suspend(&(0x7f0000000040), 0x8) 11:47:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc008ae67, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:29 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:29 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:29 executing program 4: syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6469725f756d61736b3d30303030303030303030303032303030303030303030312c00a0ead44fca5ebc272400ecb083130b0faa2be244bab93db4ecf732f32bd7b61d2baf60e023c411b927c09f46ab79ec0150840179b5bd5928208e07fc38e81fdd53935a8e4b490000000000000057aec54a915fd205754c0c484a6f33f72089ae8331a02e123c6ced2ae38c7f391d25b39243086fefb0471ee3be667c8a2ba72bee369b7c6f0349fc57101a8435b6a6ce25f8e47924dd42c5ede0a133f042852a5cff1147f0007590"]) 11:47:29 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(0xffffffffffffffff) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x640) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000002c0)=0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000240)) sched_getaffinity(r4, 0xfffffffffffffd85, &(0x7f0000000300)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[], 0x0) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) futimesat(r5, 0x0, &(0x7f00000006c0)={{}, {0x0, 0x7530}}) 11:47:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc00caee0, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 282.087698][ T9891] hfs: dir_umask requires a value [ 282.125908][ T9891] hfs: unable to parse mount options 11:47:29 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc0189436, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 282.210317][ T9891] hfs: dir_umask requires a value [ 282.225566][ T9891] hfs: unable to parse mount options 11:47:29 executing program 4: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc018aec0, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:30 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:30 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(0xffffffffffffffff) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x640) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000002c0)=0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000240)) sched_getaffinity(r4, 0xfffffffffffffd85, &(0x7f0000000300)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[], 0x0) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) futimesat(r5, 0x0, &(0x7f00000006c0)={{}, {0x0, 0x7530}}) 11:47:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc020660b, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:31 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0xc008ae67, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:31 executing program 1: r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'\xf6H\xea', 0x3}, &(0x7f0000000080)="1ffc1807c579270e259a23de1755057602100e4f77ea6246b8a6bbccb09d7a4be10ec13c85fc44b9fa91e218193fadb51744156deef399480909877b6b1f122ce4431b85bca23d1afdf71a9cd3291a4d6b3b2351825a6f6a6fa5d5552b229f128515b49238125fa0d6a737a657c7", 0x6e, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) 11:47:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x5, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:31 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:31 executing program 4: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:31 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x5, &(0x7f0000000500)=[{&(0x7f0000000240)="b62d48fa8d81138436937fa9adf6cea56e6fceefc410073e91b155bbf79ddaf04d80e67b5ec6eddd806b9d3fdf75f2d607c25015cc7239837ac0635273f4f51878944eb71b9482a44a01fc428fb6408c8fd0b2a1c53747f0b382987ca3b1c99fab9f0910313f5870bece8c8794901d5fe40ba30ce158dfae7246058bbb5d51f7", 0x80, 0x1ff}, {&(0x7f00000002c0)="5ec0cc9501c576bd42cb2aea1c8a6c1695178dfc762e02d1ab7dbc74ec60b85090152700fc9850d13408624153bf27849809b0bfc1a45d69e86aefb711516f6e00816098d3e2bd01fcb4994026b85650dd798c8d534e386060b00e5bc6d7a76aa4c6a47aeeea81c8588d52", 0x6b, 0x1800}, {&(0x7f0000000340)="d7", 0x1, 0x8001}, {&(0x7f0000000380)="a130f642f43aa49e743054a894db9b43500933d739a33ed8e7beae1d83070926742c854a9ec40124555b6d92125fa2e1739923a8b83dd78f8eaa30dd9e8107968a06d52fcdc219ca4b449b33603c304914dd5d609c1937ede6e457d084", 0x5d, 0x1}, {&(0x7f0000000400)="a19a3b25bc337693a0bbe232abbd4b6cf62ba6f15c9a4e90778b5980938319d93c9e474aafe9aca950602e69340935b0cd21920de5dde575633bc46f16f23575dd1f14768fd936c61c87b67f7866a2523542d7bb1d598065149ee337b9140e5be439d5188a938c434bb5311846c6628c580b40906cf8dce44105d6072fdccf0b525cf7f7b7b243770261d0d97c0c51f04675070eb747a1a95bb20f445f0c32f6011afb392f67d124feceddca4f7a52bf373fa8064a68c0de5b66e049fdc52be80a7becd2150e26", 0xc7, 0x1f}], 0x30000, &(0x7f00000006c0)={[{@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x4}}, {@noacl='noacl'}, {@user_xattr='user_xattr'}], [{@fowner_eq={'fowner', 0x3d, r3}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="9500001f00000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0xf, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffffb}, 0x70) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x0, 0x1, [0x5, 0x3, 0x7f, 0xdd9, 0x73e, 0x975, 0x8, 0x800000]}) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x400040) 11:47:32 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) 11:47:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x7, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) read(r0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x4, 0x1, 0x8000, 0x9, 0x6, "a787bcf10c33c9d989293de91930402d28f701", 0x2, 0x2a4}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 11:47:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x11, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:32 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:32 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x10, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000100)) 11:47:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000040)=r3, 0x12) openat$usbmon(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon0\x00', 0x200, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x7e2, 0xfffffffffffffffe, r3}) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r5 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/110, 0x6e}], 0x1, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x2) fcntl$lock(r0, 0x24, &(0x7f0000000080)) 11:47:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x18, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x18cae0, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:33 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:33 executing program 4: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0xffffff1f, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:33 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) 11:47:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="94db612efe8743520c5633c92624f7bca46673d4643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000O000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0600000000000000643d", @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x56, 0x6, 0x0, {0x1, 0x0, 0x2d, 0x0, '@)keyringprocselinux:$selinuxposix_acl_access'}}, 0x56) socket$nl_xfrm(0x10, 0x3, 0x6) 11:47:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0xffffc90000000000, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:33 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x2, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:33 executing program 1: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz0', "f237884d2552dd6bd90f231c88b90be4248b034a0fd9519fbd1d2f604a6a8d8db11c86eef21d93c81260fb59a8a74103880b4d6e0bd31c4d4d0c5c68a05031295b450255b5d32daa56fadcd1bfe64f90f3c73c7a61532790f8ee280d91cb07744f03b3e9514b613f0cc6b05cdf2cb03afd7c5da1fe477f585f0353b447b8703633eebbe605ceca5f4c3d86fb988682500d200739e4c69c38aaee89856d59e2f384151e12910de5c41d5691b5c46e9a1a8f6352818e109b00482bba75056c9a708a874b5f30"}, 0xc9) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000380)={0x7ff8000, 0x0, 'client1\x00', 0x0, "25bc2ce23fbd3883", "c52039a5beba43f2df0da20b7df5de6e320fb67248f4de99bbd3987b5d6037a0", 0x24c7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0x40505331, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 11:47:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x3, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x4, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x5, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:34 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) clone(0x14200000, &(0x7f0000000300)="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", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000001300)="a7ea9beefa813d758e67880a4edcd2bbb9366d2450e87e4ead376b3f89fbbdfa5209f10e7d038d336d801adb0783794678bb054f8c5cf5a08d8fe2f773ef107203e188323b89190dbd0682973bf88974601c3444108132d2a2313cd7e53a03717a903557f6f58c70e2ba1251772ab4fff70117c415500ee2bef0045d9887188fb77cd1139f2caef7356d0efb006b9b195314834fb6939d8e6018") r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x18, 0x9, 0x6, 0x8, 0x0, r3, 0x7, [], r4, r0, 0x3, 0x2}, 0x3c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)) r6 = syz_open_pts(r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup2(r2, r6) write$P9_RMKNOD(r8, &(0x7f0000000000)={0x10305}, 0xfffffee2) 11:47:34 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:34 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x0) 11:47:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x6, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/de\x93Esnd\xa6\xef\x8a?}\x9ac\xabc\x00', 0x1, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {0x0}, {&(0x7f0000000400)=""/155, 0xfffffffffffffe30}, {0x0}, {&(0x7f00000004c0)=""/102, 0x66}], 0x1000000000000290, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x3}}, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r6, r7}}, 0x18) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="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"]) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}]}}], 0x1, 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 11:47:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x7, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x300, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:35 executing program 4: r0 = socket(0x2, 0x3, 0x100000001) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e24, 0x4, @rand_addr="aa1dc66233a411ece41fc7ea1ec94741", 0x1}}, 0x7, 0x9}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x7da31dba, 0x40, 0x8207, 0x400, 0x3f, 0x1, 0x0, 0x0, r5}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x18002, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000020002009880b00000000000100000000000001000062"], 0x1a) 11:47:35 executing program 1: r0 = socket(0x400000000010, 0x2000000000000003, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000001c0)={'ipddp0\x00', 0xe9}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@get={0xe8, 0x13, 0x4, 0x70bd2a, 0x25dfdbfe, {{'xts-camellia-aesni-avx2\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0x80000000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x400800) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xff, "ae93b2a9603983cacc8b5af6e4c722597ed382a0ee20a471a485906607ec2e1bd6a5658f048c382a260bfc4f0dbfdc88b5fcc5d7ea939945bc20129dff9a1ba78992e9aea1b1da8855876eac21e356eb61a6a461765c87403fad592ae39f4ae753d712bd0bc8e90c8689e94bda0afba6569b1558e7533b6fc567d919712e41878de233d6fe2e5c9e03e81ee3b7b23f67dc7c5a6712fff43c7ca369ff441106e0a5590150e4373f7d8c0afe089e7ca69e536652d4763e08406e0e391a0b320f153d916aa6d31c026c017b030e02faccdae5db928164e1f30f0a0a76b0652deb8f38985fccdd8de76990a0b0660c99a200e99150b4bfd2881f057a492094aa9b"}, &(0x7f0000000380)=0x107) 11:47:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x500, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 288.293726][T10109] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 288.357152][T10116] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 11:47:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f0000000580)='/dev/video#\x00', 0x1, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0xfef5) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="6da15efa0ce5af76005cc317a3e81755197c442290010c92478ea59bb24c0518d3d8be4b11f52047922c7ffc27ece4aab9fa9b6f94c3eb92042549c53967dbcc1e9a350add9544272cc63ecc4aa905bbc43f8c271b2e598cd05d971c4afe95c5ffbacc19dd0f72838e9f24ecbdc84c04100ec7164b03f74dc40a0183fdb58b16763cef91ebcad979cad7156385567bb34088794646d69d0380308284a051e2f0995ba3ba7063ece06b534bfbb81c56ca940216da79610af925cdbf5803a75a97dfa7b2ac0ddeac51d110cd566f8e1c4b3cdf39834354c0be398d234cb13d51ee43acf23a10a4d79b850cef346e", 0xed}, {&(0x7f0000000340)="06938de8dd7cc8117efa203f2592ac4867964bad45bd7546835054a84f560f3494f63447a8ae978afe56e431c4c4cb6d407b22e983075d94d3873cfec695ec500026afd1081cbd095319b5684802f6e0500f95b0c77b172602ca8d22deab961c53ab7d68e0dbc3a0c62fae5caf025c4522a0bce68e2d2e4dc84d01011c8f0f9ca5a413cd69c247b2011aaa23f45c44f2a264751aebc141008d32183a9e09e89b2cb4ce5937bfe6dc", 0xa8}, {&(0x7f0000000400)="19718750478e25640bc7aab890128b3af834057ece7fd2f303864df1d449fcf3fb61c5b5f8cb7e94678f383393192a4809799751f5425a28dc31f8bc1419fec677a75aaca5d2c53365614b61297c4f373576", 0x52}], 0x3, &(0x7f0000007b00)}}], 0x2, 0x80801) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x0, 0x8, 0x4, 0x7}, {0x6, 0x3ff, 0xff, 0x101}]}, 0x10) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x29c602) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000100)={{0x0, 0x2, 0x39, 0x2, 0x5b}, 0xffffffffffffffff, 0x7, 0x3}) 11:47:36 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x600, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:36 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:36 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:47:36 executing program 1: socket$inet6(0xa, 0x401000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40800, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0f2016c4e2f92a4208c4c241983e2ef30fc7b22b660000660f38818f00a00000670f01c366baa100b806000000efc74424009d3e0000c7442402aa000000c7442406000000000f011c24c4c2cd3df00f01d1", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000000300)={0x0, 0x0, [0x6, 0x0, 0x3ff, 0xb81c]}) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x490040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000002c0)={r10}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f0000000040)={r10, 0x0, 0x8, r10}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000580)={r7, @rand_addr=0x800, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) msgget(0x3, 0x224) msgctl$IPC_INFO(0x0, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) r15 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 11:47:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x700, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:36 executing program 4: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 11:47:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x2000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8000000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) read$char_usb(r3, &(0x7f0000000380)=""/173, 0xad) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x10100, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000740)={0x4, 0x0, 0x100b, 0x401, 0xe5b3, {0x10001, 0xbf}, 0x2}) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20000, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000200)=0x4, 