d7 R15: 00000000001e47aa [ 1984.605273] warn_alloc_show_mem: 1 callbacks suppressed [ 1984.605280] Mem-Info: [ 1984.613126] active_anon:35634 inactive_anon:114 isolated_anon:0 [ 1984.613126] active_file:3949 inactive_file:4102 isolated_file:0 [ 1984.613126] unevictable:0 dirty:80 writeback:0 unstable:0 [ 1984.613126] slab_reclaimable:4247 slab_unreclaimable:15164 [ 1984.613126] mapped:69497 shmem:190 pagetables:980 bounce:0 [ 1984.613126] free:32895 free_pcp:1053 free_cma:0 [ 1984.646480] Node 0 active_anon:142536kB inactive_anon:456kB active_file:15796kB inactive_file:16408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:277988kB dirty:320kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 114688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1984.674597] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1984.700754] lowmem_reserve[]: 0 2837 7263 7263 [ 1984.705394] Node 0 DMA32 free:58200kB min:26344kB low:32928kB high:39512kB active_anon:50876kB inactive_anon:148kB active_file:588kB inactive_file:2120kB unevictable:0kB writepending:12kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4288kB pagetables:364kB bounce:0kB free_pcp:2804kB local_pcp:1356kB free_cma:0kB [ 1984.734622] lowmem_reserve[]: 0 0 4425 4425 [ 1984.738995] Node 0 Normal free:57476kB min:41088kB low:51360kB high:61632kB active_anon:91500kB inactive_anon:308kB active_file:14936kB inactive_file:14288kB unevictable:0kB writepending:308kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:10176kB pagetables:3556kB bounce:0kB free_pcp:1708kB local_pcp:564kB free_cma:0kB [ 1984.768720] lowmem_reserve[]: 0 0 0 0 [ 1984.772561] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1984.785914] Node 0 DMA32: 589*4kB (UME) 128*8kB (UME) 137*16kB (UM) 80*32kB (UM) 56*64kB (UM) 40*128kB (UME) 36*256kB (UME) 24*512kB (UM) 20*1024kB (M) 0*2048kB 0*4096kB = 58820kB [ 1984.802240] Node 0 Normal: 758*4kB (UMEH) 496*8kB (UMEH) 314*16kB (UMEH) 173*32kB (UM) 141*64kB (UMH) 60*128kB (UM) 25*256kB (UME) 30*512kB (UMEH) 2*1024kB (UM) 0*2048kB 0*4096kB = 58072kB [ 1984.819361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1984.827945] 7953 total pagecache pages [ 1984.831839] 0 pages in swap cache [ 1984.835309] Swap cache stats: add 0, delete 0, find 0/0 [ 1984.840678] Free swap = 0kB [ 1984.843701] Total swap = 0kB [ 1984.846724] 1965969 pages RAM [ 1984.849834] 0 pages HighMem/MovableOnly [ 1984.853811] 101394 pages reserved 18:02:17 executing program 1: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) 18:02:17 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = dup2(r0, r0) close(r1) fsync(r1) 18:02:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000002640)=@ipv6_getaddr={0x40, 0x16, 0x821, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 18:02:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 18:02:17 executing program 7: r0 = memfd_create(&(0x7f00000000c0)="00000400000000", 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000), 0x4) 18:02:17 executing program 6: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3594, 0x0, 0x0, 0x0, 0x88, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x0, 0x7}}}}}, &(0x7f00000000c0)) 18:02:17 executing program 3: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)=@ethtool_dump={0x0, 0x0, 0x0, 0x21, "9056ea79e11e16570c8ac5450e6bb96b7c1c16aef779b9abfa64c9097075fe0edc"}}) 18:02:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:17 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001000192340834b80040d8c560a067fffffff8118473fb70000000000000000ca945f64009402050028925aa80000000000000080e80900f36fa5e24beb0d43100001000204080091f8d8e985263a7b0000000000", 0x58}], 0x1) 18:02:17 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:02:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@generic={0xa, "3b51144038020de32df5ec92b47d0261b3b79a923a26c45744860e9a3c5aa6cb7730f25f63398ee297a68d5d2fadeb2c49ed7dec10d68e436382d70128c63107a97fc3bd0ee6d880a10cda24b8714b625d3a530e5a81dd4e249e01448f132dc48bffccbd22addd800d57466a5cd176911b5b5ab8e3d88793a7fd41864648"}, 0x80) 18:02:17 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x1, 0x10000000000400, 0x10000000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) [ 1985.619358] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1985.629893] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1985.635030] CPU: 1 PID: 32278 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1985.642315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.646328] netlink: 56 bytes leftover after parsing attributes in process `syz-executor2'. [ 1985.651999] Call Trace: [ 1985.652038] dump_stack+0x14b/0x190 [ 1985.652065] warn_alloc+0x472/0x690 [ 1985.652120] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1985.652153] ? kernel_poison_pages+0x1a0/0x360 [ 1985.682280] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1985.688022] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1985.694863] kmsan_alloc_page+0x75/0xd0 [ 1985.698866] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1985.703650] ? kmsan_set_origin_inline+0x6b/0x120 [ 1985.708515] ? __msan_poison_alloca+0x173/0x1f0 [ 1985.713224] ? should_fail+0x53/0xaa0 [ 1985.717059] ? __should_failslab+0x278/0x2a0 [ 1985.721497] ? kmsan_set_origin_inline+0x6b/0x120 [ 1985.726421] alloc_pages_vma+0x1578/0x1830 [ 1985.730697] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1985.735829] ? kmsan_set_origin_inline+0x6b/0x120 [ 1985.740710] handle_mm_fault+0x4377/0x81b0 [ 1985.744975] ? kmsan_set_origin_inline+0x6b/0x120 [ 1985.749864] __do_page_fault+0xc8b/0x17e0 [ 1985.754049] do_page_fault+0x98/0xd0 [ 1985.757785] ? page_fault+0x8/0x30 [ 1985.761357] page_fault+0x1e/0x30 [ 1985.764825] RIP: 0033:0x4004d1 [ 1985.768070] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1985.786991] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1985.792365] RAX: 0000000020000000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1985.799645] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000001c60848 [ 1985.806930] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1985.814219] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1985.821497] R13: 00000000009300ac R14: 00000000001e4c81 R15: 00000000001e4c54 [ 1985.828790] Mem-Info: [ 1985.831249] active_anon:33543 inactive_anon:112 isolated_anon:0 [ 1985.831249] active_file:3422 inactive_file:3836 isolated_file:0 [ 1985.831249] unevictable:0 dirty:83 writeback:0 unstable:0 [ 1985.831249] slab_reclaimable:4245 slab_unreclaimable:15165 [ 1985.831249] mapped:69159 shmem:190 pagetables:950 bounce:0 [ 1985.831249] free:43011 free_pcp:1099 free_cma:0 18:02:17 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:17 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/124, 0x7c, &(0x7f0000000240)=""/96, 0x0, 0x2}}, 0x68) [ 1985.864691] Node 0 active_anon:131932kB inactive_anon:448kB active_file:13688kB inactive_file:15344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:276636kB dirty:332kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 120832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1985.893058] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1985.919219] lowmem_reserve[]: 0 2837 7263 7263 [ 1985.923865] Node 0 DMA32 free:102508kB min:26344kB low:32928kB high:39512kB active_anon:40612kB inactive_anon:148kB active_file:588kB inactive_file:2072kB unevictable:0kB writepending:12kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3392kB pagetables:364kB bounce:0kB free_pcp:2768kB local_pcp:1404kB free_cma:0kB [ 1985.953142] lowmem_reserve[]: 0 0 4425 4425 [ 1985.957531] Node 0 Normal free:61292kB min:41088kB low:51360kB high:61632kB active_anon:91336kB inactive_anon:300kB active_file:12940kB inactive_file:13220kB unevictable:0kB writepending:320kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:10432kB pagetables:3436kB bounce:0kB free_pcp:512kB local_pcp:252kB free_cma:0kB [ 1985.987161] lowmem_reserve[]: 0 0 0 0 [ 1985.991497] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1986.004858] Node 0 DMA32: 589*4kB (UME) 137*8kB (UME) 137*16kB (UM) 113*32kB (UM) 149*64kB (UM) 70*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 9*2048kB (UM) 3*4096kB (U) = 102508kB [ 1986.022265] Node 0 Normal: 1059*4kB (UMEH) 608*8kB (UMEH) 339*16kB (UMEH) 195*32kB (UM) 133*64kB (UMH) 70*128kB (UM) 27*256kB (UME) 28*512kB (MEH) 2*1024kB (UM) 0*2048kB 0*4096kB = 61532kB [ 1986.039695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1986.048282] 7440 total pagecache pages [ 1986.052171] 0 pages in swap cache [ 1986.055741] Swap cache stats: add 0, delete 0, find 0/0 [ 1986.061111] Free swap = 0kB [ 1986.064132] Total swap = 0kB [ 1986.067152] 1965969 pages RAM 18:02:18 executing program 1: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) 18:02:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x8, 0x2a) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x80, 0x4) [ 1986.070271] 0 pages HighMem/MovableOnly [ 1986.074251] 101394 pages reserved 18:02:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:02:18 executing program 2: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) [ 1986.478124] syz-executor2: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1986.488711] syz-executor2 cpuset=syz2 mems_allowed=0 [ 1986.493853] CPU: 1 PID: 32308 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #36 [ 1986.501136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.510507] Call Trace: [ 1986.513129] dump_stack+0x14b/0x190 [ 1986.516781] warn_alloc+0x472/0x690 [ 1986.520462] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1986.525339] ? kernel_poison_pages+0x1a0/0x360 [ 1986.530006] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1986.535763] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1986.541286] kmsan_alloc_page+0x75/0xd0 [ 1986.545323] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1986.550112] ? kmsan_set_origin_inline+0x6b/0x120 [ 1986.555090] ? __msan_poison_alloca+0x173/0x1f0 [ 1986.559792] ? should_fail+0x53/0xaa0 [ 1986.563635] ? __should_failslab+0x278/0x2a0 [ 1986.568073] ? kmsan_set_origin_inline+0x6b/0x120 [ 1986.572982] alloc_pages_vma+0x1578/0x1830 [ 1986.577261] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1986.582408] ? kmsan_set_origin_inline+0x6b/0x120 [ 1986.587300] handle_mm_fault+0x4377/0x81b0 [ 1986.591554] ? kmsan_set_origin_inline+0x6b/0x120 [ 1986.596445] __do_page_fault+0xc8b/0x17e0 [ 1986.600635] do_page_fault+0x98/0xd0 [ 1986.604364] ? page_fault+0x8/0x30 [ 1986.607922] page_fault+0x1e/0x30 [ 1986.611385] RIP: 0033:0x43e4b7 18:02:18 executing program 7: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080), 0x8) 18:02:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f00000001c0)={{}, {0xe}}) 18:02:18 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:18 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}}}}}, 0x0) 18:02:18 executing program 1: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) [ 1986.614593] Code: 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 00 48 8b 0e 4c 8b 46 08 <48> 89 0f 4c 89 47 08 83 ea 10 48 8d 76 10 48 8d 7f 10 75 e5 f3 c3 [ 1986.633504] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1986.638887] RAX: 0000000020000040 RBX: fffffffffffffffe RCX: 00000030646e6f62 [ 1986.646205] RDX: 0000000000000010 RSI: 00000000007300c8 RDI: 0000000020000040 [ 1986.653491] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000001 [ 1986.660790] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1986.668070] R13: 00000000009300ac R14: 00000000001e4fe6 R15: 00000000001e4fb9 [ 1986.735545] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1986.746094] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1986.751250] CPU: 1 PID: 32302 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1986.758538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.767920] Call Trace: [ 1986.770547] dump_stack+0x14b/0x190 [ 1986.774230] warn_alloc+0x472/0x690 [ 1986.777931] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1986.782829] ? __kernel_text_address+0x250/0x350 [ 1986.787631] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1986.793166] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1986.798961] ? kmsan_set_origin_inline+0x6b/0x120 [ 1986.803859] kmsan_alloc_page+0x75/0xd0 [ 1986.807872] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1986.812672] ? free_unref_page_list+0x6b/0x860 [ 1986.817271] ? release_pages+0x1632/0x1650 [ 1986.821530] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1986.826923] ? mem_cgroup_uncharge_list+0x79/0x220 [ 1986.831887] ? release_pages+0x1632/0x1650 [ 1986.836191] ? __pagevec_lru_add_fn+0xd09/0x1060 [ 1986.840985] ? __msan_poison_alloca+0x173/0x1f0 [ 1986.845693] alloc_pages_vma+0x1578/0x1830 [ 1986.849985] do_huge_pmd_wp_page+0x3249/0x5260 [ 1986.854593] ? update_cfs_rq_load_avg+0x5df/0xa00 [ 1986.859532] handle_mm_fault+0x23b7/0x81b0 [ 1986.863805] ? kmsan_set_origin_inline+0x6b/0x120 [ 1986.868717] __do_page_fault+0xc8b/0x17e0 [ 1986.872939] do_page_fault+0x98/0xd0 [ 1986.876705] page_fault+0x1e/0x30 [ 1986.880207] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 