0x4) write$cgroup_type(r6, &(0x7f0000000280)='threaded\x00', 0x9) write$P9_RSTATFS(r2, &(0x7f00000005c0)={0x43, 0x9, 0x1, {0x10000, 0x2, 0x6, 0x10001, 0x7fff, 0xdf30, 0xb66, 0x9, 0x9}}, 0x43) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x2) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'bond_slave_0\x00'}) r7 = socket$kcm(0x2, 0x3, 0x2) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000640)={r7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x3, 0x76, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/118}, &(0x7f00000002c0)=0x78) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8b4c0eb31a15f45d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RLERROR(r6, &(0x7f00000006c0)={0x17, 0x7, 0x2, {0xe, 'vboxnet1vmnet1'}}, 0x17) [ 289.229333][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.236817][T10144] bridge0: port 1(bridge_slave_0) entered disabled state 11:47:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x4000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0xff0f, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:37 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x200000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 290.008490][T10164] device nr0 entered promiscuous mode 11:47:37 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:37 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:47:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x80ffff, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) lstat(0x0, &(0x7f0000001580)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xffffffffffffff51) getgid() syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', 0x0, 0x47, 0x4, &(0x7f00000016c0)=[{&(0x7f0000000240), 0x0, 0x6}, {0x0, 0x0, 0x6}, {&(0x7f0000000600)="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", 0xc42, 0x8000}, {0x0, 0x0, 0x600000000}], 0x800, 0x0) 11:47:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x1000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:38 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:38 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 291.374333][T10164] device nr0 entered promiscuous mode 11:47:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8000000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) read$char_usb(r3, &(0x7f0000000380)=""/173, 0xad) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x10100, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000740)={0x4, 0x0, 0x100b, 0x401, 0xe5b3, {0x10001, 0xbf}, 0x2}) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20000, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000200)=0x4, 0x4) write$cgroup_type(r6, &(0x7f0000000280)='threaded\x00', 0x9) write$P9_RSTATFS(r2, &(0x7f00000005c0)={0x43, 0x9, 0x1, {0x10000, 0x2, 0x6, 0x10001, 0x7fff, 0xdf30, 0xb66, 0x9, 0x9}}, 0x43) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x2) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'bond_slave_0\x00'}) r7 = socket$kcm(0x2, 0x3, 0x2) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000640)={r7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x3, 0x76, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/118}, &(0x7f00000002c0)=0x78) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8b4c0eb31a15f45d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RLERROR(r6, &(0x7f00000006c0)={0x17, 0x7, 0x2, {0xe, 'vboxnet1vmnet1'}}, 0x17) 11:47:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001540)="11dca50d5e0bcfe47bf070") msgget$private(0x0, 0x4) msgrcv(0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 11:47:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x2000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:39 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:47:39 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x180, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ae92814afa5a08e1939ca802dcf93f1c695d6113ee44a92e39135db73b27f115f662cc486143f2ec613a4a8505f5c16d5dae805eaa648971b347923dc533053025d71d3feb8d649cb471dc642351db12a81b36a5af729e763898267e6bf6425969f6c45213249346a0f96264665776ce117e394979f992e878c3490b7f99622e48593638fea4575612d42c274df354cff17c5623fde477050ba4a39d5ee766234809e8f26d4773c2c0da9b89abe9a5e4a39783035d47d080173f0fa9582bedcfe6bba5c928b0ab1848547ebd742f75de7a256f84a17adb6c1fec8be82f2162753b405163d6bd2624037141139469cb5a829105ab49eee801", @ANYRES64=r2, @ANYRESHEX=r1, @ANYRESDEC=r4, @ANYRES64=r6], 0x5}}, 0x2008004) 11:47:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x3000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:39 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x4000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 292.499676][T10246] device nr0 entered promiscuous mode 11:47:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x5000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1354, 0x28, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1b}, [@nested={0x110, 0x5e, [@generic="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", @typed={0x8, 0x77, @fd=r0}, @typed={0x8, 0x67, @ipv4=@loopback}]}, @generic="b5114ac4384ba7c8f430cdfe1d260849d4af5a07323387cd872984813d01af9e9642fbc127629f93f790ec5fdac85488929a4daa1a32d898015ae4a4843fc742f3467f3e04d0bc674bd45f7aa71a695c1eecbcc8da407a6ebf8c0545e3b13b0717e3b0fe4d5691a7a85e801c062dea5b4e45a028dc36f34514a91031810d2f772edc320e2ea8623e2f7cce15d089acaee47d4faae7fc5efae1", @generic="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", @typed={0x14, 0x37, @ipv6=@empty}, @generic="ed50389f5cc64e80b55408a77db0e307b41c41569623c4dfca0a2aed3b9d050e5fe296d0450680cc9d88ff91bc94f575b622db524086e5a8df8994c41c6e6c984782a690a47e652cd8701351e80cbd918a01e28672dd6633b4fd6f094bd491cb37a70bb39e9966b2f3a2746c9cbec6f5bc698cec5b37074b81", @generic="a9f0c6709e035130c74027ed0aa59d70bbb9c7ad2dddb2e27c4f83195e9b8307b99f95de0e61a47b28eac19d95", @nested={0xdc, 0xd, [@generic="582418f4de17911fadcd84a980368b", @generic="4eb613a61a45aeb91bc04f582abd4806c1d563fd6c08bdfc083064b97867d69df5b86ae6e3fba76e9f7f008ce4a0f07a2ed8249f73f14914b2e881e8a3867bf7ac08d38323b15ac987ad6f7b528451e5d4c4fe94b4563dfe26ef7699bbd80aee3a59a16050aa25f1459785cc067547fc647204d2d4b07e9abcb89a03b7cd87851ae3a9859656e134da601ff652d734241fc52c69191d193ff0928c77b69a15dfa90609a9de726ac2f82e5e9b809792c253c4b987b91e8dcd9b711eae799be0e5b54af282976901"]}]}, 0x1354}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000016001fff0000000000000000ffffffff0c00000008000a00e0000001"], 0x20}}, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x488040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001600)={0x0, 0x0, 0x4, 0x0, [], [{0xfffffffffffffc01, 0x4, 0x401, 0xc39e000000000000, 0x0, 0x7fffffff}, {0xcf, 0x2, 0x8648, 0x1000, 0x15f, 0x7eb}], [[], [], [], []]}) 11:47:40 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x31b, 0x140010006, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x40, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9}, 0xf) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x243d93c49d24dda9, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2332, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x4, @rand_addr="5605c6c98692a7a213969b247aea1496", 0x3f}, r2, 0x7}}, 0x48) 11:47:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x6000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:41 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:41 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:41 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:41 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x7fffffff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000540)={r3, 0x7fff80, 0x5563, 0xffffffffffffffe0, 0x1, 0x10001}, 0x14) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0xfffffffffffff368, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x5c802, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r10 = syz_open_dev$video(&(0x7f00000014c0)='/dev/video#\x00', 0x44, 0x0) ioctl$VIDIOC_G_STD(r10, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000000040)=r11) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=r11) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f00000003c0)=r11) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f00000000c0)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={r12, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={r12, @in6={{0xa, 0x4e22, 0xfffffffffffffffa, @remote, 0x20}}, 0x0, 0xab, 0x8001, 0x100, 0x40}, &(0x7f0000000240)=0x98) getpeername$unix(r6, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x44, r5, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xffffffffffffffab}}, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) 11:47:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x7000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:41 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:41 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a302ce06de080d8246ec4ef2d282763f268c8aa3608b743bb6cdcf60965ace92f53a60a80e57f3a36c4089320e99bb213c7e35c235487f8dca589539322921622cfc4529ec41b6b4a38ef1b61683bfa7d719a772ff1095576a4f3307732339b37105d448704f45c0ccee897350297f346828f5129f4d15cab7661db8771cdda01942a527119caf6602c4e3c0fb72ba58abf302df339e7a7b7a5270b39d673ca5d4f6c27dfbf175328755771128e895c797cda80a6292f091d253a0266"], 0xbf) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x20, 0xff, 0xd23}) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x140) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1007, 0xdc7a, 0x2, 0x5, 0x6, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) 11:47:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x40000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:41 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0xff0f0000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:42 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r5, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000080)={&(0x7f0000001480)={0xf8, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff6ecf}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2041004}, 0x20000800) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1a8, r5, 0x0, 0x2, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x130, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5555}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x200020c2}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x2, 0x400000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r10, 0x4) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r11) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r12, 0x40000000af01, 0x0) getpid() syz_kvm_setup_cpu$x86(r11, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5e, 0x0, 0x0, 0x0) [ 294.794205][T10344] Started in network mode [ 294.815207][T10344] Own node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 294.848752][T10344] Enabling of bearer rejected, failed to enable media 11:47:42 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0xffff8000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:42 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) accept$inet(r0, 0x0, &(0x7f0000000000)) getsockopt$sock_buf(r0, 0x1, 0x7, 0x0, &(0x7f0000000180)) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{}, {}]}) 11:47:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0) 11:47:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x20000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4d00000000) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14002, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 11:47:42 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x5, 0x4) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='\x00', 0xfc) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1003, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x1, r0}) [ 295.424057][T10375] x86/PAT: syz-executor.4:10375 freeing invalid memtype [mem 0x00000000-0x00001fff] 11:47:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x80ffff00000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:43 executing program 2: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x540}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/110) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000001c0)=""/139) 11:47:43 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) tee(0xffffffffffffffff, r1, 0x4, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffffffffffff}]}}}]}, 0x3c}}, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x292759a8cc0f4c9, {0x2, 0x1, 0x7, 0x5}}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x4c2100, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=0x0) mq_notify(r5, &(0x7f00000002c0)={0x0, 0x4, 0x1, @tid=r6}) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0xead0ae276fd5ec31}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0090200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0xfffffffffffffd41, r4, 0x800, 0x70bd2d, 0x25dfdbfc}, 0xfffffffffffffe9f}}, 0x84adde456c5ea63c) [ 295.985968][T10399] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 296.019879][T10399] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 296.142612][T10399] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 296.167007][T10399] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 11:47:43 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x100000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:43 executing program 4: syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = geteuid() quotactl(0x0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)="554eb0bb823afa001b4e6c6d0159cbf9f84eedf463bcf387bf23df54216818b5f22ca825305e9a4b22e48cfbad677df130433a2514c2fac2e53eb2e54d78fe78e8a484882d3092b62f9dd7b39e1c42a680b3d085e30191adb60a60a74553082924a51af3044b7562b9") getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, r1, r2}, 0xc) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x1) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x9, 0x4, {0xfffffffffffffffa, 0x3, 0x7, 0x0, 0x1}}) 11:47:43 executing program 1: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000}) close(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x20000}, 0x0, 0xd, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xf7, 0x20000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2800004, 0x13, r1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/ul\x00', 0x0, 0x0) r2 = epoll_create1(0x0) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, r3}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4040001) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 11:47:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x200000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:44 executing program 2: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:44 executing program 1: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) pwrite64(r0, &(0x7f0000001640)="a6", 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket(0x40000000015, 0x1, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) 11:47:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={'ip_vta0\x00\x00\x00\x00\x00\x00\x00\xdf\x00', @ifru_addrs=@ipx={0x4, 0xe96, 0x2a0d110e, "006d00080004", 0x5c5}}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x401, 0x101800) accept$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 11:47:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000009c0)='/dev/loop#\x00', 0x0, 0x104086) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x1878c3) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/132) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) 11:47:44 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)=ANY=[@ANYBLOB="670000002610ecbc21a283b5b082fdc972044a08a12751d0b5be4e0a05bf48bf35dc1ac425eb95255582231a1f1a59b385b00312bbc23afe7a1e516f8204da98f48e4f3fa2e4d1cd4773507a0e5a461b66784a4b24d5b60953b178ce5641f25772d237d7cef4856c293bd7"]) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000380)='ke\x9bring\x00', &(0x7f00000003c0)={'z\x00\x05', 0x0}, 0x0, 0x0, r1) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8001, 0x304000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/205) r5 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000580)='o', 0x1, r2) keyctl$link(0x8, r2, r5) 11:47:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x300000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:44 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:44 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/246, 0xf6) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x805063, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11:47:44 executing program 1: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) ptrace(0x4206, r0) ptrace$getregset(0x4207, r0, 0x0, 0x0) 11:47:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x400000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x30, 0x1, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}}, 0xa0) 11:47:45 executing program 2: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:45 executing program 1: r0 = syz_open_dev$video(&(0x7f00000014c0)='/dev/video#\x00', 0x44, 0x0) io_setup(0xfd, &(0x7f0000000000)=0x0) io_destroy(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = dup2(r0, r3) r5 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x80000) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r11, 0x400, 0x0) fcntl$setlease(r11, 0x400, 0x2) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) r14 = syz_open_dev$dspn(&(0x7f0000000680)='/dev/dsp#\x00', 0xfffffffffffffda3, 0x20000) io_submit(r1, 0x6, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1, r4, &(0x7f00000000c0)="bdcd078a8750ab0e519a598ad27321c8278417bdf5dd8c7d46876e118208e1b65c4ff6", 0x23, 0xced, 0x0, 0x0, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4, 0x800, r0, &(0x7f0000000180)="14f6583b043dcdb45e1717a2566bc9483f6273dbf3fcf8bf9a9f632396220177d1431f805ba56e9ffd7ea784350d2a4930415d82f3454f00f9b0476fc5e4761a97ba1cc8eb59e5e0f269e920a134398b76d8c249", 0x54, 0x3, 0x0, 0x1, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000240)="85a194df2ec548cd0308f89c9ade97730c33fd703122380666f2b135f2eb92c6ae251b58ee6302e671fb5912f2eeace14e3a38337dda59fad7b3184955fd937fdeb4340806e98e021e0069cd1068df4aea8d46cb818d528cb53a38e6aa94905584a747fe9948e27af83150c941e2aff74171266838080792179203c42e86c4d5d45a169014e4af239ba902ddd8344e686cfafcec244d2b5543", 0x99, 0x40, 0x0, 0x0, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6dcdc1f76c0bc373, 0x4, r10, &(0x7f0000000380)="3e7af962f27642f84f1037bca93c6caf57518a65c7e2f3de8e81f1f407a4be5b2c950bd127a362cacd95158751ea83217de2dfaed0275dcff69ab9f3d424505fe8d8ce1514a5f1e55216a2f41c147d801e7275646cf006a082e9ed14e5f43bf5e88cc23e17db710ff6f7719268a7fa9241a1391cfd38e4440b302f0a6ca8de9f8a3d2c09639fd5a2fcbd777eeffa1d902634432447b1f0348c02303d0f3f7f4ff033efee7483d8da80634ed36d1623e9beff6618f0133260550728c2663e2745fe200460172c0288dc8c02690cbd9f90a9861c087404b73f5dcf5a9a46f32f54", 0xe0, 0x3, 0x0, 0x2, r11}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x3f, r13, &(0x7f00000004c0)="42d453b8753973976e865f957df51d91e1f6b1f29aac7b764b57bf6e0f14fde224e998237f025b7cce1b158e4e4731c7f858a1b6b100781cad344b10754dea17975a2f09d2beff95dfddf777d18c74c465e12564024ce7dd2db92de66179", 0x5e, 0x1, 0x0, 0xb402943eef46590f}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x7eb, 0xffffffffffffffff, &(0x7f0000000580)="c0e5769af967ccd0ec94edf77bfeee32e8e7bdbae87a8ae0ecad45887a7c8b523318cb904ae4494cc4176628ec26679b27df999426e6ad6337c8a7fdbe515688d7e302614a9173d00a82c65c651a7fb3be051a6cea91c61bb48aaeed460a2307d43a3e249d7d6a015012477443e12ff26c03f00d44d6e1932e9915cafa49f7171f486f07cc14b2c68448c31f6ee40961120e510f0860e229803c8e368aebc25c5cf80510395bcdb67fc8ee5e62cee31fd03470ab3e207c768fb96543470b5406a70e6786ed76ab501b3f1e8b640dc97fbfaae325c17b293abd2f3990ec288bfcc0258d6732f1a568586db59e4943431a4de3d7e55a2015114bd503", 0xfb, 0x9, 0x0, 0x3, r14}]) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)) 11:47:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x500000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:45 executing program 4: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101200, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) unlinkat(r0, 0x0, 0x100) 11:47:45 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:45 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x600000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x11ffd, 0x3) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xfffffffffffffffd, 0x4) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xb) 11:47:45 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:45 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:46 executing program 4: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 11:47:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x700000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:46 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="076304400000000011634840010000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="85616466000000000500004a692046014c56d2167dfa52393825000000000001000000000000002b00000000000000852a747000000000730a67759c524f96b2b2dfc7da94c888af148defddf11576f238932a52c8c4994c7f8c17aa9f4d3440b02e0a735419274bd9b2a019801d", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB="d20000000000000001000000000000002900000000000000852a6877000100000200"/48], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00040000000000000d630000"], 0xd8, 0x0, &(0x7f00000005c0)="97b97703053e28aa4c83bf9e2ec1ca5d6823a6da57817c096026b8ec761b5008543b3dcf61ad1f8ff0a3661f11d663c07bce6314ae3aa4719967b0ca5374fb617dbe0862fde59d8736fca9ccca2940e339b215fc739653ec327232ed33a0cb9f37383cbdac1b3094573a839f7e62242c66e912e9be9c55378dbcbda7fe714b5a7d792cc303b911a13d7d464a6d2033d7019271ea752e5e7860801609b3e0f28730bd19d4401eab62721c4b16933b425fd77763c016c130b9b8e28f99c85f98783cc148835db0ed6b6299b9c8cb1793dbae6894cc4a45c875"}) mlock2(&(0x7f0000b68000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00000007c0)=""/200) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7fffffff}, {0x100000000, 0x8}], r3}, 0x18, 0x2) r6 = getgid() setresgid(0x0, r4, r6) r7 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0xa82, 0x10001, 0x3, 0x1, 0xfffffffffffffffc, r7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x28de, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x2}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:47:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x4000000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:46 executing program 1: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/34, 0x22, 0x0, 0x7, 0x5, 0x0, 0x1}, 0x120) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x800) read(r0, 0x0, 0x0) 11:47:46 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:46 executing program 5: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0xff0f000000000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba006c4"], 0x0, 0x7}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x0, @capture={0x0, 0x0, {}, 0x0, 0x7fff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 299.543744][T10569] debugfs: File 'dropped' in directory 'sg0' already present! 11:47:47 executing program 5: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 299.597827][T10569] debugfs: File 'msg' in directory 'sg0' already present! [ 299.631053][T10569] debugfs: File 'trace0' in directory 'sg0' already present! 11:47:47 executing program 4: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xd, 0x0) 11:47:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0xffffffff00000000, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:47:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa5064492916d98251883c182f2ec07ed91d53e745a1b28530915018508b8d9d2e61860cf64cf10f6aeee77bfa0a8b59b471db757c2688031c4c9aed23aa465965f1b7ea71edcd4e5535300574d16539766ddfaf61160d7c0a9b82b0dc6fc2", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:47:49 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:49 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3}) 11:47:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x2, 0x2, 0x2, 0x0, @msi}]}) 11:47:49 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2284, &(0x7f00000000c0)) 11:47:49 executing program 0: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:49 executing program 4: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000340)) r1 = socket(0xa, 0x80000, 0xd05) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001900)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x7, 0x400000) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket(0x6330974a6979d31c, 0x2, 0x1) clock_gettime(0x0, &(0x7f0000000240)) 11:47:49 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003, 0x5}) 11:47:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x2, 0x2, 0x0, @msi}]}) 11:47:49 executing program 5: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:49 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r0, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:47:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xffffffffffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 11:47:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x4, 0x2, 0x2, 0x0, @msi}]}) 11:47:50 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) 11:47:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x5, 0x2, 0x2, 0x0, @msi}]}) 11:47:50 executing program 0: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4", 0x69, 0x0, 0x0, 0x0) 11:47:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 11:47:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x6, 0x2, 0x2, 0x0, @msi}]}) 11:47:50 executing program 5: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f5fffbf7000000000000000085000000360000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="62940e1180b23cef938c0d17a6d6", 0x0, 0x15}, 0x28) 11:47:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x7, 0x2, 0x2, 0x0, @msi}]}) [ 303.591576][T10691] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 303.688180][T10691] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:47:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x300, 0x2, 0x2, 0x0, @msi}]}) 11:47:51 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) geteuid() msgctl$IPC_SET(0x0, 0x1, 0x0) fchownat(0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) 11:47:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x500, 0x2, 0x2, 0x0, @msi}]}) 11:47:51 executing program 0: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 304.359936][T10723] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 304.384620][T10721] gfs2: not a GFS2 filesystem 11:47:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x600, 0x2, 0x2, 0x0, @msi}]}) 11:47:52 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:52 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 304.583750][T10735] gfs2: not a GFS2 filesystem [ 304.720020][T10744] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:47:52 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) geteuid() msgctl$IPC_SET(0x0, 0x1, 0x0) fchownat(0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) 11:47:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x700, 0x2, 0x2, 0x0, @msi}]}) 11:47:52 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 305.051634][T10758] gfs2: not a GFS2 filesystem [ 305.104273][T10767] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:47:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) geteuid() msgctl$IPC_SET(0x0, 0x1, 0x0) fchownat(0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) 11:47:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:53 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:47:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x2000, 0x2, 0x2, 0x0, @msi}]}) [ 305.543768][T10788] gfs2: not a GFS2 filesystem 11:47:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:53 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:53 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:53 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="455204", 0x283}]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="10dca5055e0bcfe47bf070") 11:47:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x4000, 0x2, 0x2, 0x0, @msi}]}) 11:47:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 306.218809][T10817] Dev loop4: unable to read RDB block 1 [ 306.276583][T10817] loop4: unable to read partition table [ 306.314904][T10817] loop4: partition table beyond EOD, truncated [ 306.345688][T10817] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 11:47:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xff0f, 0x2, 0x2, 0x0, @msi}]}) 11:47:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 306.485866][T10817] Dev loop4: unable to read RDB block 1 [ 306.494099][T10817] loop4: unable to read partition table [ 306.499815][T10817] loop4: partition table beyond EOD, truncated [ 306.582500][T10817] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 11:47:54 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:47:54 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000100)={[0x2000]}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x03\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 11:47:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x200000, 0x2, 0x2, 0x0, @msi}]}) 11:47:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 307.002726][T10859] dns_resolver: Unsupported content type (32) [ 307.056747][T10866] dns_resolver: Unsupported content type (32) 11:47:56 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x80ffff, 0x2, 0x2, 0x0, @msi}]}) 11:47:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x3}, 0x0, 0x0, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000280)={'sy\x00', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0x0) keyctl$search(0xa, r0, &(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) 11:47:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:47:56 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x1000000, 0x2, 0x2, 0x0, @msi}]}) [ 308.781973][T10900] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x2000000, 0x2, 0x2, 0x0, @msi}]}) [ 309.099759][T10913] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:57 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3000000, 0x2, 0x2, 0x0, @msi}]}) 11:47:57 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:57 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:57 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 310.225795][T10943] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x4000000, 0x2, 0x2, 0x0, @msi}]}) 11:47:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:58 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 310.514670][T10958] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:58 