18:02:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000580), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) [ 1986.886115] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1986.905030] RSP: 0018:ffff8800247cf7c8 EFLAGS: 00010206 [ 1986.910414] RAX: ffffffff84085f05 RBX: 0000000000008000 RCX: 0000000000000d60 [ 1986.917704] RDX: 0000000000008000 RSI: ffff88000ca5f2a0 RDI: 0000000020600000 [ 1986.924990] RBP: ffff8800247cf8d8 R08: 0000000000480020 R09: 0000000000000002 [ 1986.932296] R10: ffffea00004be100 R11: 0000000080100008 R12: 0000000000000000 [ 1986.939588] R13: 0000000000008000 R14: 00000000be6000d6 R15: 00000000205f8d60 [ 1986.946895] ? copy_page_to_iter+0x6d5/0x1ac0 [ 1986.951434] ? copy_page_to_iter+0x71d/0x1ac0 [ 1986.956003] skb_copy_datagram_iter+0x7bd/0xf20 [ 1986.960733] tcp_recvmsg+0x1ce0/0x4280 [ 1986.964711] ? tcp_mmap+0x150/0x150 [ 1986.968384] inet_recvmsg+0x4d0/0x5e0 [ 1986.972232] ? security_socket_recvmsg+0xa4/0x220 [ 1986.977121] ? inet_sendpage+0x8b0/0x8b0 [ 1986.981225] __sys_recvfrom+0x61e/0x7f0 [ 1986.985247] ? prepare_exit_to_usermode+0x46/0x410 [ 1986.990739] ? syscall_return_slowpath+0xdb/0x700 [ 1986.995636] __x64_sys_recvfrom+0x1a2/0x210 [ 1986.999993] ? __sys_recvfrom+0x7f0/0x7f0 [ 1987.004160] do_syscall_64+0x15b/0x220 [ 1987.008100] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1987.013311] RIP: 0033:0x457089 [ 1987.016529] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1987.035443] RSP: 002b:00007f83db93dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1987.043206] RAX: ffffffffffffffda RBX: 00007f83db93e6d4 RCX: 0000000000457089 [ 1987.050519] RDX: fffffffffffffe61 RSI: 0000000020000200 RDI: 0000000000000005 [ 1987.057812] RBP: 0000000000930140 R08: 0000000000000000 R09: 9cbc56ffa29bd621 [ 1987.065101] R10: 0000000040000100 R11: 0000000000000246 R12: 00000000ffffffff [ 1987.072385] R13: 00000000004d3810 R14: 00000000004c84ec R15: 0000000000000001 [ 1987.079718] warn_alloc_show_mem: 1 callbacks suppressed 18:02:19 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) [ 1987.079723] Mem-Info: [ 1987.087562] active_anon:34554 inactive_anon:113 isolated_anon:0 [ 1987.087562] active_file:3470 inactive_file:3907 isolated_file:0 [ 1987.087562] unevictable:0 dirty:99 writeback:0 unstable:0 [ 1987.087562] slab_reclaimable:4244 slab_unreclaimable:15168 [ 1987.087562] mapped:69248 shmem:191 pagetables:919 bounce:0 [ 1987.087562] free:36145 free_pcp:855 free_cma:0 18:02:19 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x100, 0x4) sendto$inet6(r0, &(0x7f0000000000)="040400000700000000000000fff55b4202938207d9fb3780398deced795000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b500340437e45797b6256f1e6414efcb8d9ff5ff60000000faffffff00000000aeb46245004bae135664249064c778d844ba3e27e2c23db7e9", 0x78, 0x8005, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000004, @mcast1, 0x2000}, 0x1c) 18:02:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1987.120800] Node 0 active_anon:138216kB inactive_anon:452kB active_file:13880kB inactive_file:15628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:276992kB dirty:396kB writeback:0kB shmem:764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 108544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1987.148930] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1987.175125] lowmem_reserve[]: 0 2837 7263 7263 [ 1987.179800] Node 0 DMA32 free:71228kB min:26344kB low:32928kB high:39512kB active_anon:46756kB inactive_anon:148kB active_file:572kB inactive_file:2080kB unevictable:0kB writepending:12kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3968kB pagetables:364kB bounce:0kB free_pcp:2768kB local_pcp:1404kB free_cma:0kB [ 1987.208996] lowmem_reserve[]: 0 0 4425 4425 [ 1987.213368] Node 0 Normal free:57968kB min:41088kB low:51360kB high:61632kB active_anon:91244kB inactive_anon:304kB active_file:13260kB inactive_file:13500kB unevictable:0kB writepending:384kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:10112kB pagetables:3312kB bounce:0kB free_pcp:1584kB local_pcp:424kB free_cma:0kB [ 1987.243093] lowmem_reserve[]: 0 0 0 0 [ 1987.246943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1987.260294] Node 0 DMA32: 589*4kB (UME) 134*8kB (UME) 137*16kB (UM) 113*32kB (UM) 128*64kB (UM) 72*128kB (UME) 43*256kB (UME) 24*512kB (UM) 21*1024kB (UM) 0*2048kB 0*4096kB = 71444kB [ 1987.276906] Node 0 Normal: 548*4kB (UMEH) 555*8kB (MEH) 262*16kB (UMEH) 170*32kB (M) 130*64kB (UMH) 65*128kB (M) 24*256kB (UME) 29*512kB (UMEH) 3*1024kB (UM) 0*2048kB 0*4096kB = 56968kB [ 1987.293769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1987.302366] 7581 total pagecache pages [ 1987.306260] 0 pages in swap cache [ 1987.309717] Swap cache stats: add 0, delete 0, find 0/0 [ 1987.315104] Free swap = 0kB [ 1987.318127] Total swap = 0kB [ 1987.321155] 1965969 pages RAM [ 1987.324273] 0 pages HighMem/MovableOnly [ 1987.328253] 101394 pages reserved [ 1987.446895] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1987.457414] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1987.462556] CPU: 1 PID: 32342 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1987.469854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.479219] Call Trace: [ 1987.481828] dump_stack+0x14b/0x190 [ 1987.485475] warn_alloc+0x472/0x690 [ 1987.489153] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1987.494032] ? kernel_poison_pages+0x1a0/0x360 [ 1987.498697] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1987.504455] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1987.509989] kmsan_alloc_page+0x75/0xd0 [ 1987.513998] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1987.518783] ? kmsan_set_origin_inline+0x6b/0x120 [ 1987.523647] ? __msan_poison_alloca+0x173/0x1f0 [ 1987.528365] ? should_fail+0x53/0xaa0 [ 1987.532201] ? __should_failslab+0x278/0x2a0 [ 1987.536636] ? kmsan_set_origin_inline+0x6b/0x120 [ 1987.541559] alloc_pages_vma+0x1578/0x1830 [ 1987.545839] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1987.550967] ? kmsan_set_origin_inline+0x6b/0x120 [ 1987.555855] handle_mm_fault+0x4377/0x81b0 [ 1987.560110] ? kmsan_set_origin_inline+0x6b/0x120 [ 1987.565007] __do_page_fault+0xc8b/0x17e0 [ 1987.569212] do_page_fault+0x98/0xd0 [ 1987.572945] ? page_fault+0x8/0x30 [ 1987.576502] page_fault+0x1e/0x30 [ 1987.579966] RIP: 0033:0x43e531 [ 1987.583185] Code: 2e 0f 1f 84 00 00 00 00 00 48 81 fa 00 04 00 00 77 77 89 d1 c1 e9 05 74 60 ff c9 48 8b 06 4c 8b 46 08 4c 8b 4e 10 4c 8b 56 18 <48> 89 07 4c 89 47 08 4c 89 4f 10 4c 89 57 18 48 8d 76 20 48 8d 7f [ 1987.602115] RSP: 002b:0000000000a3fc18 EFLAGS: 00010246 [ 1987.607509] RAX: 0002000200000005 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1987.614793] RDX: 0000000000000020 RSI: 0000000000730080 RDI: 000000002001bc78 [ 1987.622078] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000030300000018 [ 1987.629360] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000003e8 [ 1987.636646] R13: 00000000009300ac R14: 00000000001e53ab R15: 00000000001e537e 18:02:19 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffe97, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r2, &(0x7f0000000200)=""/101, 0xfffffffffffffe61, 0x40000100, 0x0, 0x9cbc56ffa29bd621) shutdown(r2, 0x1) 18:02:19 executing program 1: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) 18:02:19 executing program 2: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) 18:02:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x1a60f91) r3 = epoll_create(0xf) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:02:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_gfeatures={0x3a, 0x2, [{0x9, 0xff0000000000, 0x7, 0x10001}, {0x0, 0x9}]}}) 18:02:19 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0xff55) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote, 0x1ff}, r1}}, 0x30) 18:02:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000002, 0xfd7c) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="cd", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000400)='4', 0x1, 0x0, &(0x7f00000004c0), 0x10) recvfrom$inet(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x2, 0x0, 0x0) 18:02:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x3, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) 18:02:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100402}}, 0x50) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=@known='system.posix_acl_access\x00') read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 18:02:20 executing program 2: r0 = socket(0xa, 0x80005, 0x0) fchdir(r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000}) 18:02:20 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x202, 0x0) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 18:02:20 executing program 1: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) write$binfmt_aout(r0, &(0x7f00000002c0), 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000008c0)=0x7fe, 0x370) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) write(r0, &(0x7f0000000900)="89f9d765312b4044aedbefb0967bdae72ee5094371136a6477ba0a51a2969dbc2d4028ac7b5af67f178f9314ea2bb3ac1c442eaf749c21ae2af8e39a40c3dc032e6f8eb738786a79df71302ff3b5d42731597d995bed6103ff63b9a908bcc05e02e4f4f692bdf4d3282f62d6928117f82c2dae48742dac857de846096e82c1a02e1edcadda721a3f8dc9a54da05d467ed35b6f931d8686986960e756048c61c2a2c374c318d21d7a7ef550779190066e82ea3f6724a9f61ff028ec7e8d7a04352e7a78f777a68b823abb646bdc55dbde285ce15bf45820f0ae20e4023f57c71f8b41e08eff14c3441485c6f54a30750c780852dad879d6d4be7243bd07f841f8903fcb65f7c23d6b4f70fe48b54577449cfcbc4d5dbefb8b465d45bc2d11afbe7bfbe6ca76ac259e634eebf8db694ff02fe2b4c80783b443ef68287e9cf7cbcc2ee196f10c4ffb3f59e4921e0f9f08cba9a2c56c49fa7465b4836da5b2d9b142763889caa718d8a4fcb2f3ef6dc6185708fb1e0f9081d29fb3defae8c525f47437c7835b4eac8f86e2a22a81eff4120340e4a379446aac45dbff791d147805cd2748d74b8996c9b51ec03b410ef8fe126117fbf106795bc1b25d8dd786b6496bd743b7c75c638b516214ff56ec99a9c0f2919fa781cd8b4f2f2e425a6780c630a05c8e60011bc8e10055a6b6b652e5a13c73fd96f79038a65d6991ac38899ab98486d92bbcffdcf39a08a248ae1045ff8c6123de2f15d9ac360a3497c07001a3a1936ff1c03194ace131d380f515629ff016bd890ff822704c0db8bc68efad2eace5466628e7d6c2f2b3043698c46fdd62588fc54b72a786af0d026353879892c58007f7988a3f2240a43303218cc1df27807bfbde117c505f060396850a82459830a89a6a8601ea2e47f2e41379d110b96576f8f7705bba7ec63d6b44ccf84073cf9bdcf1aee48cb60c2f6dd3e89f3626a5e23339ea99c918d76a43fecf5601f7550e8eaefa4d84f1143320599daf7699858b2bf408e9093aa91d6dd9ae39d8decf3f7a199b0c1918d47be3b7aeff9a8c10efabe787b43141e7abaa4317158864b0361568140ab79cade1223c3ef81da4c4eefdd5b21fcc1b87872fc3b346737905589b84ba9814679b7510ed9b4f290083ee634ae12243ccc63413d7bc35eee0d1a4bc9dd33c37f5130303edddfc2636ffbf1ee0febb953436710c2ed9bd001d2ebe878788ddf7f7ad55b7a8cbcb348e82cd65b59315858086606115d04a3cda0e4af2a703afe09e4afedf00d5fbb2284df9af1d1ec9f15356c58fdcde45fff250568347f3b0b49e11e44c0a4d98a1e3393ce5d76614990f23b2e146842b166fb070894c128f957b0cc7d80a16275efd15659e0f81990062ebfdf9454d12e63d1ce1dad7848fcbab642a0d62ebb17abc824883e4c6e1e81992f28f5bbd7b26e2645c7941b03dd2f27c29baa2412976a05fa13d8fc4d6bd152a8568d986a9cf605b8b4a61600481e01bdd74c96d73390518add968100ac742aaf5dd91b4ccf0868ee3ef7f12c32298737dea65bd5d7161dd679b4dd6799aa086bf3b8c889780ac102b7b1ebcf2569dd77f201d74d94a61400ced9c613414012b451628a96e6cc8fe738e964940f7b753065677776f3b5398975aeac974fced560667cead03a8976eb42296f4e1bca5588d5d544cbca8588215a2f5ef7a5fc1a07438d3a3e05d21eb30d46f1688543d4327d36e07635396eaab4e9bc862ee9c7fa24de38c5cbf8fa5afd024116bc84854d01072165ecc4bb415d94a333e0d91e9cf6fda5a2c244a585e3a32c95398f44800c578faf4a2ccc5979664db7a55aa5cc02789f84321ccaeed4f37dd48c8d1484ade0588fc4255ec8780534a693e2bfe88b622034552084492c6757429239bbe8dad8b904e58007639ca773344040a441dc0027a46c22198f3d0b0588e164881a9fc7a85a63c459b0d002e3d890edd250742d363e85250badb91a734759baf773c32b177d36eefb662be70", 0x595) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") 18:02:20 executing program 0: creat(&(0x7f0000000040)='./file1\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 18:02:20 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, 0x0) 18:02:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000340)="0300", 0x2, 0x800000000008000, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000080)="0900d1538e045a8700800020000011000055a6c9c2d25fe1f7ef", 0x1a, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 18:02:20 executing program 7: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) [ 1988.578650] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1988.589209] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1988.594391] CPU: 1 PID: 32372 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1988.601692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.611062] Call Trace: [ 1988.613692] dump_stack+0x14b/0x190 [ 1988.617360] warn_alloc+0x472/0x690 [ 1988.621052] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1988.625928] ? kernel_poison_pages+0x1a0/0x360 [ 