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:47:58 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x5000000, 0x2, 0x2, 0x0, @msi}]}) 11:47:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:58 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:58 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 311.308275][T10993] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x6000000, 0x2, 0x2, 0x0, @msi}]}) 11:47:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:59 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 311.708368][T11008] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x7000000, 0x2, 0x2, 0x0, @msi}]}) 11:47:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 312.018267][T11023] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:47:59 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:47:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:47:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x40000000, 0x2, 0x2, 0x0, @msi}]}) 11:47:59 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:47:59 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 312.412173][T11041] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xff0f0000, 0x2, 0x2, 0x0, @msi}]}) 11:48:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 312.807545][T11060] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x0, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xffff8000, 0x2, 0x2, 0x0, @msi}]}) [ 313.002387][T11069] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x0, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 313.329912][T11079] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:01 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x20000000000000, 0x2, 0x2, 0x0, @msi}]}) 11:48:01 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180), 0x0, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:01 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 314.179999][T11100] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea87294", 0x1d, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x80ffff00000000, 0x2, 0x2, 0x0, @msi}]}) [ 314.557691][T11118] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea87294", 0x1d, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x100000000000000, 0x2, 0x2, 0x0, @msi}]}) 11:48:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 314.846086][T11124] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:02 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:02 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea87294", 0x1d, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x200000000000000, 0x2, 0x2, 0x0, @msi}]}) [ 315.299042][T11152] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:03 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e", 0x2c, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x300000000000000, 0x2, 0x2, 0x0, @msi}]}) [ 315.672977][T11165] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e", 0x2c, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x400000000000000, 0x2, 0x2, 0x0, @msi}]}) [ 316.004352][T11178] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:03 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e", 0x2c, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x500000000000000, 0x2, 0x2, 0x0, @msi}]}) 11:48:03 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:04 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 316.503916][T11201] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x600000000000000, 0x2, 0x2, 0x0, @msi}]}) 11:48:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63c", 0x33, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:04 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r0, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 316.827654][T11217] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63c", 0x33, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x700000000000000, 0x2, 0x2, 0x0, @msi}]}) [ 317.191531][T11232] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:05 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:05 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r0, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63c", 0x33, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:05 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x4000000000000000, 0x2, 0x2, 0x0, @msi}]}) 11:48:05 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 318.123601][T11257] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:05 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r0, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc676", 0x37, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xff0f000000000000, 0x2, 0x2, 0x0, @msi}]}) [ 318.441493][T11270] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc676", 0x37, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 318.830440][T11283] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:06 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xffffffff00000000, 0x2, 0x2, 0x0, @msi}]}) 11:48:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:06 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc676", 0x37, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:06 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x3, 0x2, 0x0, @msi}]}) 11:48:06 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 319.364974][T11310] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:07 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x4, 0x2, 0x0, @msi}]}) [ 319.671249][T11333] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:07 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:09 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x11, 0x2, 0x0, @msi}]}) 11:48:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:09 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:09 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 321.699887][T11367] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x18, 0x2, 0x0, @msi}]}) 11:48:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253", 0x39, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 321.993731][T11388] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x3, 0x0, @msi}]}) 11:48:09 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:10 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x4, 0x0, @msi}]}) 11:48:10 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:10 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 323.475501][T11422] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x11, 0x0, @msi}]}) 11:48:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x18, 0x0, @msi}]}) [ 323.896344][T11439] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 324.315545][T11455] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 11:48:12 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x2, @msi}]}) 11:48:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 11:48:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:12 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:12 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 324.738072][T11476] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x3, @msi}]}) 11:48:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 11:48:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 325.107934][T11489] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x4, @msi}]}) 11:48:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, 0x0) 11:48:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 325.494688][T11505] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:13 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x5, @msi}]}) 11:48:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 11:48:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 325.791020][T11519] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:13 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 11:48:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x6, @msi}]}) 11:48:13 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 326.400040][T11543] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 11:48:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x7, @msi}]}) 11:48:14 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 326.698329][T11554] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:14 executing program 1: 11:48:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x300, @msi}]}) 11:48:14 executing program 1: 11:48:16 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:16 executing program 1: 11:48:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x500, @msi}]}) 11:48:16 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:16 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:16 executing program 1: 11:48:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x600, @msi}]}) 11:48:16 executing program 1: 11:48:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:16 executing program 1: 11:48:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x700, @msi}]}) 11:48:17 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000004c2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x1000000000000000) 11:48:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x2000, @msi}]}) 11:48:17 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:17 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(0x0, 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x4000, @msi}]}) 11:48:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540b") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000004c2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x1000000000000000) 11:48:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0xff0f, @msi}]}) 11:48:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540b") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x200000, @msi}]}) 11:48:18 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2284, &(0x7f00000000c0)=0x2) 11:48:18 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x80ffff, @msi}]}) 11:48:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540b") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:18 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000004c2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 11:48:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x1000000, @msi}]}) 11:48:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47b") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x2000000, @msi}]}) 11:48:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) 11:48:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x3000000, @msi}]}) 11:48:19 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:19 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x200, 0x0) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) pipe(&(0x7f0000000700)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:48:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47b") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x4000000, @msi}]}) 11:48:19 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:19 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:20 executing program 1: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x5000000, @msi}]}) 11:48:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47b") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x6000000, @msi}]}) 11:48:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf0") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x7000000, @msi}]}) 11:48:21 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x40000000, @msi}]}) 11:48:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf0") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:21 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:21 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0xff0f0000, @msi}]}) 11:48:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x600, 0x2, 0x2, 0x0, @msi}]}) 11:48:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf0") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0xffff8000, @msi}]}) 11:48:21 executing program 1: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x20000000000000, @msi}]}) 11:48:22 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:22 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x80ffff00000000, @msi}]}) 11:48:22 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x100000000000000, @msi}]}) 11:48:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x200000000000000, @msi}]}) [ 335.539777][T11816] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/5' not defined. 11:48:23 executing program 1: r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x300000000000000, @msi}]}) 11:48:23 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:23 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x400000000000000, @msi}]}) 11:48:23 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:24 executing program 4: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x500000000000000, @msi}]}) 11:48:24 executing program 1: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:24 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x600000000000000, @msi}]}) 11:48:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x700000000000000, @msi}]}) 11:48:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x4000000000000000, @msi}]}) 11:48:25 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:25 executing program 4: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0xff0f000000000000, @msi}]}) 11:48:25 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:25 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0xffffffff00000000, @msi}]}) 11:48:25 executing program 1: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x2}}]}) 11:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x3}}]}) 11:48:26 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 338.824334][T11931] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/5' not defined. 11:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x4}}]}) 11:48:26 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x5}}]}) 11:48:27 executing program 4: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x6}}]}) 11:48:27 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x7}}]}) 11:48:27 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:27 executing program 1: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x300}}]}) 11:48:27 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x500}}]}) 11:48:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x600}}]}) 11:48:28 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:28 executing program 4: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x700}}]}) 11:48:28 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x2000}}]}) 11:48:29 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x4000}}]}) 11:48:29 executing program 1: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0xff0f}}]}) [ 342.182875][T12038] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/5' not defined. 