1988.630618] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1988.636368] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1988.641892] kmsan_alloc_page+0x75/0xd0 [ 1988.645897] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1988.650693] ? kmsan_set_origin_inline+0x6b/0x120 [ 1988.655580] ? __msan_poison_alloca+0x173/0x1f0 [ 1988.660295] ? kmsan_set_origin_inline+0x6b/0x120 [ 1988.665208] alloc_pages_vma+0x1578/0x1830 [ 1988.669497] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1988.674626] ? kmsan_set_origin_inline+0x6b/0x120 [ 1988.679522] handle_mm_fault+0x4377/0x81b0 [ 1988.683785] ? kmsan_set_origin_inline+0x6b/0x120 [ 1988.688693] __do_page_fault+0xc8b/0x17e0 [ 1988.692898] do_page_fault+0x98/0xd0 [ 1988.696632] ? page_fault+0x8/0x30 [ 1988.700200] page_fault+0x1e/0x30 [ 1988.703670] RIP: 0033:0x40052d [ 1988.706919] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1988.725837] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1988.731235] RAX: 0000000020000140 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1988.738520] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000001cc5848 [ 1988.745804] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1988.753088] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1988.760366] R13: 00000000009300ac R14: 00000000001e5811 R15: 00000000001e57e4 [ 1988.767667] warn_alloc_show_mem: 1 callbacks suppressed [ 1988.767673] Mem-Info: [ 1988.775534] active_anon:35557 inactive_anon:110 isolated_anon:0 [ 1988.775534] active_file:3496 inactive_file:3950 isolated_file:0 [ 1988.775534] unevictable:0 dirty:120 writeback:0 unstable:0 [ 1988.775534] slab_reclaimable:4244 slab_unreclaimable:15170 [ 1988.775534] mapped:69260 shmem:190 pagetables:980 bounce:0 [ 1988.775534] free:35302 free_pcp:938 free_cma:0 18:02:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) sendfile(r1, r1, &(0x7f0000000140)=0x5c, 0x1cf5) 18:02:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xfffffffffffffe62, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 1988.808858] Node 0 active_anon:142228kB inactive_anon:440kB active_file:13984kB inactive_file:15800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:277040kB dirty:480kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 120832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1988.836991] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1988.863160] lowmem_reserve[]: 0 2837 7263 7263 [ 1988.867796] Node 0 DMA32 free:69076kB min:26344kB low:32928kB high:39512kB active_anon:50852kB inactive_anon:148kB active_file:572kB inactive_file:2080kB unevictable:0kB writepending:12kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4352kB pagetables:364kB bounce:0kB free_pcp:2768kB local_pcp:1404kB free_cma:0kB [ 1988.897016] lowmem_reserve[]: 0 0 4425 4425 [ 1988.901388] Node 0 Normal free:56228kB min:41088kB low:51360kB high:61632kB active_anon:91444kB inactive_anon:292kB active_file:13412kB inactive_file:13720kB unevictable:0kB writepending:468kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9792kB pagetables:3384kB bounce:0kB free_pcp:1076kB local_pcp:244kB free_cma:0kB [ 1988.931033] lowmem_reserve[]: 0 0 0 0 [ 1988.934879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1988.948240] Node 0 DMA32: 589*4kB (UME) 116*8kB (UME) 137*16kB (UM) 113*32kB (UM) 101*64kB (UM) 73*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 68932kB 18:02:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000580), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x4ab, &(0x7f0000000040)=""/251}, 0x48) [ 1988.964752] Node 0 Normal: 437*4kB (MEH) 555*8kB (UMEH) 264*16kB (MEH) 171*32kB (UM) 128*64kB (UMH) 68*128kB (UM) 24*256kB (UME) 28*512kB (MEH) 2*1024kB (UM) 0*2048kB 0*4096kB = 55308kB [ 1988.981616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1988.990706] 7636 total pagecache pages [ 1988.993542] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1988.994598] 0 pages in swap cache [ 1988.994610] Swap cache stats: add 0, delete 0, find 0/0 [ 1988.994617] Free swap = 0kB [ 1988.994623] Total swap = 0kB [ 1988.994633] 1965969 pages RAM [ 1988.994639] 0 pages HighMem/MovableOnly [ 1988.994646] 101394 pages reserved [ 1989.025032] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1989.041524] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1989.046670] CPU: 1 PID: 32405 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1989.053944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.063419] Call Trace: [ 1989.066037] dump_stack+0x14b/0x190 [ 1989.069686] warn_alloc+0x472/0x690 [ 1989.073381] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1989.078250] ? kernel_poison_pages+0x1a0/0x360 [ 1989.082916] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1989.088667] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1989.094213] kmsan_alloc_page+0x75/0xd0 [ 1989.098224] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1989.103005] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.107871] ? __msan_poison_alloca+0x173/0x1f0 [ 1989.112628] ? should_fail+0x53/0xaa0 [ 1989.116446] ? __should_failslab+0x278/0x2a0 [ 1989.120906] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.125838] alloc_pages_vma+0x1578/0x1830 [ 1989.130128] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1989.135266] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.140162] handle_mm_fault+0x4377/0x81b0 [ 1989.144443] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.149377] __do_page_fault+0xc8b/0x17e0 [ 1989.153578] do_page_fault+0x98/0xd0 [ 1989.157316] ? page_fault+0x8/0x30 [ 1989.160878] page_fault+0x1e/0x30 [ 1989.164351] RIP: 0033:0x43e461 [ 1989.167585] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1989.186503] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1989.191887] RAX: 0000000020000040 RBX: fffffffffffffffe RCX: 000000000000002e [ 1989.199179] RDX: 000000000000000d RSI: 0000000000730020 RDI: 0000000020000040 [ 1989.206460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 1989.213746] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000007 [ 1989.221023] R13: 00000000001e5531 R14: 0000000000000c3a R15: badc0ffeebadface [ 1989.242694] syz-executor2: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1989.253209] syz-executor2 cpuset=syz2 mems_allowed=0 [ 1989.258367] CPU: 0 PID: 32410 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #36 [ 1989.265651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.275026] Call Trace: [ 1989.278045] dump_stack+0x14b/0x190 [ 1989.281701] warn_alloc+0x472/0x690 [ 1989.285386] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1989.290266] ? kernel_poison_pages+0x1a0/0x360 [ 1989.294944] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1989.300681] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.305618] kmsan_alloc_page+0x75/0xd0 [ 1989.309629] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1989.314408] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1989.319796] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1989.325196] ? memcg_check_events+0x74/0xf20 [ 1989.329638] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.334532] ? __msan_poison_alloca+0x173/0x1f0 [ 1989.339278] alloc_pages_vma+0x1578/0x1830 [ 1989.343552] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1989.348677] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.353559] handle_mm_fault+0x4377/0x81b0 [ 1989.357813] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.362715] __do_page_fault+0xc8b/0x17e0 [ 1989.366909] do_page_fault+0x98/0xd0 [ 1989.370651] ? page_fault+0x8/0x30 [ 1989.374214] page_fault+0x1e/0x30 [ 1989.377687] RIP: 0033:0x43e499 [ 1989.380895] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 [ 1989.399813] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1989.405193] RAX: 0000000020000180 RBX: fffffffffffffffe RCX: 0030656c69662f2e [ 1989.412476] RDX: 0000000000000008 RSI: 0000000000730418 RDI: 0000000020000180 [ 1989.419752] RBP: 0000000000930aa0 R08: 0000000000000016 R09: 0000000000000001 [ 1989.427032] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1989.434321] R13: 00000000009300ac R14: 00000000001e5aa3 R15: 00000000001e5a76 18:02:21 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local}], 0x1c) 18:02:21 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8800, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) dup2(r0, r2) 18:02:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="cb", 0x1}], 0x1) 18:02:21 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff}) dup2(r4, r3) dup2(r4, r2) 18:02:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 1989.639697] syz-executor6: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1989.650240] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1989.655384] CPU: 0 PID: 32434 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1989.662665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.672027] Call Trace: [ 1989.674639] dump_stack+0x14b/0x190 [ 1989.678295] warn_alloc+0x472/0x690 [ 1989.681974] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1989.686840] ? kernel_poison_pages+0x1a0/0x360 [ 1989.691529] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1989.697314] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1989.702852] kmsan_alloc_page+0x75/0xd0 [ 1989.706907] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1989.711693] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.716567] ? __msan_poison_alloca+0x173/0x1f0 [ 1989.721274] ? should_fail+0x53/0xaa0 [ 1989.725094] ? __should_failslab+0x278/0x2a0 [ 1989.729543] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.734452] alloc_pages_vma+0x1578/0x1830 [ 1989.738736] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1989.743861] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.748762] handle_mm_fault+0x4377/0x81b0 [ 1989.753020] ? kmsan_set_origin_inline+0x6b/0x120 [ 1989.757926] __do_page_fault+0xc8b/0x17e0 [ 1989.762122] do_page_fault+0x98/0xd0 [ 1989.765870] ? page_fault+0x8/0x30 [ 1989.769438] page_fault+0x1e/0x30 [ 1989.772941] RIP: 0033:0x4004d1 18:02:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000025c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000002340), 0x0, &(0x7f0000002500)=[@sndrcv={0x30}, @prinfo={0x18}], 0x48}, 0x0) 18:02:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/240) [ 1989.776194] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1989.795122] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1989.800512] RAX: 00000000202aafe4 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1989.807798] RDX: 000000000000000a RSI: 0000000000000000 RDI: 000000000279e848 [ 1989.815077] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1989.822368] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1989.829644] R13: 00000000009300ac R14: 00000000001e5c35 R15: 00000000001e5c08 18:02:21 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}) 18:02:22 executing program 5: perf_event_open(&(0x7f0000001f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000000efff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000001f64)="967d34f201000005100000009c") 18:02:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 18:02:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) 18:02:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000200)="050300000500000000001e00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e7725f58a55afce0b86f61f7402810c3aae5", 0x3c, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000005, @ipv4={[], [], @multicast2}}, 0x1c) 18:02:22 executing program 7: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 18:02:22 executing program 4: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 18:02:22 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x180000000000002) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x7) 18:02:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 18:02:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") clock_gettime(0x0, &(0x7f0000007240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007080)=[{{&(0x7f00000062c0)=@l2, 0x80, &(0x7f0000006700), 0x0, &(0x7f0000006780)=""/242, 0xf2}}, {{&(0x7f0000006e40)=@hci, 0x80, &(0x7f0000006f80), 0x0, &(0x7f0000006fc0)=""/166, 0xa6}}], 0x2, 0x40010043, &(0x7f0000007280)={0x0, r2+30000000}) [ 1990.511942] syz-executor0: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1990.522481] syz-executor0 cpuset=syz0 mems_allowed=0 [ 1990.527654] CPU: 0 PID: 32485 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #36 [ 1990.534936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.544302] Call Trace: [ 1990.546915] dump_stack+0x14b/0x190 [ 1990.550573] warn_alloc+0x472/0x690 [ 1990.554290] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1990.559159] ? kernel_poison_pages+0x1a0/0x360 [ 1990.563836] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1990.569230] ? update_load_avg+0x6c4/0x1a00 [ 1990.573619] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1990.579380] ? kmsan_set_origin_inline+0x6b/0x120 [ 1990.584307] kmsan_alloc_page+0x75/0xd0 [ 1990.588312] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1990.593089] ? task_kmsan_context_state+0x5e/0x110 [ 