11:48:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x200000}}]}) 11:48:30 executing program 2: gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x80ffff}}]}) 11:48:30 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:30 executing program 4: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:30 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x1000000}}]}) 11:48:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x2000000}}]}) 11:48:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x3000000}}]}) 11:48:31 executing program 1: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x4000000}}]}) 11:48:31 executing program 2: gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x5000000}}]}) 11:48:31 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:31 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x6000000}}]}) 11:48:32 executing program 4: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x7000000}}]}) 11:48:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="076304400000000011634840010000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="85616466000000000500004a692046014c56d2167dfa52393825000000000001000000000000002b00000000000000852a747000000000730a67759c524f96b2b2dfc7da94c888af148defddf11576f238932a52c8c4994c7f8c17aa9f4d3440b02e0a735419274bd9b2a019801d", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB="d20000000000000001000000000000002900000000000000852a6877000100000200"/48], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00040000000000000d630000"], 0xd8, 0x0, &(0x7f00000005c0)="97b97703053e28aa4c83bf9e2ec1ca5d6823a6da57817c096026b8ec761b5008543b3dcf61ad1f8ff0a3661f11d663c07bce6314ae3aa4719967b0ca5374fb617dbe0862fde59d8736fca9ccca2940e339b215fc739653ec327232ed33a0cb9f37383cbdac1b3094573a839f7e62242c66e912e9be9c55378dbcbda7fe714b5a7d792cc303b911a13d7d464a6d2033d7019271ea752e5e7860801609b3e0f28730bd19d4401eab62721c4b16933b425fd77763c016c130b9b8e28f99c85f98783cc148835db0ed6b6299b9c8cb1793dbae6894cc4a45c875"}) mlock2(&(0x7f0000b68000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00000007c0)=""/200) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7fffffff}, {0x100000000, 0x8}], r3}, 0x18, 0x2) r6 = getgid() setresgid(0x0, r4, r6) r7 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0xa82, 0x10001, 0x3, 0x1, 0xfffffffffffffffc, r7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x28de, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x2}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x40000000}}]}) 11:48:32 executing program 2: gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0xff0f0000}}]}) 11:48:32 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:33 executing program 0: gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0xffff8000}}]}) [ 345.757764][T12172] debugfs: File 'dropped' in directory 'sg0' already present! [ 345.795024][T12172] debugfs: File 'msg' in directory 'sg0' already present! [ 345.849769][T12172] debugfs: File 'trace0' in directory 'sg0' already present! 11:48:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x20000000000000}}]}) 11:48:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="076304400000000011634840010000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="85616466000000000500004a692046014c56d2167dfa52393825000000000001000000000000002b00000000000000852a747000000000730a67759c524f96b2b2dfc7da94c888af148defddf11576f238932a52c8c4994c7f8c17aa9f4d3440b02e0a735419274bd9b2a019801d", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB="d20000000000000001000000000000002900000000000000852a6877000100000200"/48], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00040000000000000d630000"], 0xd8, 0x0, &(0x7f00000005c0)="97b97703053e28aa4c83bf9e2ec1ca5d6823a6da57817c096026b8ec761b5008543b3dcf61ad1f8ff0a3661f11d663c07bce6314ae3aa4719967b0ca5374fb617dbe0862fde59d8736fca9ccca2940e339b215fc739653ec327232ed33a0cb9f37383cbdac1b3094573a839f7e62242c66e912e9be9c55378dbcbda7fe714b5a7d792cc303b911a13d7d464a6d2033d7019271ea752e5e7860801609b3e0f28730bd19d4401eab62721c4b16933b425fd77763c016c130b9b8e28f99c85f98783cc148835db0ed6b6299b9c8cb1793dbae6894cc4a45c875"}) mlock2(&(0x7f0000b68000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00000007c0)=""/200) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7fffffff}, {0x100000000, 0x8}], r3}, 0x18, 0x2) r6 = getgid() setresgid(0x0, r4, r6) r7 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0xa82, 0x10001, 0x3, 0x1, 0xfffffffffffffffc, r7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x28de, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x2}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:48:34 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="076304400000000011634840010000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="85616466000000000500004a692046014c56d2167dfa52393825000000000001000000000000002b00000000000000852a747000000000730a67759c524f96b2b2dfc7da94c888af148defddf11576f238932a52c8c4994c7f8c17aa9f4d3440b02e0a735419274bd9b2a019801d", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB="d20000000000000001000000000000002900000000000000852a6877000100000200"/48], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00040000000000000d630000"], 0xd8, 0x0, &(0x7f00000005c0)="97b97703053e28aa4c83bf9e2ec1ca5d6823a6da57817c096026b8ec761b5008543b3dcf61ad1f8ff0a3661f11d663c07bce6314ae3aa4719967b0ca5374fb617dbe0862fde59d8736fca9ccca2940e339b215fc739653ec327232ed33a0cb9f37383cbdac1b3094573a839f7e62242c66e912e9be9c55378dbcbda7fe714b5a7d792cc303b911a13d7d464a6d2033d7019271ea752e5e7860801609b3e0f28730bd19d4401eab62721c4b16933b425fd77763c016c130b9b8e28f99c85f98783cc148835db0ed6b6299b9c8cb1793dbae6894cc4a45c875"}) mlock2(&(0x7f0000b68000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00000007c0)=""/200) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7fffffff}, {0x100000000, 0x8}], r3}, 0x18, 0x2) r6 = getgid() setresgid(0x0, r4, r6) r7 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0xa82, 0x10001, 0x3, 0x1, 0xfffffffffffffffc, r7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x28de, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x2}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:48:34 executing program 0: gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:34 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x80ffff00000000}}]}) 11:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x100000000000000}}]}) [ 346.817980][T12214] debugfs: File 'dropped' in directory 'sg0' already present! [ 346.864657][T12214] debugfs: File 'msg' in directory 'sg0' already present! [ 346.943855][T12214] debugfs: File 'trace0' in directory 'sg0' already present! [ 346.961793][T12215] debugfs: File 'dropped' in directory 'sg0' already present! 11:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x200000000000000}}]}) [ 347.020495][T12215] debugfs: File 'msg' in directory 'sg0' already present! [ 347.033806][T12215] debugfs: File 'trace0' in directory 'sg0' already present! 11:48:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="076304400000000011634840010000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="85616466000000000500004a692046014c56d2167dfa52393825000000000001000000000000002b00000000000000852a747000000000730a67759c524f96b2b2dfc7da94c888af148defddf11576f238932a52c8c4994c7f8c17aa9f4d3440b02e0a735419274bd9b2a019801d", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB="d20000000000000001000000000000002900000000000000852a6877000100000200"/48], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00040000000000000d630000"], 0xd8, 0x0, &(0x7f00000005c0)="97b97703053e28aa4c83bf9e2ec1ca5d6823a6da57817c096026b8ec761b5008543b3dcf61ad1f8ff0a3661f11d663c07bce6314ae3aa4719967b0ca5374fb617dbe0862fde59d8736fca9ccca2940e339b215fc739653ec327232ed33a0cb9f37383cbdac1b3094573a839f7e62242c66e912e9be9c55378dbcbda7fe714b5a7d792cc303b911a13d7d464a6d2033d7019271ea752e5e7860801609b3e0f28730bd19d4401eab62721c4b16933b425fd77763c016c130b9b8e28f99c85f98783cc148835db0ed6b6299b9c8cb1793dbae6894cc4a45c875"}) mlock2(&(0x7f0000b68000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00000007c0)=""/200) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7fffffff}, {0x100000000, 0x8}], r3}, 0x18, 0x2) r6 = getgid() setresgid(0x0, r4, r6) r7 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0xa82, 0x10001, 0x3, 0x1, 0xfffffffffffffffc, r7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x28de, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x2}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:48:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x58, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="076304400000000011634840010000000000000000000000000000000000000001000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="85616466000000000500004a692046014c56d2167dfa52393825000000000001000000000000002b00000000000000852a747000000000730a67759c524f96b2b2dfc7da94c888af148defddf11576f238932a52c8c4994c7f8c17aa9f4d3440b02e0a735419274bd9b2a019801d", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB="d20000000000000001000000000000002900000000000000852a6877000100000200"/48], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00040000000000000d630000"], 0xd8, 0x0, &(0x7f00000005c0)="97b97703053e28aa4c83bf9e2ec1ca5d6823a6da57817c096026b8ec761b5008543b3dcf61ad1f8ff0a3661f11d663c07bce6314ae3aa4719967b0ca5374fb617dbe0862fde59d8736fca9ccca2940e339b215fc739653ec327232ed33a0cb9f37383cbdac1b3094573a839f7e62242c66e912e9be9c55378dbcbda7fe714b5a7d792cc303b911a13d7d464a6d2033d7019271ea752e5e7860801609b3e0f28730bd19d4401eab62721c4b16933b425fd77763c016c130b9b8e28f99c85f98783cc148835db0ed6b6299b9c8cb1793dbae6894cc4a45c875"}) mlock2(&(0x7f0000b68000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f00000007c0)=""/200) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xffff, 0x7fffffff}, {0x100000000, 0x8}], r3}, 0x18, 0x2) r6 = getgid() setresgid(0x0, r4, r6) r7 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0xa82, 0x10001, 0x3, 0x1, 0xfffffffffffffffc, r7}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x28de, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x2}, &(0x7f0000000340)=0x8) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x300000000000000}}]}) 11:48:35 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 347.567635][T12234] debugfs: File 'dropped' in directory 'sg0' already present! [ 347.596608][T12234] debugfs: File 'msg' in directory 'sg0' already present! 11:48:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x400000000000000}}]}) [ 347.672404][T12234] debugfs: File 'trace0' in directory 'sg0' already present! [ 347.711024][T12236] debugfs: File 'dropped' in directory 'sg0' already present! [ 347.724564][T12236] debugfs: File 'msg' in directory 'sg0' already present! [ 347.759698][T12236] debugfs: File 'trace0' in directory 'sg0' already present! 11:48:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x500000000000000}}]}) 11:48:35 executing program 4 (fault-call:5 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:35 executing program 0: gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) 11:48:35 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:35 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x600000000000000}}]}) [ 348.216009][T12266] FAULT_INJECTION: forcing a failure. [ 348.216009][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 348.264187][T12266] CPU: 0 PID: 12266 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 348.273335][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.283495][T12266] Call Trace: [ 348.286802][T12266] dump_stack+0x172/0x1f0 [ 348.291150][T12266] should_fail.cold+0xa/0x15 [ 348.295756][T12266] ? fault_create_debugfs_attr+0x180/0x180 [ 348.301582][T12266] ? ___might_sleep+0x163/0x280 [ 348.306460][T12266] __should_failslab+0x121/0x190 [ 348.311490][T12266] should_failslab+0x9/0x14 [ 348.315993][T12266] __kmalloc+0x2e0/0x770 [ 348.320244][T12266] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.326491][T12266] ? fput_many+0x12c/0x1a0 [ 348.330914][T12266] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 348.337154][T12266] ? strnlen_user+0x1ed/0x2e0 [ 348.341839][T12266] ? __x64_sys_memfd_create+0x13c/0x470 [ 348.347398][T12266] __x64_sys_memfd_create+0x13c/0x470 [ 348.352779][T12266] ? memfd_fcntl+0x18c0/0x18c0 [ 348.357741][T12266] ? do_syscall_64+0x26/0x760 [ 348.362421][T12266] ? lockdep_hardirqs_on+0x418/0x5d0 [ 348.367726][T12266] ? trace_hardirqs_on+0x67/0x240 [ 348.372761][T12266] do_syscall_64+0xfa/0x760 [ 348.377298][T12266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.378239][T12259] FAULT_INJECTION: forcing a failure. [ 348.378239][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 348.383180][T12266] RIP: 0033:0x4598e9 [ 348.383196][T12266] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.383205][T12266] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 348.383219][T12266] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598e9 [ 348.383227][T12266] RDX: 0000000020000368 RSI: 0000000000000000 RDI: 00000000004be808 [ 348.383234][T12266] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 348.383249][T12266] R10: 0000000000000400 R11: 0000000000000246 R12: 00007f47ebcb36d4 [ 348.383257][T12266] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 [ 348.467872][T12259] CPU: 1 PID: 12259 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190830 #75 [ 348.477131][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.487187][T12259] Call Trace: [ 348.490472][T12259] dump_stack+0x172/0x1f0 [ 348.494797][T12259] should_fail.cold+0xa/0x15 [ 348.499464][T12259] ? fault_create_debugfs_attr+0x180/0x180 [ 348.505259][T12259] ? ___might_sleep+0x163/0x280 [ 348.510098][T12259] __should_failslab+0x121/0x190 [ 348.515109][T12259] should_failslab+0x9/0x14 [ 348.519611][T12259] __kmalloc+0x2e0/0x770 [ 348.523845][T12259] ? shash_async_final+0x40/0x40 [ 348.528935][T12259] ? sock_kmalloc+0xc6/0x120 [ 348.533541][T12259] sock_kmalloc+0xc6/0x120 [ 348.537946][T12259] hash_alloc_result.part.0+0x95/0x110 [ 348.543406][T12259] hash_sendmsg+0x8f5/0xad0 [ 348.547911][T12259] ? hash_recvmsg+0xa60/0xa60 [ 348.553117][T12259] sock_sendmsg+0xd7/0x130 [ 348.557538][T12259] __sys_sendto+0x262/0x380 [ 348.562028][T12259] ? __ia32_sys_getpeername+0xb0/0xb0 [ 348.567420][T12259] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 348.572963][T12259] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.579189][T12259] ? fput_many+0x12c/0x1a0 [ 348.583680][T12259] ? fput+0x1b/0x20 [ 348.587475][T12259] ? ksys_write+0x1cf/0x290 [ 348.592018][T12259] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 348.597469][T12259] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 348.603030][T12259] ? do_syscall_64+0x26/0x760 [ 348.607725][T12259] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.613778][T12259] __x64_sys_sendto+0xe1/0x1a0 [ 348.618534][T12259] do_syscall_64+0xfa/0x760 [ 348.623210][T12259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.629085][T12259] RIP: 0033:0x4598e9 [ 348.632969][T12259] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.652753][T12259] RSP: 002b:00007f7f63896c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 348.661150][T12259] RAX: ffffffffffffffda RBX: 00007f7f63896c90 RCX: 00000000004598e9 [ 348.669286][T12259] RDX: 0000000000074f12 RSI: 0000000020000040 RDI: 0000000000000004 [ 348.677531][T12259] RBP: 000000000075bf20 R08: 0000000000000000 R09: 031e2c79ced742c8 [ 348.685599][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f638976d4 [ 348.693837][T12259] R13: 00000000004c7874 R14: 00000000004dd170 R15: 0000000000000006 11:48:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x700000000000000}}]}) 11:48:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:36 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:36 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x4000000000000000}}]}) [ 349.235126][T12289] FAULT_INJECTION: forcing a failure. [ 349.235126][T12289] name failslab, interval 1, probability 0, space 0, times 0 11:48:36 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 349.321621][T12289] CPU: 0 PID: 12289 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 349.330930][T12289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.341003][T12289] Call Trace: [ 349.344398][T12289] dump_stack+0x172/0x1f0 [ 349.348807][T12289] should_fail.cold+0xa/0x15 [ 349.353455][T12289] ? fault_create_debugfs_attr+0x180/0x180 [ 349.359283][T12289] ? ___might_sleep+0x163/0x280 [ 349.359698][T12268] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/4' not defined. [ 349.364147][T12289] __should_failslab+0x121/0x190 [ 349.364164][T12289] ? shmem_destroy_inode+0x80/0x80 [ 349.364177][T12289] should_failslab+0x9/0x14 [ 349.364188][T12289] kmem_cache_alloc+0x2aa/0x710 [ 349.364199][T12289] ? __alloc_fd+0x487/0x620 [ 349.364217][T12289] ? shmem_destroy_inode+0x80/0x80 [ 349.364230][T12289] shmem_alloc_inode+0x1c/0x50 [ 349.364243][T12289] alloc_inode+0x68/0x1e0 [ 349.364259][T12289] new_inode_pseudo+0x19/0xf0 [ 349.364274][T12289] new_inode+0x1f/0x40 [ 349.364287][T12289] shmem_get_inode+0x84/0x7e0 [ 349.364307][T12289] __shmem_file_setup.part.0+0x7e/0x2b0 [ 349.364326][T12289] shmem_file_setup+0x66/0x90 [ 349.364344][T12289] __x64_sys_memfd_create+0x2a2/0x470 [ 349.364363][T12289] ? memfd_fcntl+0x18c0/0x18c0 [ 349.457004][T12289] ? do_syscall_64+0x26/0x760 [ 349.461692][T12289] ? lockdep_hardirqs_on+0x418/0x5d0 [ 349.466982][T12289] ? trace_hardirqs_on+0x67/0x240 [ 349.472077][T12289] do_syscall_64+0xfa/0x760 [ 349.476601][T12289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.482592][T12289] RIP: 0033:0x4598e9 [ 349.486493][T12289] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.506361][T12289] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 349.514893][T12289] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598e9 [ 349.523220][T12289] RDX: 0000000020000368 RSI: 0000000000000000 RDI: 00000000004be808 [ 349.532932][T12289] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 349.541062][T12289] R10: 0000000000000400 R11: 0000000000000246 R12: 00007f47ebcb36d4 [ 349.549137][T12289] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 11:48:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0xff0f000000000000}}]}) 11:48:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x20074f52, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:37 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:37 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0xffffffff00000000}}]}) 11:48:37 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(0x0, 0x0) 11:48:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x2}}]}) 11:48:37 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x3}}]}) [ 350.545590][T12332] FAULT_INJECTION: forcing a failure. [ 350.545590][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 350.597008][T12332] CPU: 1 PID: 12332 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 350.606241][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.616306][T12332] Call Trace: [ 350.619619][T12332] dump_stack+0x172/0x1f0 [ 350.623969][T12332] should_fail.cold+0xa/0x15 [ 350.628579][T12332] ? fault_create_debugfs_attr+0x180/0x180 [ 350.634528][T12332] ? ___might_sleep+0x163/0x280 [ 350.639423][T12332] __should_failslab+0x121/0x190 [ 350.644374][T12332] should_failslab+0x9/0x14 [ 350.648882][T12332] kmem_cache_alloc+0x2aa/0x710 [ 350.653731][T12332] ? current_time+0x6b/0x140 [ 350.658322][T12332] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 350.664132][T12332] ? lockdep_hardirqs_on+0x418/0x5d0 [ 350.669511][T12332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.675755][T12332] ? timespec64_trunc+0xf0/0x180 [ 350.680700][T12332] __d_alloc+0x2e/0x8c0 [ 350.684878][T12332] d_alloc_pseudo+0x1e/0x70 [ 350.689396][T12332] alloc_file_pseudo+0xe2/0x280 [ 350.694255][T12332] ? alloc_file+0x4d0/0x4d0 [ 350.698939][T12332] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 350.705207][T12332] __shmem_file_setup.part.0+0x108/0x2b0 [ 350.710853][T12332] shmem_file_setup+0x66/0x90 [ 350.715590][T12332] __x64_sys_memfd_create+0x2a2/0x470 [ 350.721578][T12332] ? memfd_fcntl+0x18c0/0x18c0 [ 350.726354][T12332] ? do_syscall_64+0x26/0x760 [ 350.731039][T12332] ? lockdep_hardirqs_on+0x418/0x5d0 [ 350.736512][T12332] ? trace_hardirqs_on+0x67/0x240 [ 350.741579][T12332] do_syscall_64+0xfa/0x760 [ 350.746217][T12332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.752119][T12332] RIP: 0033:0x4598e9 [ 350.756021][T12332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.775809][T12332] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 350.784309][T12332] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598e9 [ 350.792281][T12332] RDX: 0000000020000368 RSI: 0000000000000000 RDI: 00000000004be808 [ 350.800343][T12332] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 350.808339][T12332] R10: 0000000000000400 R11: 0000000000000246 R12: 00007f47ebcb36d4 [ 350.816318][T12332] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 11:48:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x4}}]}) 11:48:38 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:38 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x5}}]}) [ 351.409977][T12357] FAULT_INJECTION: forcing a failure. [ 351.409977][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 351.465906][T12357] CPU: 0 PID: 12357 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 351.475047][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.485106][T12357] Call Trace: [ 351.488429][T12357] dump_stack+0x172/0x1f0 [ 351.492776][T12357] should_fail.cold+0xa/0x15 [ 351.497385][T12357] ? fault_create_debugfs_attr+0x180/0x180 [ 351.503204][T12357] ? ___might_sleep+0x163/0x280 [ 351.508279][T12357] __should_failslab+0x121/0x190 [ 351.513233][T12357] should_failslab+0x9/0x14 [ 351.517772][T12357] kmem_cache_alloc+0x2aa/0x710 [ 351.522628][T12357] ? rwlock_bug.part.0+0x90/0x90 [ 351.527571][T12357] ? lock_downgrade+0x920/0x920 [ 351.532434][T12357] __alloc_file+0x27/0x340 [ 351.536861][T12357] alloc_empty_file+0x72/0x170 [ 351.541727][T12357] alloc_file+0x5e/0x4d0 [ 351.545986][T12357] alloc_file_pseudo+0x189/0x280 [ 351.550938][T12357] ? alloc_file+0x4d0/0x4d0 [ 351.555632][T12357] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 351.561894][T12357] __shmem_file_setup.part.0+0x108/0x2b0 [ 351.567543][T12357] shmem_file_setup+0x66/0x90 [ 351.572240][T12357] __x64_sys_memfd_create+0x2a2/0x470 [ 351.577756][T12357] ? memfd_fcntl+0x18c0/0x18c0 [ 351.582760][T12357] ? do_syscall_64+0x26/0x760 [ 351.587442][T12357] ? lockdep_hardirqs_on+0x418/0x5d0 [ 351.592754][T12357] ? trace_hardirqs_on+0x67/0x240 [ 351.598349][T12357] do_syscall_64+0xfa/0x760 [ 351.602858][T12357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.608737][T12357] RIP: 0033:0x4598e9 [ 351.612712][T12357] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.632390][T12357] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 351.640786][T12357] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598e9 [ 351.648744][T12357] RDX: 0000000020000368 RSI: 0000000000000000 RDI: 00000000004be808 [ 351.656702][T12357] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 11:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x8dffffff, 0x0, 0x31e2c79ced742c8) 11:48:39 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(0x0, 0x0) [ 351.664671][T12357] R10: 0000000000000400 R11: 0000000000000246 R12: 00007f47ebcb36d4 [ 351.672623][T12357] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 11:48:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x6}}]}) 11:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0xf0ffffff, 0x0, 0x31e2c79ced742c8) 11:48:39 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:39 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x7}}]}) 11:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0xffffff8d, 0x0, 0x31e2c79ced742c8) [ 352.321497][T12382] FAULT_INJECTION: forcing a failure. [ 352.321497][T12382] name failslab, interval 1, probability 0, space 0, times 0 [ 352.364372][T12382] CPU: 1 PID: 12382 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 352.373519][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.383706][T12382] Call Trace: [ 352.387018][T12382] dump_stack+0x172/0x1f0 [ 352.391365][T12382] should_fail.cold+0xa/0x15 [ 352.395975][T12382] ? fault_create_debugfs_attr+0x180/0x180 [ 352.401888][T12382] ? ___might_sleep+0x163/0x280 [ 352.406842][T12382] __should_failslab+0x121/0x190 [ 352.411806][T12382] should_failslab+0x9/0x14 [ 352.416314][T12382] kmem_cache_alloc+0x2aa/0x710 [ 352.421170][T12382] ? kmem_cache_alloc+0x364/0x710 [ 352.426237][T12382] security_file_alloc+0x39/0x170 [ 352.431294][T12382] __alloc_file+0xde/0x340 [ 352.435894][T12382] alloc_empty_file+0x72/0x170 [ 352.440666][T12382] alloc_file+0x5e/0x4d0 [ 352.444919][T12382] alloc_file_pseudo+0x189/0x280 [ 352.449865][T12382] ? alloc_file+0x4d0/0x4d0 [ 352.454383][T12382] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 352.460643][T12382] __shmem_file_setup.part.0+0x108/0x2b0 [ 352.466293][T12382] shmem_file_setup+0x66/0x90 [ 352.470986][T12382] __x64_sys_memfd_create+0x2a2/0x470 [ 352.476432][T12382] ? memfd_fcntl+0x18c0/0x18c0 [ 352.481217][T12382] ? do_syscall_64+0x26/0x760 [ 352.485907][T12382] ? lockdep_hardirqs_on+0x418/0x5d0 [ 352.491194][T12382] ? trace_hardirqs_on+0x67/0x240 [ 352.496232][T12382] do_syscall_64+0xfa/0x760 [ 352.500748][T12382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.506641][T12382] RIP: 0033:0x4598e9 [ 352.510540][T12382] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.530149][T12382] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 352.538747][T12382] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598e9 [ 352.546855][T12382] RDX: 0000000020000368 RSI: 0000000000000000 RDI: 00000000004be808 [ 352.554921][T12382] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 11:48:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0xfffffff0, 0x0, 0x31e2c79ced742c8) [ 352.562909][T12382] R10: 0000000000000400 R11: 0000000000000246 R12: 00007f47ebcb36d4 [ 352.570896][T12382] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 11:48:40 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x300}}]}) 11:48:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x8dffffff00000000, 0x0, 0x31e2c79ced742c8) 11:48:40 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(0x0, 0x0) 11:48:40 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x500}}]}) 11:48:40 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) [ 353.178662][T12425] FAULT_INJECTION: forcing a failure. [ 353.178662][T12425] name failslab, interval 1, probability 0, space 0, times 0 11:48:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x600}}]}) [ 353.254459][T12425] CPU: 1 PID: 12425 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 353.265335][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.275404][T12425] Call Trace: [ 353.278709][T12425] dump_stack+0x172/0x1f0 [ 353.283059][T12425] should_fail.cold+0xa/0x15 [ 353.287666][T12425] ? fault_create_debugfs_attr+0x180/0x180 [ 353.293594][T12425] ? ___might_sleep+0x163/0x280 [ 353.298460][T12425] __should_failslab+0x121/0x190 [ 353.303581][T12425] should_failslab+0x9/0x14 [ 353.308094][T12425] __kmalloc+0x2e0/0x770 [ 353.312342][T12425] ? mark_held_locks+0xf0/0xf0 [ 353.317249][T12425] ? stack_trace_save+0xac/0xe0 [ 353.322109][T12425] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 353.327832][T12425] tomoyo_realpath_from_path+0xcd/0x7b0 [ 353.333373][T12425] ? tomoyo_path_perm+0x1cb/0x430 [ 353.338388][T12425] tomoyo_path_perm+0x230/0x430 [ 353.343221][T12425] ? tomoyo_path_perm+0x1cb/0x430 [ 353.348232][T12425] ? tomoyo_check_open_permission+0x3f0/0x3f0 [ 353.354294][T12425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.360540][T12425] ? rcu_read_lock_any_held+0xcd/0xf0 [ 353.365894][T12425] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 353.371161][T12425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.377392][T12425] tomoyo_path_truncate+0x1d/0x30 [ 353.382545][T12425] security_path_truncate+0xf2/0x150 [ 353.387822][T12425] do_sys_ftruncate+0x3d9/0x550 [ 353.392658][T12425] __x64_sys_ftruncate+0x59/0x80 [ 353.397581][T12425] do_syscall_64+0xfa/0x760 [ 353.402074][T12425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.407944][T12425] RIP: 0033:0x4598b7 [ 353.411824][T12425] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.431668][T12425] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 353.440061][T12425] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598b7 11:48:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0xf0ffffff00000000, 0x0, 0x31e2c79ced742c8) [ 353.448016][T12425] RDX: 0000000020000368 RSI: 0000000000000800 RDI: 0000000000000004 [ 353.455974][T12425] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 353.463926][T12425] R10: 0000000000000400 R11: 0000000000000217 R12: 0000000000000004 [ 353.471882][T12425] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 [ 353.554208][T12425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.599988][T12425] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x700}}]}) 11:48:41 executing program 1 (fault-call:0 fault-nth:6): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced70008) [ 353.966768][T12446] FAULT_INJECTION: forcing a failure. [ 353.966768][T12446] name failslab, interval 1, probability 0, space 0, times 0 [ 354.025278][T12446] CPU: 0 PID: 12446 Comm: syz-executor.1 Not tainted 5.3.0-rc6-next-20190830 #75 [ 354.034610][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.044761][T12446] Call Trace: [ 354.048246][T12446] dump_stack+0x172/0x1f0 [ 354.052598][T12446] should_fail.cold+0xa/0x15 [ 354.057234][T12446] ? fault_create_debugfs_attr+0x180/0x180 [ 354.063062][T12446] ? ___might_sleep+0x163/0x280 [ 354.068147][T12446] __should_failslab+0x121/0x190 [ 354.068181][T12446] should_failslab+0x9/0x14 [ 354.068193][T12446] __kmalloc+0x2e0/0x770 [ 354.068211][T12446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.068224][T12446] ? simple_dname+0xd1/0x1f0 [ 354.068241][T12446] ? tomoyo_encode2.part.0+0xf5/0x400 [ 354.068257][T12446] tomoyo_encode2.part.0+0xf5/0x400 [ 354.068275][T12446] tomoyo_encode+0x2b/0x50 [ 354.068293][T12446] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 354.113471][T12446] ? tomoyo_path_perm+0x1cb/0x430 [ 354.118625][T12446] tomoyo_path_perm+0x230/0x430 [ 354.123480][T12446] ? tomoyo_path_perm+0x1cb/0x430 [ 354.128514][T12446] ? tomoyo_check_open_permission+0x3f0/0x3f0 [ 354.134860][T12446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.141215][T12446] ? rcu_read_lock_any_held+0xcd/0xf0 [ 354.146592][T12446] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 354.151879][T12446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.158130][T12446] tomoyo_path_truncate+0x1d/0x30 [ 354.163160][T12446] security_path_truncate+0xf2/0x150 [ 354.168453][T12446] do_sys_ftruncate+0x3d9/0x550 [ 354.173309][T12446] __x64_sys_ftruncate+0x59/0x80 [ 354.178252][T12446] do_syscall_64+0xfa/0x760 [ 354.182769][T12446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.188741][T12446] RIP: 0033:0x4598b7 [ 354.192632][T12446] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.212372][T12446] RSP: 