1990.598047] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1990.603431] ? vmalloc_to_page+0x57d/0x6b0 [ 1990.607689] ? task_kmsan_context_state+0x5e/0x110 [ 1990.612652] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1990.618036] ? vmalloc_to_page+0x57d/0x6b0 [ 1990.622310] ? vmalloc_to_page_or_null+0x3b/0xa0 [ 1990.627119] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 1990.632625] alloc_pages_vma+0x1578/0x1830 [ 1990.636900] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1990.642031] ? kmsan_set_origin_inline+0x6b/0x120 [ 1990.646923] handle_mm_fault+0x4377/0x81b0 [ 1990.651227] ? kmsan_set_origin_inline+0x6b/0x120 [ 1990.656135] __do_page_fault+0xc8b/0x17e0 [ 1990.660341] do_page_fault+0x98/0xd0 [ 1990.664078] ? page_fault+0x8/0x30 [ 1990.667646] page_fault+0x1e/0x30 [ 1990.671114] RIP: 0033:0x4004d1 [ 1990.674358] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 1990.693277] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1990.698659] RAX: 0000000020000000 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1990.705950] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000002953848 [ 1990.713242] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1990.720520] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1990.727827] R13: 00000000009300ac R14: 00000000001e5fa8 R15: 00000000001e5f7b [ 1990.735151] warn_alloc_show_mem: 3 callbacks suppressed [ 1990.735157] Mem-Info: [ 1990.743015] active_anon:35083 inactive_anon:112 isolated_anon:0 [ 1990.743015] active_file:3305 inactive_file:3663 isolated_file:0 [ 1990.743015] unevictable:0 dirty:137 writeback:0 unstable:0 [ 1990.743015] slab_reclaimable:4244 slab_unreclaimable:15171 [ 1990.743015] mapped:69266 shmem:189 pagetables:1008 bounce:0 [ 1990.743015] free:36977 free_pcp:975 free_cma:0 [ 1990.776419] Node 0 active_anon:140332kB inactive_anon:448kB active_file:13100kB inactive_file:14652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:277064kB dirty:548kB writeback:0kB shmem:756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 120832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1990.804545] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1990.830713] lowmem_reserve[]: 0 2837 7263 7263 [ 1990.835340] Node 0 DMA32 free:79580kB min:26344kB low:32928kB high:39512kB active_anon:48804kB inactive_anon:148kB active_file:572kB inactive_file:536kB unevictable:0kB writepending:12kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4480kB pagetables:364kB bounce:0kB free_pcp:2780kB local_pcp:1364kB free_cma:0kB [ 1990.864465] lowmem_reserve[]: 0 0 4425 4425 [ 1990.868831] Node 0 Normal free:53448kB min:41088kB low:51360kB high:61632kB active_anon:91476kB inactive_anon:300kB active_file:12512kB inactive_file:14016kB unevictable:0kB writepending:536kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9728kB pagetables:3668kB bounce:0kB free_pcp:1300kB local_pcp:840kB free_cma:0kB [ 1990.898931] lowmem_reserve[]: 0 0 0 0 [ 1990.902774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1990.916210] Node 0 DMA32: 1558*4kB (UME) 266*8kB (UME) 168*16kB (UM) 121*32kB (UM) 102*64kB (UM) 73*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 80968kB [ 1990.933492] Node 0 Normal: 482*4kB (MEH) 556*8kB (MEH) 266*16kB (UMEH) 172*32kB (UM) 131*64kB (UMH) 64*128kB (UM) 23*256kB (ME) 27*512kB (MEH) 1*1024kB (U) 0*2048kB 0*4096kB = 53448kB [ 1990.950193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1990.958782] 6949 total pagecache pages 18:02:23 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8800, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) dup2(r0, r2) [ 1990.962674] 0 pages in swap cache [ 1990.966141] Swap cache stats: add 0, delete 0, find 0/0 [ 1990.971521] Free swap = 0kB [ 1990.974559] Total swap = 0kB [ 1990.977581] 1965969 pages RAM [ 1990.980691] 0 pages HighMem/MovableOnly [ 1990.984670] 101394 pages reserved 18:02:23 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) socket$inet6(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="36a79887db5dad", 0x7, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0), 0x0, &(0x7f0000002180)=""/164, 0xa4}}], 0x1, 0x0, 0x0) 18:02:23 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000009940)=[{{&(0x7f0000002580)=@can, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000009bc0)={0x77359400}) 18:02:23 executing program 0: socketpair(0xb, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001400)=0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) chdir(&(0x7f0000001440)='./file0\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) 18:02:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\r'], 0x1) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000001600)='F', 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f00000005c0), 0x1000) 18:02:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 1991.243377] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1991.253923] syz-executor5 cpuset=syz5 mems_allowed=0 [ 1991.259069] CPU: 1 PID: 32499 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 1991.266355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.275728] Call Trace: [ 1991.278358] dump_stack+0x14b/0x190 [ 1991.282012] warn_alloc+0x472/0x690 [ 1991.285690] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1991.290586] ? kernel_poison_pages+0x1a0/0x360 [ 1991.295289] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1991.301089] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1991.306628] kmsan_alloc_page+0x75/0xd0 [ 1991.310633] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1991.315416] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.320302] ? __msan_poison_alloca+0x173/0x1f0 [ 1991.325003] ? should_fail+0x53/0xaa0 [ 1991.328823] ? __should_failslab+0x278/0x2a0 [ 1991.333259] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.338233] alloc_pages_vma+0x1578/0x1830 [ 1991.342507] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1991.347641] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.352544] handle_mm_fault+0x4377/0x81b0 [ 1991.356809] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.361728] __do_page_fault+0xc8b/0x17e0 [ 1991.365932] do_page_fault+0x98/0xd0 [ 1991.369677] ? page_fault+0x8/0x30 [ 1991.373292] page_fault+0x1e/0x30 [ 1991.376769] RIP: 0033:0x43e487 [ 1991.379990] Code: 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e <89> 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 [ 1991.399029] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1991.404479] RAX: 0000000020000400 RBX: fffffffffffffffe RCX: 000000007665642f [ 1991.411763] RDX: 000000000000000c RSI: 0000000000730020 RDI: 0000000020000400 [ 1991.419046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 1991.426329] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1991.433629] R13: 00000000001e5f48 R14: 0000000000000c04 R15: badc0ffeebadface 18:02:23 executing program 4: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 18:02:23 executing program 7: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 18:02:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\r'], 0x1) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000001600)='F', 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f00000005c0), 0x1000) 18:02:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) 18:02:23 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) socket$inet6(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="36a79887db5dad", 0x7, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0), 0x0, &(0x7f0000002180)=""/164, 0xa4}}], 0x1, 0x0, 0x0) [ 1991.862929] syz-executor6: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1991.873457] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1991.878605] CPU: 0 PID: 32533 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1991.886347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.895719] Call Trace: [ 1991.898340] dump_stack+0x14b/0x190 [ 1991.902007] warn_alloc+0x472/0x690 [ 1991.905715] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1991.910587] ? kernel_poison_pages+0x1a0/0x360 [ 1991.915294] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1991.921054] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1991.926570] kmsan_alloc_page+0x75/0xd0 [ 1991.930577] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1991.935363] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.940240] ? __msan_poison_alloca+0x173/0x1f0 [ 1991.944966] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.949870] alloc_pages_vma+0x1578/0x1830 [ 1991.954146] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1991.959314] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.964230] handle_mm_fault+0x4377/0x81b0 [ 1991.968488] ? kmsan_set_origin_inline+0x6b/0x120 [ 1991.973391] __do_page_fault+0xc8b/0x17e0 [ 1991.977591] do_page_fault+0x98/0xd0 [ 1991.981359] ? page_fault+0x8/0x30 [ 1991.984933] page_fault+0x1e/0x30 [ 1991.988413] RIP: 0033:0x40052d [ 1991.991631] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1992.010552] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1992.015935] RAX: 0000000020000080 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1992.023229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000279e848 [ 1992.030513] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.037801] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1992.045103] R13: 00000000009300ac R14: 00000000001e64e8 R15: 00000000001e64bb [ 1992.052403] warn_alloc_show_mem: 1 callbacks suppressed [ 1992.052409] Mem-Info: [ 1992.060256] active_anon:35607 inactive_anon:114 isolated_anon:0 [ 1992.060256] active_file:3269 inactive_file:3987 isolated_file:5 [ 1992.060256] unevictable:0 dirty:1016 writeback:0 unstable:0 [ 1992.060256] slab_reclaimable:4221 slab_unreclaimable:15171 [ 1992.060256] mapped:69931 shmem:190 pagetables:949 bounce:0 [ 1992.060256] free:35738 free_pcp:756 free_cma:0 [ 1992.093669] Node 0 active_anon:142428kB inactive_anon:456kB active_file:13076kB inactive_file:15828kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:279608kB dirty:4064kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 118784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1992.121962] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1992.148125] lowmem_reserve[]: 0 2837 7263 7263 [ 1992.152770] Node 0 DMA32 free:73372kB min:26344kB low:32928kB high:39512kB active_anon:50992kB inactive_anon:148kB active_file:572kB inactive_file:1376kB unevictable:0kB writepending:1356kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4736kB pagetables:512kB bounce:0kB free_pcp:1200kB local_pcp:640kB free_cma:0kB [ 1992.182087] lowmem_reserve[]: 0 0 4425 4425 [ 1992.186449] Node 0 Normal free:54180kB min:41088kB low:51360kB high:61632kB active_anon:91348kB inactive_anon:308kB active_file:12556kB inactive_file:14372kB unevictable:0kB writepending:2580kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3284kB bounce:0kB free_pcp:1988kB local_pcp:576kB free_cma:0kB [ 1992.216169] lowmem_reserve[]: 0 0 0 0 [ 1992.220004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1992.233372] Node 0 DMA32: 1243*4kB (UME) 260*8kB (UME) 169*16kB (UM) 126*32kB (UM) 90*64kB (UM) 75*128kB (UME) 42*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 73180kB [ 1992.249883] Node 0 Normal: 968*4kB (UMEH) 657*8kB (UMEH) 317*16kB (UMEH) 176*32kB (UME) 119*64kB (UMEH) 67*128kB (UM) 22*256kB (UME) 25*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 54456kB [ 1992.266530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1992.275105] 7311 total pagecache pages [ 1992.278989] 0 pages in swap cache [ 1992.282441] Swap cache stats: add 0, delete 0, find 0/0 [ 1992.287814] Free swap = 0kB [ 1992.290826] Total swap = 0kB [ 1992.293862] 1965969 pages RAM [ 1992.296962] 0 pages HighMem/MovableOnly [ 1992.300959] 101394 pages reserved 18:02:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:02:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\r'], 0x1) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000001600)='F', 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f00000005c0), 0x1000) 18:02:24 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8800, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) dup2(r0, r2) [ 1992.559104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 18:02:24 executing program 4: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 18:02:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) 18:02:24 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:02:24 executing program 7: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 18:02:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\r'], 0x1) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000001600)='F', 0x1}], 0x1, 0x0) read$FUSE(r1, &(0x7f00000005c0), 0x1000) 18:02:25 executing program 0: socketpair(0xb, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001400)=0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) chdir(&(0x7f0000001440)='./file0\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) 