002b:00007f47ebcb2a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d 11:48:41 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x2000}}]}) 11:48:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced74208) [ 354.220876][T12446] RAX: ffffffffffffffda RBX: 0000000020000340 RCX: 00000000004598b7 [ 354.228893][T12446] RDX: 0000000020000368 RSI: 0000000000000800 RDI: 0000000000000004 [ 354.236876][T12446] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 354.244847][T12446] R10: 0000000000000400 R11: 0000000000000217 R12: 0000000000000004 [ 354.252909][T12446] R13: 00000000004c8a0f R14: 00000000004df978 R15: 0000000000000003 11:48:42 executing program 2 (fault-call:9 fault-nth:0): r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x4000}}]}) 11:48:42 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r4, 0x7, &(0x7f00000002c0)="3747444a1e230f6b1312e39a7062176290bc93b40ca5237f7a35c4d12a551339938de99a6a5cdc7ae3011175004f8d531d4561732ae3327431848358b30000000000000000000000000000f4653c87dcbc9352e844f19e6dd1ffcaaf7379dcde03c4c776eb2d7a60d6789f2ac1de40b73a6396bd5fc414bbffb0b6920a6a24b9d661226ef10002be0b75a718ed50b6800863bca5fdd79d6be6fc808907e49d5e8dd28e") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) sendto$inet(r6, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffe92) [ 354.664301][T12446] ERROR: Out of memory at tomoyo_realpath_from_path. 11:48:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0xff0f}}]}) 11:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x0, 0x80, 0x0, 0x0) 11:48:42 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x0) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 355.337888][T12486] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:48:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x200000}}]}) 11:48:43 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='\nxt3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:43 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000080)={'nr0\x00', 0x3ff}) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000040)={0xffffffffffffffff, 0x9, [0x8, 0x0, 0x7322, 0xffffffff, 0x40], 0x8000000000000040}) 11:48:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x80ffff}}]}) 11:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='%xt3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 356.044047][T12532] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 356.121904][T12532] CPU: 1 PID: 12532 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 356.131071][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.141135][T12532] Call Trace: [ 356.144439][T12532] dump_stack+0x172/0x1f0 [ 356.148788][T12532] dump_header+0x177/0x1152 [ 356.153319][T12532] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 356.159134][T12532] ? ___ratelimit+0x2c8/0x595 [ 356.163845][T12532] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 356.169752][T12532] ? lockdep_hardirqs_on+0x418/0x5d0 [ 356.175055][T12532] ? trace_hardirqs_on+0x67/0x240 [ 356.180222][T12532] ? pagefault_out_of_memory+0x11c/0x11c [ 356.186011][T12532] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 356.191831][T12532] ? ___ratelimit+0x60/0x595 [ 356.196499][T12532] ? do_raw_spin_unlock+0x57/0x270 [ 356.201619][T12532] oom_kill_process.cold+0x10/0x15 [ 356.206831][T12532] out_of_memory+0x334/0x1340 [ 356.211605][T12532] ? lock_downgrade+0x920/0x920 [ 356.216468][T12532] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 356.222280][T12532] ? oom_killer_disable+0x280/0x280 [ 356.227494][T12532] mem_cgroup_out_of_memory+0x1d8/0x240 [ 356.233043][T12532] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 356.238680][T12532] ? do_raw_spin_unlock+0x57/0x270 [ 356.243801][T12532] ? _raw_spin_unlock+0x2d/0x50 [ 356.248658][T12532] try_charge+0xf4b/0x1440 [ 356.253094][T12532] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 356.258634][T12532] ? percpu_ref_tryget_live+0x111/0x290 [ 356.264185][T12532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.270431][T12532] ? __kasan_check_read+0x11/0x20 [ 356.275459][T12532] ? get_mem_cgroup_from_mm+0x156/0x320 [ 356.281007][T12532] mem_cgroup_try_charge+0x136/0x590 [ 356.286312][T12532] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 356.291955][T12532] shmem_getpage_gfp+0x88e/0x2680 [ 356.297005][T12532] ? shmem_unuse_inode+0x1010/0x1010 [ 356.302303][T12532] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 356.308034][T12532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.314295][T12532] shmem_fault+0x22a/0x7b0 [ 356.318733][T12532] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 356.324728][T12532] ? lock_downgrade+0x920/0x920 [ 356.329594][T12532] __do_fault+0x111/0x540 [ 356.333924][T12532] ? do_raw_spin_unlock+0x57/0x270 [ 356.339048][T12532] __handle_mm_fault+0x2cb8/0x3f20 [ 356.344174][T12532] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 356.349774][T12532] ? __kasan_check_read+0x11/0x20 [ 356.354826][T12532] handle_mm_fault+0x1b5/0x6c0 [ 356.359643][T12532] __get_user_pages+0x7d4/0x1b30 [ 356.364578][T12532] ? mark_held_locks+0xf0/0xf0 [ 356.369415][T12532] ? follow_page_mask+0x1cf0/0x1cf0 [ 356.374638][T12532] ? __mm_populate+0x270/0x380 [ 356.379519][T12532] ? memset+0x32/0x40 [ 356.383770][T12532] populate_vma_page_range+0x20d/0x2a0 [ 356.389295][T12532] __mm_populate+0x204/0x380 [ 356.393984][T12532] ? populate_vma_page_range+0x2a0/0x2a0 [ 356.399702][T12532] ? __kasan_check_write+0x14/0x20 [ 356.404916][T12532] ? up_write+0x155/0x490 [ 356.409256][T12532] vm_mmap_pgoff+0x213/0x230 [ 356.413857][T12532] ? randomize_stack_top+0x110/0x110 [ 356.419161][T12532] ? __kasan_check_read+0x11/0x20 [ 356.424194][T12532] ? _copy_to_user+0x118/0x160 [ 356.428975][T12532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.436616][T12532] ksys_mmap_pgoff+0xf7/0x630 [ 356.441828][T12532] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 356.447466][T12532] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 356.452925][T12532] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 356.458380][T12532] ? do_syscall_64+0x26/0x760 [ 356.463056][T12532] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.469158][T12532] __x64_sys_mmap+0xe9/0x1b0 [ 356.473759][T12532] do_syscall_64+0xfa/0x760 [ 356.478273][T12532] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.484163][T12532] RIP: 0033:0x4598e9 [ 356.488076][T12532] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.507822][T12532] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 11:48:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x1000000}}]}) [ 356.516382][T12532] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 356.524365][T12532] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 356.532532][T12532] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 356.540516][T12532] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 356.548592][T12532] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 356.634351][T12532] memory: usage 307200kB, limit 307200kB, failcnt 44 [ 356.641417][T12532] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:48:44 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x4004) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") socketpair(0x1, 0x6, 0x2, &(0x7f0000000100)) sendto$inet(r1, &(0x7f0000000040)="94ca206206d3075980fb3341180439901f595ba6f6c9ecf4cbceb3c0820474b4ffc8bb2b4b06a4c7959e643aada6aec9119c0216fee5cd0e74a55f0b5a4f0647b4533da1396d0b21bd6dcd8c6590776d8a86699c7e57347d6c0b6ff1633b81d280850816049028e5321757d87fde7766aa5f7e12af0862c58481ba1f1389314484530801d9621405", 0x74f12, 0x0, 0x0, 0xfffffffffffffe4b) [ 356.964286][T12532] Memory cgroup stats for [ 356.964426][T12532] /syz0: [ 356.964680][T12532] anon 18444288 [ 356.964680][T12532] file 283705344 [ 356.964680][T12532] kernel_stack 917504 [ 356.964680][T12532] slab 6873088 [ 356.964680][T12532] sock 0 [ 356.964680][T12532] shmem 283574272 [ 356.964680][T12532] file_mapped 248303616 [ 356.964680][T12532] file_dirty 0 [ 356.964680][T12532] file_writeback 0 [ 356.964680][T12532] anon_thp 12582912 [ 356.964680][T12532] inactive_anon 248303616 [ 356.964680][T12532] active_anon 53710848 11:48:44 executing program 5: gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x2000000}}]}) 11:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='\\xt3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 356.964680][T12532] inactive_file 135168 [ 356.964680][T12532] active_file 0 [ 356.964680][T12532] unevictable 0 [ 356.964680][T12532] slab_reclaimable 1622016 [ 356.964680][T12532] slab_unreclaimable 5251072 [ 356.964680][T12532] pgfault 202884 [ 356.964680][T12532] pgmajfault 0 [ 356.964680][T12532] workingset_refault 0 [ 356.964680][T12532] workingset_activate 0 [ 356.964680][T12532] workingset_nodereclaim 0 [ 356.964680][T12532] pgrefill 33 [ 356.964680][T12532] pgscan 33 [ 356.964680][T12532] pgsteal 0 11:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='e\nt3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x3000000}}]}) [ 357.397619][T12532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9146,uid=0 [ 357.481579][T12532] Memory cgroup out of memory: Killed process 9146 (syz-executor.0) total-vm:72708kB, anon-rss:5052kB, file-rss:35812kB, shmem-rss:11480kB, UID:0 pgtables:167936kB oom_score_adj:1000 [ 357.581646][T12563] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 357.594348][T12563] CPU: 0 PID: 12563 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 357.603622][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.613687][T12563] Call Trace: [ 357.617001][T12563] dump_stack+0x172/0x1f0 [ 357.621447][T12563] dump_header+0x177/0x1152 [ 357.626064][T12563] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 357.631995][T12563] ? ___ratelimit+0x2c8/0x595 [ 357.636681][T12563] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 357.642499][T12563] ? lockdep_hardirqs_on+0x418/0x5d0 [ 357.647794][T12563] ? trace_hardirqs_on+0x67/0x240 [ 357.652828][T12563] ? pagefault_out_of_memory+0x11c/0x11c [ 357.658562][T12563] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 357.664508][T12563] ? ___ratelimit+0x60/0x595 [ 357.669190][T12563] ? do_raw_spin_unlock+0x57/0x270 [ 357.674348][T12563] oom_kill_process.cold+0x10/0x15 [ 357.679466][T12563] out_of_memory+0x334/0x1340 [ 357.684329][T12563] ? lock_downgrade+0x920/0x920 [ 357.689212][T12563] ? oom_killer_disable+0x280/0x280 [ 357.694433][T12563] mem_cgroup_out_of_memory+0x1d8/0x240 [ 357.700111][T12563] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 357.706027][T12563] ? do_raw_spin_unlock+0x57/0x270 [ 357.711329][T12563] ? _raw_spin_unlock+0x2d/0x50 [ 357.716210][T12563] try_charge+0xf4b/0x1440 [ 357.720655][T12563] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 357.726212][T12563] ? percpu_ref_tryget_live+0x111/0x290 [ 357.731778][T12563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.738162][T12563] ? __kasan_check_read+0x11/0x20 [ 357.743818][T12563] ? get_mem_cgroup_from_mm+0x156/0x320 [ 357.750080][T12563] mem_cgroup_try_charge+0x136/0x590 [ 357.755391][T12563] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 357.761062][T12563] shmem_getpage_gfp+0x88e/0x2680 [ 357.766110][T12563] ? shmem_unuse_inode+0x1010/0x1010 [ 357.771407][T12563] ? finish_task_switch+0x147/0x720 [ 357.776612][T12563] ? finish_task_switch+0x119/0x720 [ 357.781834][T12563] shmem_fault+0x22a/0x7b0 [ 357.786269][T12563] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 357.792349][T12563] ? __kasan_check_read+0x11/0x20 [ 357.797539][T12563] ? preempt_schedule_common+0x63/0xe0 [ 357.803018][T12563] __do_fault+0x111/0x540 [ 357.807447][T12563] __handle_mm_fault+0x2cb8/0x3f20 [ 357.812566][T12563] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 357.818127][T12563] ? __kasan_check_read+0x11/0x20 [ 357.823232][T12563] handle_mm_fault+0x1b5/0x6c0 [ 357.829748][T12563] __get_user_pages+0x7d4/0x1b30 [ 357.834782][T12563] ? mark_held_locks+0xf0/0xf0 [ 357.839560][T12563] ? follow_page_mask+0x1cf0/0x1cf0 [ 357.844793][T12563] ? __mm_populate+0x270/0x380 [ 357.849587][T12563] ? memset+0x32/0x40 [ 357.853762][T12563] populate_vma_page_range+0x20d/0x2a0 [ 357.859235][T12563] __mm_populate+0x204/0x380 [ 357.864008][T12563] ? populate_vma_page_range+0x2a0/0x2a0 [ 357.870002][T12563] ? __kasan_check_write+0x14/0x20 [ 357.875124][T12563] ? up_write+0x155/0x490 [ 357.879468][T12563] vm_mmap_pgoff+0x213/0x230 [ 357.884158][T12563] ? randomize_stack_top+0x110/0x110 [ 357.889469][T12563] ? __kasan_check_read+0x11/0x20 [ 357.894505][T12563] ? _copy_to_user+0x118/0x160 [ 357.899478][T12563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.905821][T12563] ksys_mmap_pgoff+0xf7/0x630 [ 357.910519][T12563] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 357.916163][T12563] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 357.921717][T12563] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 357.927185][T12563] ? do_syscall_64+0x26/0x760 [ 357.931868][T12563] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.937945][T12563] __x64_sys_mmap+0xe9/0x1b0 [ 357.942773][T12563] do_syscall_64+0xfa/0x760 [ 357.947381][T12563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.953273][T12563] RIP: 0033:0x4598e9 [ 357.957174][T12563] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.976869][T12563] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 357.985295][T12563] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 357.993274][T12563] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 358.001262][T12563] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 358.009241][T12563] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 358.017240][T12563] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 358.226262][T12563] memory: usage 307200kB, limit 307200kB, failcnt 40 [ 358.232975][T12563] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.258500][T12563] Memory cgroup stats for /syz2: [ 358.258625][T12563] anon 25776128 [ 358.258625][T12563] file 278130688 [ 358.258625][T12563] kernel_stack 851968 [ 358.258625][T12563] slab 4845568 [ 358.258625][T12563] sock 0 [ 358.258625][T12563] shmem 278114304 [ 358.258625][T12563] file_mapped 242896896 [ 358.258625][T12563] file_dirty 0 [ 358.258625][T12563] file_writeback 0 [ 358.258625][T12563] anon_thp 20971520 [ 358.258625][T12563] inactive_anon 242896896 [ 358.258625][T12563] active_anon 60973056 [ 358.258625][T12563] inactive_file 0 [ 358.258625][T12563] active_file 0 [ 358.258625][T12563] unevictable 0 [ 358.258625][T12563] slab_reclaimable 1486848 [ 358.258625][T12563] slab_unreclaimable 3358720 [ 358.258625][T12563] pgfault 195360 [ 358.258625][T12563] pgmajfault 0 [ 358.258625][T12563] workingset_refault 0 [ 358.258625][T12563] workingset_activate 0 [ 358.258625][T12563] workingset_nodereclaim 0 [ 358.258625][T12563] pgrefill 33 [ 358.258625][T12563] pgscan 33 [ 358.258625][T12563] pgsteal 0 [ 358.360331][T12563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10599,uid=0 [ 358.383698][T12563] Memory cgroup out of memory: Killed process 10599 (syz-executor.2) total-vm:72708kB, anon-rss:5052kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 358.428776][ T1065] oom_reaper: reaped process 10599 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB 11:48:46 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', 0x0, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:46 