18:02:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@multicast2, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) 18:02:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) [ 1993.297726] syz-executor3: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1993.308261] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1993.313419] CPU: 0 PID: 32585 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 1993.320702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.330065] Call Trace: [ 1993.332676] dump_stack+0x14b/0x190 [ 1993.336324] warn_alloc+0x472/0x690 [ 1993.340006] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1993.344871] ? msan_get_shadow_origin_ptr+0x25e/0x2e0 [ 1993.350140] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1993.355903] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1993.361417] kmsan_alloc_page+0x75/0xd0 [ 1993.365420] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1993.370224] ? kmsan_set_origin_inline+0x6b/0x120 [ 1993.375100] ? __msan_poison_alloca+0x173/0x1f0 [ 1993.379789] ? should_fail+0x53/0xaa0 [ 1993.383598] ? __should_failslab+0x278/0x2a0 [ 1993.388031] ? kmsan_set_origin_inline+0x6b/0x120 [ 1993.392935] alloc_pages_vma+0x1578/0x1830 [ 1993.397223] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1993.402340] ? kmsan_set_origin_inline+0x6b/0x120 [ 1993.407231] handle_mm_fault+0x4377/0x81b0 [ 1993.411499] ? kmsan_set_origin_inline+0x6b/0x120 [ 1993.416397] __do_page_fault+0xc8b/0x17e0 [ 1993.420590] do_page_fault+0x98/0xd0 [ 1993.424317] ? page_fault+0x8/0x30 [ 1993.427865] page_fault+0x1e/0x30 [ 1993.431324] RIP: 0033:0x43e461 [ 1993.434528] Code: 8d 15 83 11 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1993.453435] RSP: 002b:0000000000a3fc18 EFLAGS: 00010202 [ 1993.458807] RAX: 0000000020000040 RBX: fffffffffffffffe RCX: 000000000000002f [ 1993.466086] RDX: 000000000000000d RSI: 0000000000730020 RDI: 0000000020000040 [ 1993.473357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 1993.480628] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 1993.487900] R13: 00000000001e68a2 R14: 0000000000000c41 R15: badc0ffeebadface [ 1993.495190] Mem-Info: [ 1993.497650] active_anon:35125 inactive_anon:114 isolated_anon:0 [ 1993.497650] active_file:2995 inactive_file:2765 isolated_file:2 [ 1993.497650] unevictable:0 dirty:42 writeback:13 unstable:0 [ 1993.497650] slab_reclaimable:4226 slab_unreclaimable:15160 [ 1993.497650] mapped:68691 shmem:190 pagetables:1043 bounce:0 [ 1993.497650] free:36350 free_pcp:1152 free_cma:0 [ 1993.531128] Node 0 active_anon:140500kB inactive_anon:456kB active_file:11980kB inactive_file:11060kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:274764kB dirty:168kB writeback:52kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 110592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1993.559338] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1993.585488] lowmem_reserve[]: 0 2837 7263 7263 [ 1993.590107] Node 0 DMA32 free:74788kB min:26344kB low:32928kB high:39512kB active_anon:48824kB inactive_anon:152kB active_file:972kB inactive_file:172kB unevictable:0kB writepending:704kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4480kB pagetables:456kB bounce:0kB free_pcp:2704kB local_pcp:1480kB free_cma:0kB [ 1993.619314] lowmem_reserve[]: 0 0 4425 4425 [ 1993.623674] Node 0 Normal free:54708kB min:41088kB low:51360kB high:61632kB active_anon:91716kB inactive_anon:304kB active_file:11732kB inactive_file:11008kB unevictable:0kB writepending:212kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3716kB bounce:0kB free_pcp:1904kB local_pcp:932kB free_cma:0kB [ 1993.653299] lowmem_reserve[]: 0 0 0 0 [ 1993.657128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1993.670466] Node 0 DMA32: 1433*4kB (UME) 266*8kB (UME) 165*16kB (UM) 121*32kB (UM) 98*64kB (UM) 77*128kB (UME) 43*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 74788kB [ 1993.686961] Node 0 Normal: 908*4kB (UMEH) 653*8kB (UMEH) 306*16kB (UMEH) 184*32kB (UME) 118*64kB (MEH) 69*128kB (UME) 22*256kB (UME) 25*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 54456kB [ 1993.703627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1993.712206] 5938 total pagecache pages [ 1993.716110] 0 pages in swap cache [ 1993.719568] Swap cache stats: add 0, delete 0, find 0/0 [ 1993.724927] Free swap = 0kB [ 1993.727957] Total swap = 0kB [ 1993.730976] 1965969 pages RAM [ 1993.734091] 0 pages HighMem/MovableOnly [ 1993.738061] 101394 pages reserved 18:02:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x23b) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0', [], 0xa, "365ac973e669cb7983cd5d11d0a6bb4570d79fbf58ecba0ca2594f5f65d3c3c69c467c"}, 0x2e) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x0) 18:02:25 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r1, &(0x7f0000000800)={0x2, 0x0, @remote}, 0x10) listen(r1, 0x0) 18:02:25 executing program 1: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8800, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) dup2(r0, r2) 18:02:25 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x0, 0x0, 0xffffffff, 0xfffffffffffffffe}) 18:02:26 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) socket$inet6(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="36a79887db5dad", 0x7, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0), 0x0, &(0x7f0000002180)=""/164, 0xa4}}], 0x1, 0x0, 0x0) 18:02:26 executing program 4: mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x1, 0x4000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x20400) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140), &(0x7f0000000000)=0x4) 18:02:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x45, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x6}]}, 0x10) 18:02:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x4, 0x4000000000032, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=""/214, &(0x7f0000000240)=0xd6) 18:02:26 executing program 0: socketpair(0xb, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001400)=0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) chdir(&(0x7f0000001440)='./file0\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) 18:02:26 executing program 7: r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) fcntl$setstatus(r0, 0x4, 0x2800) syz_emit_ethernet(0x16, &(0x7f0000000280)={@dev, @dev, [], {@llc={0x4, {@snap={0x0, 0x0, "1c", "3c61b2"}}}}}, &(0x7f0000000200)) 18:02:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) close(r0) [ 1994.441272] syz-executor6: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1994.451827] syz-executor6 cpuset=syz6 mems_allowed=0 [ 1994.456986] CPU: 1 PID: 32621 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 [ 1994.464270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.473633] Call Trace: [ 1994.476260] dump_stack+0x14b/0x190 [ 1994.479912] warn_alloc+0x472/0x690 [ 1994.483591] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1994.488456] ? kernel_poison_pages+0x1a0/0x360 [ 1994.493124] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 1994.498953] kmsan_alloc_page+0x75/0xd0 [ 1994.502952] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1994.507735] ? kmsan_set_origin_inline+0x6b/0x120 [ 1994.512653] ? __msan_poison_alloca+0x173/0x1f0 [ 1994.517342] ? should_fail+0x53/0xaa0 [ 1994.521196] ? __should_failslab+0x278/0x2a0 [ 1994.525630] ? kmsan_set_origin_inline+0x6b/0x120 [ 1994.530538] alloc_pages_vma+0x1578/0x1830 [ 1994.534809] do_huge_pmd_anonymous_page+0xbce/0x27e0 [ 1994.539931] ? kmsan_set_origin_inline+0x6b/0x120 [ 1994.544834] handle_mm_fault+0x4377/0x81b0 [ 1994.549098] ? kmsan_set_origin_inline+0x6b/0x120 [ 1994.553985] __do_page_fault+0xc8b/0x17e0 [ 1994.558175] do_page_fault+0x98/0xd0 [ 1994.561915] ? page_fault+0x8/0x30 [ 1994.565471] page_fault+0x1e/0x30 [ 1994.568933] RIP: 0033:0x40052d [ 1994.572140] Code: 8a 4c 24 10 d3 e0 09 f0 48 8b 74 24 08 66 89 06 e9 fe 00 00 00 48 8b 44 24 10 48 0b 44 24 28 75 10 48 8b 44 24 08 8b 54 24 20 <89> 10 e9 e2 00 00 00 8a 4c 24 28 b8 01 00 00 00 48 8b 74 24 08 48 [ 1994.591068] RSP: 002b:0000000000a3fbe0 EFLAGS: 00010246 [ 1994.596442] RAX: 0000000020000080 RBX: fffffffffffffffe RCX: 0000000000000000 [ 1994.603724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000279e848 [ 1994.611011] RBP: 0000000000930aa0 R08: 0000000000000000 R09: 0000000000000000 [ 1994.618288] R10: 0000000000a3fcf0 R11: 0000000000000246 R12: 00000000000003e8 [ 1994.625563] R13: 00000000009300ac R14: 00000000001e6ef0 R15: 00000000001e6ec3 [ 1994.632854] Mem-Info: [ 1994.635305] active_anon:35097 inactive_anon:110 isolated_anon:0 [ 1994.635305] active_file:2806 inactive_file:2651 isolated_file:1 [ 1994.635305] unevictable:0 dirty:29 writeback:0 unstable:0 [ 1994.635305] slab_reclaimable:4216 slab_unreclaimable:15164 [ 1994.635305] mapped:68538 shmem:190 pagetables:1009 bounce:0 [ 1994.635305] free:37947 free_pcp:862 free_cma:0 [ 1994.668609] Node 0 active_anon:140388kB inactive_anon:440kB active_file:11224kB inactive_file:10604kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:274152kB dirty:116kB writeback:0kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 114688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1994.696721] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1994.722867] lowmem_reserve[]: 0 2837 7263 7263 [ 1994.727482] Node 0 DMA32 free:81176kB min:26344kB low:32928kB high:39512kB active_anon:48816kB inactive_anon:144kB active_file:548kB inactive_file:196kB unevictable:0kB writepending:0kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:4544kB pagetables:384kB bounce:0kB free_pcp:2556kB local_pcp:1236kB free_cma:0kB [ 1994.756497] lowmem_reserve[]: 0 0 4425 4425 [ 1994.760851] Node 0 Normal free:54708kB min:41088kB low:51360kB high:61632kB active_anon:91496kB inactive_anon:296kB active_file:10884kB inactive_file:10592kB unevictable:0kB writepending:116kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3652kB bounce:0kB free_pcp:892kB local_pcp:288kB free_cma:0kB [ 1994.790389] lowmem_reserve[]: 0 0 0 0 [ 1994.794235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1994.807567] Node 0 DMA32: 2304*4kB (UME) 471*8kB (UME) 212*16kB (UM) 133*32kB (UM) 97*64kB (UM) 76*128kB (UME) 44*256kB (UME) 23*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 81112kB [ 1994.824072] Node 0 Normal: 991*4kB (UMEH) 675*8kB (UMEH) 310*16kB (MEH) 184*32kB (UME) 119*64kB (UMEH) 68*128kB (UME) 21*256kB (UME) 25*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 54708kB [ 1994.840818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1994.849391] 5647 total pagecache pages [ 1994.853310] 0 pages in swap cache [ 1994.856776] Swap cache stats: add 0, delete 0, find 0/0 [ 1994.862143] Free swap = 0kB [ 1994.865179] Total swap = 0kB [ 1994.868204] 1965969 pages RAM [ 1994.871306] 0 pages HighMem/MovableOnly [ 1994.875280] 101394 pages reserved 18:02:27 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) unshare(0x20400) ioctl(r0, 0x40000040044102, &(0x7f0000000140)) 18:02:27 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000180)=""/185, 0xb9, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x10000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x74c, 0x0, &(0x7f0000001000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000003c0)}, 0x0) 18:02:27 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x80000042801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000200)=0x40000000080) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f0000000000)=""/53, 0x35, &(0x7f0000000040)=""/82}}, 0x5e) close(r0) 18:02:27 executing program 1: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7f) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000080), 0xfff) 18:02:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 18:02:27 executing program 4: unshare(0x20400) fsync(0xffffffffffffffff) 18:02:27 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) socket$inet6(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="36a79887db5dad", 0x7, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0), 0x0, &(0x7f0000002180)=""/164, 0xa4}}], 0x1, 0x0, 0x0) 18:02:27 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 18:02:27 executing program 2: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 18:02:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 18:02:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0xf0}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 1995.843096] IPVS: ftp: loaded support on port[0] = 21 18:02:28 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) arch_prctl(0x2002, &(0x7f0000000180)) [ 1995.986914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1996.040669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:02:28 executing program 0: socketpair(0xb, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x3ff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001400)=0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) chdir(&(0x7f0000001440)='./file0\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) 18:02:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 18:02:28 executing program 7: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000300), 0x6, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f00003e8000), 0x401, &(0x7f0000336000/0x3000)=nil, 0x3) 18:02:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0xf0}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 18:02:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) [ 1996.421231] IPVS: ftp: loaded support on port[0] = 21 18:02:28 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0, &(0x7f0000003880)={0x0, 0x989680}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 18:02:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff3529, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1996.586313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1996.624315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:02:28 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ppoll(&(0x7f0000db7fd0)=[{r0}], 0x1, &(0x7f0000542000)={0x0, 0x1c9c380}, &(0x7f0000181000), 0x8) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 18:02:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 18:02:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 18:02:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0xf0}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 1997.209063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1997.259157] khugepaged: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 1997.269448] khugepaged cpuset=/ mems_allowed=0 [ 1997.274092] CPU: 0 PID: 687 Comm: khugepaged Not tainted 4.19.0-rc1+ #36 [ 1997.280934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.290296] Call Trace: [ 1997.292913] dump_stack+0x14b/0x190 [ 1997.296569] warn_alloc+0x472/0x690 [ 1997.300263] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 1997.305162] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1997.310720] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 1997.316466] ? task_kmsan_context_state+0x5e/0x110 [ 1997.321447] ? task_kmsan_context_state+0x5e/0x110 [ 1997.326417] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1997.331899] ? kmsan_set_origin_inline+0x6b/0x120 [ 1997.336765] ? __msan_poison_alloca+0x173/0x1f0 [ 1997.341459] ? compaction_defer_reset+0x5e/0x390 [ 1997.346240] ? __alloc_pages_direct_compact+0x3bd/0x4e0 [ 1997.351638] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1997.357028] ? compaction_defer_reset+0x30e/0x390 [ 1997.361923] ? __alloc_pages_direct_compact+0x3bd/0x4e0 [ 1997.367321] kmsan_alloc_page+0x75/0xd0 [ 1997.371329] __alloc_pages_nodemask+0xf6b/0x5c80 [ 1997.376186] ? kmsan_set_origin_inline+0x6b/0x120 [ 1997.381062] ? __msan_poison_alloca+0x173/0x1f0 [ 1997.385787] khugepaged_scan_mm_slot+0x29f5/0xeba0 [ 1997.390784] ? kmsan_set_origin_inline+0x6b/0x120 [ 1997.395678] ? __msan_poison_alloca+0x173/0x1f0 [ 1997.400390] ? __msan_poison_alloca+0x173/0x1f0 [ 1997.405093] ? __switch_to+0x2b3/0x420 [ 1997.409008] ? kmsan_write_aligned_origin_inline+0x50/0x60 [ 1997.414693] ? rcu_all_qs+0x2e/0x1f0 [ 1997.418448] khugepaged+0x82c/0x1790 [ 1997.422212] ? init_wait_entry+0x190/0x190 [ 1997.426490] kthread+0x465/0x4a0 [ 1997.429875] ? start_stop_khugepaged+0x790/0x790 [ 1997.434664] ? kthread_blkcg+0xf0/0xf0 [ 1997.438581] ret_from_fork+0x35/0x40 [ 1997.442335] Mem-Info: [ 1997.444801] active_anon:35097 inactive_anon:112 isolated_anon:14 [ 1997.444801] active_file:2299 inactive_file:3210 isolated_file:1 [ 1997.444801] unevictable:0 dirty:263 writeback:406 unstable:0 [ 1997.444801] slab_reclaimable:4217 slab_unreclaimable:15086 [ 1997.444801] mapped:69260 shmem:190 pagetables:940 bounce:0 [ 1997.444801] free:35568 free_pcp:785 free_cma:0 [ 1997.478382] Node 0 active_anon:140388kB inactive_anon:448kB active_file:9196kB inactive_file:12840kB unevictable:0kB isolated(anon):56kB isolated(file):4kB mapped:277040kB dirty:588kB writeback:116kB shmem:760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 112640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1997.506688] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1997.532853] lowmem_reserve[]: 0 2837 7263 7263 [ 1997.537485] Node 0 DMA32 free:73932kB min:26344kB low:32928kB high:39512kB active_anon:48864kB inactive_anon:144kB active_file:548kB inactive_file:996kB unevictable:0kB writepending:16kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3968kB pagetables:364kB bounce:0kB free_pcp:1152kB local_pcp:0kB free_cma:0kB [ 1997.566334] lowmem_reserve[]: 0 0 4425 4425 [ 1997.570697] Node 0 Normal free:52436kB min:41088kB low:51360kB high:61632kB active_anon:91448kB inactive_anon:304kB active_file:8880kB inactive_file:11832kB unevictable:0kB writepending:0kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:9664kB pagetables:3396kB bounce:0kB free_pcp:1988kB local_pcp:596kB free_cma:0kB [ 1997.600069] lowmem_reserve[]: 0 0 0 0 [ 1997.603919] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 1997.617328] Node 0 DMA32: 2439*4kB (UME) 454*8kB (UME) 208*16kB (UM) 84*32kB (UM) 86*64kB (UM) 41*128kB (UME) 45*256kB (UME) 23*512kB (M) 20*1024kB (UM) 0*2048kB 0*4096kB = 73932kB [ 1997.633736] Node 0 Normal: 1309*4kB (UMEH) 791*8kB (UMEH) 355*16kB (UMEH) 175*32kB (UME) 100*64kB (UMEH) 62*128kB (ME) 17*256kB (UME) 21*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 52284kB [ 1997.650575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1997.659161] 5695 total pagecache pages [ 1997.663046] 0 pages in swap cache [ 1997.666502] Swap cache stats: add 0, delete 0, find 0/0 [ 1997.671889] Free swap = 0kB [ 1997.674908] Total swap = 0kB [ 1997.677924] 1965969 pages RAM [ 1997.681028] 0 pages HighMem/MovableOnly [ 1997.685005] 101394 pages reserved [ 1997.726196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:02:30 executing program 2: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:30 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)) read(r1, &(0x7f0000000600)=""/207, 0xcf) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)) 18:02:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x10) 18:02:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x20400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)) 18:02:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0xf0}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 18:02:30 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0, &(0x7f0000003880)={0x0, 0x989680}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 18:02:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x0, 0x0, @loopback}, r2}}, 0x38) 18:02:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x5, &(0x7f0000013ff4)={@local, @rand_addr, @dev}, 0xc) close(r3) dup3(r0, r1, 0x0) [ 1998.925817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1998.942026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1999.017937] IPVS: ftp: loaded support on port[0] = 21 18:02:31 executing program 3: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:31 executing program 0: syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00001cb000/0x2000)=nil) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000396000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000079f000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 18:02:31 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000040)=0x80) 18:02:31 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0, &(0x7f0000003880)={0x0, 0x989680}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 18:02:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'haxh\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) [ 1999.306753] IPVS: ftp: loaded support on port[0] = 21 18:02:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0xfffffffffffffffe}}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) 18:02:31 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000085, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000080), &(0x7f00000002c0)) 18:02:31 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=@ethtool_cmd={0x9}}) 18:02:31 executing program 2: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:31 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 18:02:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc807a851448f764070") r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/87) [ 1999.801236] IPVS: ftp: loaded support on port[0] = 21 18:02:32 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0, &(0x7f0000003880)={0x0, 0x989680}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) 18:02:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x6}]]}}}]}, 0x3c}}, 0x0) 18:02:32 executing program 3: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:32 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 2000.154048] netlink: 'syz-executor4': attribute type 6 has an invalid length. [ 2000.179886] netlink: 'syz-executor4': attribute type 6 has an invalid length. [ 2000.189261] input: syz1 as /devices/virtual/input/input183 18:02:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0), 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast}], 0x10) [ 2000.209959] IPVS: ftp: loaded support on port[0] = 21 [ 2000.266863] input: syz1 as /devices/virtual/input/input184 18:02:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 18:02:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20c81, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 18:02:32 executing program 2: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:32 executing program 7: clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000000)) clone(0x10000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 18:02:32 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 18:02:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x100000000080, 0x1}) [ 2000.701810] IPVS: ftp: loaded support on port[0] = 21 18:02:32 executing program 4: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000002c0)=0xef) r0 = socket(0x2, 0x3, 0x40000000000000ff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000002c0), 0x2e2, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) [ 2000.799803] input: syz1 as /devices/virtual/input/input185 18:02:32 executing program 1: quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 18:02:33 executing program 3: unshare(0x8020000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x44060000) 18:02:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x100000000080, 0x1}) 18:02:33 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 18:02:33 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) [ 2001.186499] IPVS: ftp: loaded support on port[0] = 21 18:02:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='wchan\x00') sendfile(r0, r2, &(0x7f00000000c0), 0x7fffffff) [ 2001.270840] input: syz1 as /devices/virtual/input/input186 18:02:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x100000000080, 0x1}) 18:02:33 executing program 7: clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000000)) clone(0x10000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 18:02:33 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 18:02:33 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) [ 2001.729602] input: syz1 as /devices/virtual/input/input187 18:02:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='wchan\x00') sendfile(r0, r2, &(0x7f00000000c0), 0x7fffffff) 18:02:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x100000000080, 0x1}) 18:02:34 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) 18:02:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='wchan\x00') sendfile(r0, r2, &(0x7f00000000c0), 0x7fffffff) 18:02:34 executing program 7: clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000000)) clone(0x10000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 18:02:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) 18:02:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000300), 0x4020) 18:02:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85715070") r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0x40045731, &(0x7f00000002c0)={0x1}) 18:02:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000080)=0xc) 18:02:34 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f00000003c0), 0xffffffffffffffec}) 18:02:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='wchan\x00') sendfile(r0, r2, &(0x7f00000000c0), 0x7fffffff) 18:02:34 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) 18:02:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup2(r0, r1) bind(r2, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "a328faeb295e"}, 0x80) 18:02:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000004c0)={'ipddp0\x00', {0x2, 0x0, @multicast1}}) 18:02:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000001080), 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/182, 0xb6}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x80c0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) 18:02:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) 18:02:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x7, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, "66a9d8f9db07204969f7029a0ac6d4104343d57b25f9ad66285b3a4de6bef1cb97b8583a9c64d6053a2acefc6f0c494bfba1c4f36877ba9d81eb3efbcb27f2472561bbda2415ed9e53c205f43c183bef"}, 0xd8) dup3(r0, r1, 0x0) 18:02:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x12f64bcb, &(0x7f0000000040)) 18:02:34 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x40b, 0xffffffffffffffff) 18:02:35 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x1fff, 0x1000}, 0x18) 18:02:35 executing program 7: clone(0x88042408, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000000)) clone(0x10000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 18:02:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x40286608, &(0x7f0000000040)) 18:02:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) read$eventfd(r1, &(0x7f0000000080), 0x8) 18:02:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_wait(r1, &(0x7f0000001a40)=[{}], 0x1, 0x0) 18:02:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x804e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000240), 0x4) 18:02:35 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r1, &(0x7f0000000180)="bc", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) dup2(r0, r1) 18:02:35 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200400e, 0xc012, r0, 0x0) ioctl(0xffffffffffffffff, 0x100, &(0x7f00000001c0)) 18:02:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x40286608, &(0x7f0000000040)) 18:02:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x240, &(0x7f0000000000)=[@op={0x18}], 0x1}], 0x49249249249265b, 0x0) 18:02:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=@srh, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) sendto$inet6(r0, &(0x7f0000000000), 0x257, 0x0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) 18:02:35 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000003c0)={0xffffffff, 0x0, 0x0, 0x81, &(0x7f0000000540)}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x8, 0x4) clone(0x0, &(0x7f0000000300), &(0x7f0000000500), &(0x7f00000002c0), &(0x7f0000000440)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x0, 0x3e0, 0x2, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x80000000}, {0xffffffffffffffff, 0x0, 0x3}]}) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) wait4(0x0, &(0x7f0000000100), 0xa000000a, &(0x7f0000000300)) 18:02:35 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000002400)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000000000000100000052509e6a2b21a03efc60aea7582eb955f4fd8971de4176e6"], 0x28}, 0x0) 18:02:35 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000003c0)={0x3ff, 0x80, 0x0, "717565756530000400"}) 18:02:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x40286608, &(0x7f0000000040)) 18:02:35 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r1, &(0x7f0000000180)="bc", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) dup2(r0, r1) 18:02:36 executing program 5: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, &(0x7f0000000440)=""/45, 0x2d}}], 0x500, 0x0, &(0x7f00000050c0)={0x77359400}) 18:02:36 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000002400)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000000000000100000052509e6a2b21a03efc60aea7582eb955f4fd8971de4176e6"], 0x28}, 0x0) 18:02:36 executing program 7: socketpair(0x1e, 0x5, 0x0, &(0x7f0000001400)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) close(r0) 18:02:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x40286608, &(0x7f0000000040)) 18:02:36 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r1, &(0x7f0000000180)="bc", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) dup2(r0, r1) 18:02:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac}, {0x6}]}, 0x10) 18:02:36 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000002400)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000000000000100000052509e6a2b21a03efc60aea7582eb955f4fd8971de4176e6"], 0x28}, 0x0) 18:02:37 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200400e, 0xc012, r0, 0x0) ioctl(0xffffffffffffffff, 0x100, &(0x7f00000001c0)) 18:02:37 executing program 5: unshare(0x20400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) 18:02:37 executing program 7: socketpair(0x1e, 0x5, 0x0, &(0x7f0000001400)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) close(r0) 18:02:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0xfffffffffffffee6}], 0x43}}], 0x1, 0x0) 18:02:37 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000002400)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000000000000100000052509e6a2b21a03efc60aea7582eb955f4fd8971de4176e6"], 0x28}, 0x0) 18:02:37 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000001e40)='./file0\x00', &(0x7f0000001fc0), &(0x7f0000002280), 0x1100) 18:02:37 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000003c0)={0xffffffff, 0x0, 0x0, 0x81, &(0x7f0000000540)}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x8, 0x4) clone(0x0, &(0x7f0000000300), &(0x7f0000000500), &(0x7f00000002c0), &(0x7f0000000440)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x0, 0x3e0, 0x2, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x80000000}, {0xffffffffffffffff, 0x0, 0x3}]}) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) wait4(0x0, &(0x7f0000000100), 0xa000000a, &(0x7f0000000300)) 18:02:37 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r1, &(0x7f0000000180)="bc", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) dup2(r0, r1) 18:02:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0xfffffffffffffee6}], 0x43}}], 0x1, 0x0) 18:02:37 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='nfsd\x00', 0x0, &(0x7f0000000200)) 18:02:37 executing program 7: socketpair(0x1e, 0x5, 0x0, &(0x7f0000001400)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) close(r0) 18:02:38 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2718, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) 18:02:38 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x80000003}) r2 = gettid() signalfd(r0, &(0x7f0000392ff8)={0xffffffffffff0000}, 0x8) rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x982e) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 18:02:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0xfffffffffffffee6}], 0x43}}], 0x1, 0x0) 18:02:38 executing program 7: socketpair(0x1e, 0x5, 0x0, &(0x7f0000001400)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) close(r0) 18:02:38 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000003c0)={0xffffffff, 0x0, 0x0, 0x81, &(0x7f0000000540)}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x8, 0x4) clone(0x0, &(0x7f0000000300), &(0x7f0000000500), &(0x7f00000002c0), &(0x7f0000000440)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x0, 0x3e0, 0x2, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x80000000}, {0xffffffffffffffff, 0x0, 0x3}]}) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) wait4(0x0, &(0x7f0000000100), 0xa000000a, &(0x7f0000000300)) [ 2007.021608] syz-executor3: page allocation failure: order:4, mode:0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 2007.033298] syz-executor3 cpuset=/ mems_allowed=0 [ 2007.038535] CPU: 0 PID: 603 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #36 [ 2007.045659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2007.055040] Call Trace: [ 2007.057686] dump_stack+0x14b/0x190 [ 2007.061361] warn_alloc+0x472/0x690 [ 2007.065046] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 2007.069986] ? __msan_poison_alloca+0x173/0x1f0 [ 2007.074760] copy_process+0xb05/0xa950 [ 2007.078722] ? kmsan_set_origin_inline+0x6b/0x120 [ 2007.083634] ? __msan_poison_alloca+0x173/0x1f0 [ 2007.088391] ? __msan_poison_alloca+0x173/0x1f0 [ 2007.093131] _do_fork+0x339/0xfb0 [ 2007.096663] __x64_sys_clone+0x15e/0x1b0 [ 2007.100792] ? __ia32_sys_vfork+0x70/0x70 [ 2007.104972] do_syscall_64+0x15b/0x220 [ 2007.108903] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 2007.114137] RIP: 0033:0x459a19 [ 2007.117400] Code: ff 48 85 f6 0f 84 67 8b fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 3e 8b fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2007.136336] RSP: 002b:00007ffc9569b588 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2007.144102] RAX: ffffffffffffffda RBX: 00007fbb5a6f9000 RCX: 0000000000459a19 [ 2007.151422] RDX: 434f503a30656c69 RSI: 0000000000a3ffb0 RDI: 0000000030000000 [ 2007.158722] RBP: 0000000000930b28 R08: 0000000000000018 R09: 0000000000000018 [ 2007.166050] R10: badc0ffeebadface R11: 0000000000000202 R12: 0000000000000010 [ 2007.173361] R13: 0000000000412a70 R14: 0000000000000000 R15: 0000000000000000 [ 2007.181296] Mem-Info: [ 2007.183875] active_anon:35438 inactive_anon:112 isolated_anon:0 [ 2007.183875] active_file:1826 inactive_file:2916 isolated_file:1 [ 2007.183875] unevictable:0 dirty:11 writeback:0 unstable:0 [ 2007.183875] slab_reclaimable:4192 slab_unreclaimable:15336 [ 2007.183875] mapped:67510 shmem:186 pagetables:877 bounce:0 [ 2007.183875] free:24216 free_pcp:209 free_cma:0 [ 2007.217538] Node 0 active_anon:142448kB inactive_anon:448kB active_file:7304kB inactive_file:11896kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:270156kB dirty:44kB writeback:0kB shmem:744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 110592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2007.245723] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2007.272222] lowmem_reserve[]: 0 2837 7263 7263 [ 2007.277063] Node 0 DMA32 free:48492kB min:26344kB low:32928kB high:39512kB active_anon:43744kB inactive_anon:148kB active_file:512kB inactive_file:3328kB unevictable:0kB writepending:0kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3456kB pagetables:364kB bounce:0kB free_pcp:316kB local_pcp:0kB free_cma:0kB [ 2007.306151] lowmem_reserve[]: 0 0 4425 4425 [ 2007.310592] Node 0 Normal free:35588kB min:41088kB low:51360kB high:61632kB active_anon:98616kB inactive_anon:300kB active_file:6808kB inactive_file:8500kB unevictable:0kB writepending:44kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:10176kB pagetables:3144kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 2007.340053] lowmem_reserve[]: 0 0 0 0 [ 2007.344245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 2007.357889] Node 0 DMA32: 12*4kB (UE) 3*8kB (UE) 1*16kB (E) 13*32kB (ME) 48*64kB (UME) 23*128kB (UM) 31*256kB (ME) 19*512kB (UM) 13*1024kB (UM) 3*2048kB (MH) 1*4096kB (H) = 47736kB [ 2007.374639] Node 0 Normal: 207*4kB (UMEH) 613*8kB (UME) 406*16kB (UME) 194*32kB (UME) 99*64kB (UME) 55*128kB (UME) 5*256kB (UME) 8*512kB (UM) 0*1024kB 1*2048kB (H) 0*4096kB = 39236kB [ 2007.391500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2007.400309] 5061 total pagecache pages [ 2007.404301] 0 pages in swap cache [ 2007.407864] Swap cache stats: add 0, delete 0, find 0/0 [ 2007.413326] Free swap = 0kB [ 2007.416452] Total swap = 0kB [ 2007.419604] 1965969 pages RAM [ 2007.422826] 0 pages HighMem/MovableOnly [ 2007.426918] 101394 pages reserved [ 2007.613908] syz-executor5: page allocation failure: order:4, mode:0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 2007.625336] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2007.630629] CPU: 1 PID: 615 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 2007.637759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2007.647145] Call Trace: [ 2007.649793] dump_stack+0x14b/0x190 [ 2007.653455] warn_alloc+0x472/0x690 [ 2007.657196] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 2007.662146] ? __msan_poison_alloca+0x173/0x1f0 [ 2007.666900] ? vmalloc_to_page+0x57d/0x6b0 [ 2007.671260] copy_process+0xb05/0xa950 [ 2007.675247] ? __delayacct_freepages_end+0xdb/0x270 [ 2007.680346] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2007.685886] ? __delayacct_freepages_end+0x1c8/0x270 [ 2007.691054] ? __msan_poison_alloca+0x173/0x1f0 [ 2007.695806] _do_fork+0x339/0xfb0 [ 2007.699353] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2007.704766] __x64_sys_clone+0x15e/0x1b0 [ 2007.708918] ? __ia32_sys_vfork+0x70/0x70 [ 2007.713108] do_syscall_64+0x15b/0x220 [ 2007.717064] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 2007.722312] RIP: 0033:0x459a19 [ 2007.725545] Code: ff 48 85 f6 0f 84 67 8b fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 3e 8b fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2007.744474] RSP: 002b:0000000000a3fae8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2007.752227] RAX: ffffffffffffffda RBX: 00007f00cf671700 RCX: 0000000000459a19 [ 2007.759525] RDX: 00007f00cf6719d0 RSI: 00007f00cf670db0 RDI: 00000000003d0f00 [ 2007.766821] RBP: 0000000000a3fd00 R08: 00007f00cf671700 R09: 00007f00cf671700 [ 2007.774127] R10: 00007f00cf6719d0 R11: 0000000000000202 R12: 0000000000000000 [ 2007.781443] R13: 0000000000a3fb9f R14: 00007f00cf6719c0 R15: 0000000000000002 18:02:40 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200400e, 0xc012, r0, 0x0) ioctl(0xffffffffffffffff, 0x100, &(0x7f00000001c0)) 18:02:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0xfffffffffffffee6}], 0x43}}], 0x1, 0x0) 18:02:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 18:02:40 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f00000012c0)}}], 0x40000000000023b, 0x0) 18:02:40 executing program 2: unshare(0x20000000) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000003c0)={0xffffffff, 0x0, 0x0, 0x81, &(0x7f0000000540)}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0x8, 0x4) clone(0x0, &(0x7f0000000300), &(0x7f0000000500), &(0x7f00000002c0), &(0x7f0000000440)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x0, 0x3e0, 0x2, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x80000000}, {0xffffffffffffffff, 0x0, 0x3}]}) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c, r0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) wait4(0x0, &(0x7f0000000100), 0xa000000a, &(0x7f0000000300)) 18:02:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 18:02:40 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2718, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) [ 2008.636907] syz-executor5: page allocation failure: order:9, mode:0x1480020(GFP_ATOMIC|0x1000000), nodemask=(null) [ 2008.647451] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2008.652611] CPU: 0 PID: 655 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #36 [ 2008.659732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.669136] Call Trace: [ 2008.671768] dump_stack+0x14b/0x190 [ 2008.675433] warn_alloc+0x472/0x690 [ 2008.679147] __alloc_pages_nodemask+0x5ae3/0x5c80 [ 2008.684071] ? pick_next_task_fair+0x22a8/0x24c0 [ 2008.688874] ? __msan_poison_alloca+0x173/0x1f0 [ 2008.693635] kmsan_internal_alloc_meta_for_pages+0xfa/0x700 [ 2008.699416] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 2008.704904] ? __msan_poison_alloca+0x173/0x1f0 [ 2008.709613] ? find_next_bit+0x25b/0x2a0 [ 2008.713733] kmsan_alloc_page+0x75/0xd0 [ 2008.717743] __alloc_pages_nodemask+0xf6b/0x5c80 [ 2008.722619] alloc_pages_current+0x6b1/0x970 [ 2008.727072] kmalloc_order_trace+0xb3/0x390 [ 2008.731437] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 2008.736844] __kmalloc+0x332/0x350 [ 2008.740427] rds_info_getsockopt+0x2a3/0xc40 [ 2008.744894] rds_getsockopt+0x461/0x860 [ 2008.748906] ? rds_setsockopt+0x13a0/0x13a0 [ 2008.753262] __sys_getsockopt+0x48c/0x550 [ 2008.757453] __x64_sys_getsockopt+0x15d/0x1c0 [ 2008.761997] ? __ia32_sys_setsockopt+0x1c0/0x1c0 [ 2008.766792] do_syscall_64+0x15b/0x220 [ 2008.770720] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 2008.775934] RIP: 0033:0x457089 [ 2008.779161] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2008.798094] RSP: 002b:00007f00cf691c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2008.805846] RAX: ffffffffffffffda RBX: 00007f00cf6926d4 RCX: 0000000000457089 [ 2008.813144] RDX: 0000000000002718 RSI: 0000000000000114 RDI: 0000000000000004 [ 2008.820460] RBP: 0000000000930140 R08: 0000000020000040 R09: 0000000000000000 [ 2008.827753] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2008.835041] R13: 00000000004cc070 R14: 00000000004c36f9 R15: 0000000000000001 [ 2008.842363] warn_alloc_show_mem: 1 callbacks suppressed [ 2008.842369] Mem-Info: [ 2008.850221] active_anon:32961 inactive_anon:112 isolated_anon:0 [ 2008.850221] active_file:1796 inactive_file:1462 isolated_file:1 [ 2008.850221] unevictable:0 dirty:15 writeback:0 unstable:0 [ 2008.850221] slab_reclaimable:4192 slab_unreclaimable:15336 [ 2008.850221] mapped:59152 shmem:186 pagetables:828 bounce:0 [ 2008.850221] free:41999 free_pcp:206 free_cma:0 [ 2008.883475] Node 0 active_anon:131844kB inactive_anon:448kB active_file:7064kB inactive_file:5600kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:236376kB dirty:60kB writeback:0kB shmem:744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 110592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2008.911351] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2008.937539] lowmem_reserve[]: 0 2837 7263 7263 [ 2008.942186] Node 0 DMA32 free:64608kB min:26344kB low:32928kB high:39512kB active_anon:40808kB inactive_anon:152kB active_file:1284kB inactive_file:1892kB unevictable:0kB writepending:24kB present:3129292kB managed:2910244kB mlocked:0kB kernel_stack:3456kB pagetables:384kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 2008.971157] lowmem_reserve[]: 0 0 4425 4425 [ 2008.975551] Node 0 Normal free:87384kB min:41088kB low:51360kB high:61632kB active_anon:91204kB inactive_anon:296kB active_file:4852kB inactive_file:4192kB unevictable:0kB writepending:36kB present:4718592kB managed:4532152kB mlocked:0kB kernel_stack:10304kB pagetables:2928kB bounce:0kB free_pcp:1392kB local_pcp:0kB free_cma:0kB [ 2009.004854] lowmem_reserve[]: 0 0 0 0 [ 2009.008725] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 2009.022205] Node 0 DMA32: 1133*4kB (UME) 418*8kB (UME) 220*16kB (UME) 146*32kB (UME) 130*64kB (UME) 44*128kB (UM) 40*256kB (UME) 22*512kB (UM) 14*1024kB (UM) 0*2048kB 0*4096kB = 65860kB [ 2009.039054] Node 0 Normal: 1840*4kB (UME) 1160*8kB (UME) 606*16kB (UME) 316*32kB (UMEH) 180*64kB (UMEH) 231*128kB (UMEH) 20*256kB (UMEH) 8*512kB (UM) 2*1024kB (MH) 0*2048kB 0*4096kB = 88800kB [ 2009.056453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2009.065060] 3100 total pagecache pages [ 2009.068954] 0 pages in swap cache [ 2009.072428] Swap cache stats: add 0, delete 0, find 0/0 [ 2009.077812] Free swap = 0kB [ 2009.080850] Total swap = 0kB [ 2009.083883] 1965969 pages RAM [ 2009.087001] 0 pages HighMem/MovableOnly [ 2009.091002] 101394 pages reserved [ 2011.283147] IPVS: ftp: loaded support on port[0] = 21 [ 2012.510328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.516777] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.524504] device bridge_slave_0 entered promiscuous mode [ 2012.570174] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.576593] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.584055] device bridge_slave_1 entered promiscuous mode [ 2012.632555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2012.680176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2012.811347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2012.860376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2013.080488] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2013.088068] team0: Port device team_slave_0 added [ 2013.132080] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2013.140041] team0: Port device team_slave_1 added [ 2013.197149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2013.260145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2013.308846] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2013.316231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2013.325489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2013.368041] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2013.375266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2013.384375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2013.856267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.862683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2013.869587] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.875986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2013.883782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2014.300717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2015.669792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2015.829141] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2015.991194] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2015.997552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2016.005251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2016.176534] 8021q: adding VLAN 0 to HW filter on device team0 2018/08/29 18:02:49 executor 3 failed 1 times: executor 3: failed: net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument iptable checkpoint filter/2: getsockopt(IPT_SO_GET_INFO) (errno 17) loop failed (errno 0) [ 2017.740909] device bridge_slave_1 left promiscuous mode [ 2017.746843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.791265] device bridge_slave_0 left promiscuous mode [ 2017.796991] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.825523] BUG: unable to handle kernel NULL pointer dereference at 0000000000000050 [ 2017.833527] PGD 80000001a6ecd067 P4D 80000001a6ecd067 PUD 1b4a70067 PMD 0 [ 2017.840600] Oops: 0000 [#1] SMP PTI [ 2017.844247] CPU: 0 PID: 4544 Comm: syz-fuzzer Not tainted 4.19.0-rc1+ #36 [ 2017.851180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2017.860567] RIP: 0010:kmsan_free_page+0xec/0x2d0 [ 2017.865341] Code: 01 00 00 48 c7 00 00 00 00 00 44 39 e1 0f 8d b0 00 00 00 48 63 d1 48 8d 14 52 48 c1 e2 05 48 8b 54 13 40 48 83 c0 60 83 c1 01 <80> 7a 50 00 74 be 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe [ 2017.884255] RSP: 0018:ffff88019e26ee10 EFLAGS: 00010006 [ 2017.889627] RAX: ffffea000063cee8 RBX: ffffea000063c000 RCX: 0000000000000028 [ 2017.896886] RDX: 0000000000000000 RSI: 0000000000000009 RDI: ffffea00004bc000 [ 2017.904144] RBP: ffff88019e26ee58 R08: 0000000000480020 R09: 0000000000000002 [ 2017.911414] R10: 0000000000000000 R11: ffffffff81c47910 R12: 0000000000000200 [ 2017.918708] R13: ffff8801d58ad880 R14: 0000000000000009 R15: ffffea00004ec000 [ 2017.925966] FS: 000000c42009c768(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 2017.934183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2017.940051] CR2: 0000000000000050 CR3: 00000001c67fc000 CR4: 00000000001406f0 [ 2017.947310] DR0: 0000000000000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 2017.954605] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2017.961871] Call Trace: [ 2017.964492] ? __free_pages_ok+0x6d/0x16c0 [ 2017.968721] ? free_compound_page+0x8b/0xc0 [ 2017.973038] __free_pages_ok+0x25a/0x16c0 [ 2017.977211] ? kmsan_set_origin_inline+0x6b/0x120 [ 2017.982045] ? __msan_poison_alloca+0x173/0x1f0 [ 2017.986766] free_compound_page+0x8b/0xc0 [ 2017.990950] free_transhuge_page+0x3af/0x460 [ 2017.995419] ? split_huge_page_to_list+0x3500/0x3500 [ 2018.000549] release_pages+0x70c/0x1650 [ 2018.004548] free_pages_and_swap_cache+0x54b/0x570 [ 2018.009666] unmap_page_range+0x37b8/0x4170 [ 2018.014029] unmap_single_vma+0x445/0x5e0 [ 2018.018184] unmap_vmas+0x251/0x380 [ 2018.021813] exit_mmap+0x4b7/0x940 [ 2018.025354] ? uprobe_clear_state+0x1ac/0x270 [ 2018.029840] ? mmput+0xa7/0xe0 [ 2018.033023] __mmput+0x154/0x5f0 [ 2018.036406] mmput+0xa7/0xe0 [ 2018.039442] exit_mm+0x6dd/0x790 [ 2018.042815] do_exit+0xbf7/0x3890 [ 2018.046279] do_group_exit+0x1a0/0x350 [ 2018.050184] get_signal+0x1425/0x1ef0 [ 2018.054002] ? prepare_exit_to_usermode+0x273/0x410 [ 2018.059013] do_signal+0x11d/0x2060 [ 2018.062669] ? kmsan_set_origin_inline+0x6b/0x120 [ 2018.067527] ? __msan_poison_alloca+0x173/0x1f0 [ 2018.072196] ? prepare_exit_to_usermode+0x46/0x410 [ 2018.077126] ? syscall_return_slowpath+0xdb/0x700 [ 2018.081968] prepare_exit_to_usermode+0x273/0x410 [ 2018.086808] syscall_return_slowpath+0xdb/0x700 [ 2018.091489] ? __x64_sys_futex+0x1a2/0x200 [ 2018.095726] do_syscall_64+0x1ab/0x220 [ 2018.099617] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 2018.104795] RIP: 0033:0x45ddf3 [ 2018.107984] Code: Bad RIP value. [ 2018.111337] RSP: 002b:000000c420021ea0 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca [ 2018.119035] RAX: fffffffffffffdfc RBX: 0000000028c69627 RCX: 000000000045ddf3 [ 2018.126296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001462900 [ 2018.133579] RBP: 000000c420021ee8 R08: 0000000000000000 R09: 0000000000000000 [ 2018.140863] R10: 000000c420021ed8 R11: 0000000000000206 R12: 0000000000000001 [ 2018.148131] R13: 00000000000000f3 R14: 0000000000000033 R15: 0000000000000000 [ 2018.155414] Modules linked in: [ 2018.158627] Dumping ftrace buffer: [ 2018.162159] (ftrace buffer empty) [ 2018.165857] CR2: 0000000000000050 [ 2018.169303] ---[ end trace 192dd630bb4ff2f3 ]--- [ 2018.174065] RIP: 0010:kmsan_free_page+0xec/0x2d0 [ 2018.178820] Code: 01 00 00 48 c7 00 00 00 00 00 44 39 e1 0f 8d b0 00 00 00 48 63 d1 48 8d 14 52 48 c1 e2 05 48 8b 54 13 40 48 83 c0 60 83 c1 01 <80> 7a 50 00 74 be 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe [ 2018.197704] RSP: 0018:ffff88019e26ee10 EFLAGS: 00010006 [ 2018.203060] RAX: ffffea000063cee8 RBX: ffffea000063c000 RCX: 0000000000000028 [ 2018.210338] RDX: 0000000000000000 RSI: 0000000000000009 RDI: ffffea00004bc000 [ 2018.217597] RBP: ffff88019e26ee58 R08: 0000000000480020 R09: 0000000000000002 [ 2018.224853] R10: 0000000000000000 R11: ffffffff81c47910 R12: 0000000000000200 [ 2018.232119] R13: ffff8801d58ad880 R14: 0000000000000009 R15: ffffea00004ec000 [ 2018.239387] FS: 000000c42009c768(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 2018.247616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2018.253497] CR2: 000000000045ddc9 CR3: 00000001c67fc000 CR4: 00000000001406f0 [ 2018.260761] DR0: 0000000000000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 2018.268025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2018.275289] Kernel panic - not syncing: Fatal exception [ 2018.280972] Dumping ftrace buffer: [ 2018.284503] (ftrace buffer empty) [ 2018.288218] Kernel Offset: disabled [ 2018.291843] Rebooting in 86400 seconds..