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0x9}}, 0x30) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x100) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000080)=0x9) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f00000000c0)="11cea505540bcfe47bf070") sendto$inet(r3, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x4000000}}]}) 11:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='e%t3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:46 executing program 5: gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:46 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x335) 11:48:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x5000000}}]}) 11:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='e\\t3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x6000000}}]}) [ 359.583011][T12627] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 359.640779][T12627] CPU: 1 PID: 12627 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 359.649919][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.660139][T12627] Call Trace: [ 359.663454][T12627] dump_stack+0x172/0x1f0 [ 359.667800][T12627] dump_header+0x177/0x1152 [ 359.672408][T12627] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 359.678488][T12627] ? ___ratelimit+0x2c8/0x595 [ 359.683173][T12627] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 359.688989][T12627] ? lockdep_hardirqs_on+0x418/0x5d0 [ 359.694454][T12627] ? trace_hardirqs_on+0x67/0x240 [ 359.699481][T12627] ? pagefault_out_of_memory+0x11c/0x11c [ 359.705134][T12627] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 359.710942][T12627] ? ___ratelimit+0x60/0x595 [ 359.715542][T12627] ? do_raw_spin_unlock+0x57/0x270 [ 359.720664][T12627] oom_kill_process.cold+0x10/0x15 [ 359.726127][T12627] out_of_memory+0x334/0x1340 [ 359.730920][T12627] ? lock_downgrade+0x920/0x920 [ 359.735780][T12627] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 359.741587][T12627] ? oom_killer_disable+0x280/0x280 [ 359.746800][T12627] mem_cgroup_out_of_memory+0x1d8/0x240 [ 359.752350][T12627] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 359.758018][T12627] ? do_raw_spin_unlock+0x57/0x270 [ 359.763137][T12627] ? _raw_spin_unlock+0x2d/0x50 [ 359.768141][T12627] try_charge+0xf4b/0x1440 [ 359.772573][T12627] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 359.778123][T12627] ? percpu_ref_tryget_live+0x111/0x290 [ 359.783679][T12627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.790708][T12627] ? __kasan_check_read+0x11/0x20 [ 359.795747][T12627] ? get_mem_cgroup_from_mm+0x156/0x320 [ 359.801355][T12627] mem_cgroup_try_charge+0x136/0x590 [ 359.806650][T12627] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 359.812294][T12627] shmem_getpage_gfp+0x88e/0x2680 [ 359.817326][T12627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.823844][T12627] ? shmem_unuse_inode+0x1010/0x1010 [ 359.829146][T12627] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 359.834880][T12627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.841127][T12627] shmem_fault+0x22a/0x7b0 [ 359.845640][T12627] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 359.851634][T12627] ? find_lock_entry+0x560/0x560 [ 359.856570][T12627] ? pmd_val+0x85/0x100 [ 359.860725][T12627] ? pmd_val+0x85/0x100 [ 359.864895][T12627] __do_fault+0x111/0x540 [ 359.869225][T12627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.875470][T12627] __handle_mm_fault+0x2cb8/0x3f20 [ 359.880586][T12627] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 359.886157][T12627] ? __kasan_check_read+0x11/0x20 [ 359.891202][T12627] handle_mm_fault+0x1b5/0x6c0 [ 359.895978][T12627] __get_user_pages+0x7d4/0x1b30 [ 359.900924][T12627] ? mark_held_locks+0xf0/0xf0 [ 359.905710][T12627] ? follow_page_mask+0x1cf0/0x1cf0 [ 359.911004][T12627] ? __mm_populate+0x270/0x380 [ 359.915874][T12627] ? memset+0x32/0x40 [ 359.919871][T12627] populate_vma_page_range+0x20d/0x2a0 [ 359.925356][T12627] __mm_populate+0x204/0x380 [ 359.930043][T12627] ? populate_vma_page_range+0x2a0/0x2a0 [ 359.935677][T12627] ? __kasan_check_write+0x14/0x20 [ 359.940883][T12627] ? up_write+0x155/0x490 [ 359.945224][T12627] vm_mmap_pgoff+0x213/0x230 [ 359.949828][T12627] ? randomize_stack_top+0x110/0x110 [ 359.955114][T12627] ? __kasan_check_read+0x11/0x20 [ 359.960252][T12627] ? _copy_to_user+0x118/0x160 [ 359.965023][T12627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.971270][T12627] ksys_mmap_pgoff+0xf7/0x630 [ 359.975955][T12627] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 359.981591][T12627] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 359.987051][T12627] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 359.992507][T12627] ? do_syscall_64+0x26/0x760 [ 359.997183][T12627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.003257][T12627] __x64_sys_mmap+0xe9/0x1b0 [ 360.007940][T12627] do_syscall_64+0xfa/0x760 [ 360.013495][T12627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.019387][T12627] RIP: 0033:0x4598e9 [ 360.023384][T12627] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:48:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x7, 0x400) creat(&(0x7f0000000480)='./file0\x00', 0x10) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x100) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0xead0ae276fd5ec31}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7bc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8005) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0xee, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=""/238}, &(0x7f0000000180)=0x78) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:47 executing program 5: gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r1 = dup(r0) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(0x0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 360.043127][T12627] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 360.051541][T12627] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 360.059880][T12627] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 360.068197][T12627] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 360.076182][T12627] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 360.084243][T12627] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 360.183902][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 360.183916][ T26] audit: type=1804 audit(1568461727.750:36): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir925593995/syzkaller.yl4MJx/168/file0" dev="sda1" ino=16657 res=1 [ 360.224231][T12627] memory: usage 307200kB, limit 307200kB, failcnt 81 11:48:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ex\n3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 360.237784][T12627] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 360.276540][T12627] Memory cgroup stats for /syz0: [ 360.276661][T12627] anon 13336576 [ 360.276661][T12627] file 288505856 [ 360.276661][T12627] kernel_stack 917504 [ 360.276661][T12627] slab 6873088 [ 360.276661][T12627] sock 0 [ 360.276661][T12627] shmem 288505856 [ 360.276661][T12627] file_mapped 253304832 [ 360.276661][T12627] file_dirty 0 [ 360.276661][T12627] file_writeback 0 [ 360.276661][T12627] anon_thp 8388608 [ 360.276661][T12627] inactive_anon 253304832 [ 360.276661][T12627] active_anon 48787456 [ 360.276661][T12627] inactive_file 135168 [ 360.276661][T12627] active_file 0 [ 360.276661][T12627] unevictable 0 [ 360.276661][T12627] slab_reclaimable 1622016 [ 360.276661][T12627] slab_unreclaimable 5251072 [ 360.276661][T12627] pgfault 207042 [ 360.276661][T12627] pgmajfault 0 [ 360.276661][T12627] workingset_refault 0 [ 360.276661][T12627] workingset_activate 0 [ 360.276661][T12627] workingset_nodereclaim 0 [ 360.276661][T12627] pgrefill 33 [ 360.276661][T12627] pgscan 33 [ 360.276661][T12627] pgsteal 0 [ 360.384459][ T26] audit: type=1804 audit(1568461727.940:37): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir925593995/syzkaller.yl4MJx/168/file0" dev="sda1" ino=16657 res=1 [ 360.625072][T12627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9077,uid=0 [ 360.651880][T12627] Memory cgroup out of memory: Killed process 9077 (syz-executor.0) total-vm:72708kB, anon-rss:3004kB, file-rss:35816kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 360.809631][T12623] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 360.934338][T12623] CPU: 0 PID: 12623 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 360.943561][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.953806][T12623] Call Trace: [ 360.957195][T12623] dump_stack+0x172/0x1f0 [ 360.961524][T12623] dump_header+0x177/0x1152 [ 360.966023][T12623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 360.971818][T12623] ? ___ratelimit+0x2c8/0x595 [ 360.976493][T12623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 360.982300][T12623] ? lockdep_hardirqs_on+0x418/0x5d0 [ 360.987580][T12623] ? trace_hardirqs_on+0x67/0x240 [ 360.992610][T12623] ? pagefault_out_of_memory+0x11c/0x11c [ 360.998357][T12623] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 361.004162][T12623] ? ___ratelimit+0x60/0x595 [ 361.008841][T12623] ? do_raw_spin_unlock+0x57/0x270 [ 361.013951][T12623] oom_kill_process.cold+0x10/0x15 [ 361.019063][T12623] out_of_memory+0x334/0x1340 [ 361.023735][T12623] ? lock_downgrade+0x920/0x920 [ 361.028589][T12623] ? oom_killer_disable+0x280/0x280 [ 361.033811][T12623] mem_cgroup_out_of_memory+0x1d8/0x240 [ 361.039454][T12623] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 361.045089][T12623] ? do_raw_spin_unlock+0x57/0x270 [ 361.050204][T12623] ? _raw_spin_unlock+0x2d/0x50 [ 361.055056][T12623] try_charge+0xf4b/0x1440 [ 361.059485][T12623] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 361.065025][T12623] ? find_held_lock+0x35/0x130 [ 361.069783][T12623] ? get_mem_cgroup_from_mm+0x139/0x320 [ 361.075359][T12623] ? lock_downgrade+0x920/0x920 [ 361.080213][T12623] ? percpu_ref_tryget_live+0x111/0x290 [ 361.085802][T12623] __memcg_kmem_charge_memcg+0x71/0xf0 [ 361.091264][T12623] ? memcg_kmem_put_cache+0x50/0x50 [ 361.096464][T12623] ? get_mem_cgroup_from_mm+0x156/0x320 [ 361.102014][T12623] __memcg_kmem_charge+0x13a/0x3a0 [ 361.107132][T12623] __alloc_pages_nodemask+0x4f7/0x900 [ 361.112505][T12623] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 361.118051][T12623] ? __alloc_pages_slowpath+0x2540/0x2540 [ 361.123911][T12623] ? percpu_ref_put_many+0xb6/0x190 [ 361.129118][T12623] ? lockdep_hardirqs_on+0x418/0x5d0 [ 361.134403][T12623] ? trace_hardirqs_on+0x67/0x240 [ 361.139522][T12623] copy_process+0x3f8/0x6830 [ 361.144114][T12623] ? debug_object_free+0x1f1/0x390 [ 361.149237][T12623] ? __cleanup_sighand+0x60/0x60 [ 361.154192][T12623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 361.160004][T12623] ? debug_object_free+0x1f1/0x390 [ 361.165130][T12623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 361.171007][T12623] ? lockdep_hardirqs_on+0x418/0x5d0 [ 361.176310][T12623] _do_fork+0x146/0xfa0 [ 361.180475][T12623] ? copy_init_mm+0x20/0x20 [ 361.184994][T12623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.191473][T12623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.197740][T12623] ? debug_smp_processor_id+0x3c/0x214 [ 361.203215][T12623] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 361.209382][T12623] __x64_sys_clone+0x1ab/0x270 [ 361.214154][T12623] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 361.220139][T12623] ? __ia32_sys_vfork+0xd0/0xd0 [ 361.225004][T12623] ? do_syscall_64+0x26/0x760 [ 361.229690][T12623] ? lockdep_hardirqs_on+0x418/0x5d0 [ 361.234988][T12623] ? trace_hardirqs_on+0x67/0x240 [ 361.240019][T12623] do_syscall_64+0xfa/0x760 [ 361.244535][T12623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.250524][T12623] RIP: 0033:0x45c2b9 [ 361.254417][T12623] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 361.274104][T12623] RSP: 002b:00007ffd15b950c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 361.282512][T12623] RAX: ffffffffffffffda RBX: 00007f8cbea6c700 RCX: 000000000045c2b9 [ 361.290486][T12623] RDX: 00007f8cbea6c9d0 RSI: 00007f8cbea6bdb0 RDI: 00000000003d0f00 [ 361.298461][T12623] RBP: 00007ffd15b952e0 R08: 00007f8cbea6c700 R09: 00007f8cbea6c700 [ 361.306430][T12623] R10: 00007f8cbea6c9d0 R11: 0000000000000202 R12: 0000000000000000 [ 361.314506][T12623] R13: 00007ffd15b9517f R14: 0000000000020000 R15: 000055555648ac90 [ 361.324896][T12623] memory: usage 306480kB, limit 307200kB, failcnt 73 [ 361.331744][T12623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.339018][T12623] Memory cgroup stats for /syz2: [ 361.339283][T12623] anon 20721664 [ 361.339283][T12623] file 282144768 [ 361.339283][T12623] kernel_stack 983040 [ 361.339283][T12623] slab 5386240 [ 361.339283][T12623] sock 0 [ 361.339283][T12623] shmem 282144768 [ 361.339283][T12623] file_mapped 246816768 [ 361.339283][T12623] file_dirty 0 [ 361.339283][T12623] file_writeback 0 [ 361.339283][T12623] anon_thp 16777216 [ 361.339283][T12623] inactive_anon 246816768 [ 361.339283][T12623] active_anon 56016896 [ 361.339283][T12623] inactive_file 0 [ 361.339283][T12623] active_file 0 [ 361.339283][T12623] unevictable 0 [ 361.339283][T12623] slab_reclaimable 1486848 [ 361.339283][T12623] slab_unreclaimable 3899392 [ 361.339283][T12623] pgfault 199221 [ 361.339283][T12623] pgmajfault 0 [ 361.339283][T12623] workingset_refault 0 [ 361.339283][T12623] workingset_activate 0 [ 361.339283][T12623] workingset_nodereclaim 0 [ 361.339283][T12623] pgrefill 33 [ 361.339283][T12623] pgscan 33 [ 361.339283][T12623] pgsteal 0 [ 361.435903][T12623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9634,uid=0 [ 361.465165][T12623] Memory cgroup out of memory: Killed process 9634 (syz-executor.2) total-vm:72708kB, anon-rss:3004kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:167936kB oom_score_adj:1000 [ 361.556997][T12627] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 361.584287][T12627] CPU: 0 PID: 12627 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 361.593430][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.603752][T12627] Call Trace: [ 361.607061][T12627] dump_stack+0x172/0x1f0 [ 361.611412][T12627] dump_header+0x177/0x1152 [ 361.615949][T12627] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 361.621856][T12627] ? ___ratelimit+0x2c8/0x595 [ 361.626545][T12627] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 361.632368][T12627] ? lockdep_hardirqs_on+0x418/0x5d0 [ 361.637669][T12627] ? trace_hardirqs_on+0x67/0x240 [ 361.642869][T12627] ? pagefault_out_of_memory+0x11c/0x11c [ 361.648511][T12627] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 361.654334][T12627] ? ___ratelimit+0x60/0x595 [ 361.658922][T12627] ? do_raw_spin_unlock+0x57/0x270 [ 361.664035][T12627] oom_kill_process.cold+0x10/0x15 [ 361.669171][T12627] out_of_memory+0x334/0x1340 [ 361.673880][T12627] ? lock_downgrade+0x920/0x920 [ 361.678740][T12627] ? oom_killer_disable+0x280/0x280 [ 361.683952][T12627] mem_cgroup_out_of_memory+0x1d8/0x240 [ 361.689595][T12627] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 361.695418][T12627] ? do_raw_spin_unlock+0x57/0x270 [ 361.700547][T12627] ? _raw_spin_unlock+0x2d/0x50 [ 361.705586][T12627] try_charge+0xf4b/0x1440 [ 361.710027][T12627] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 361.715578][T12627] ? percpu_ref_tryget_live+0x111/0x290 [ 361.721139][T12627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.727392][T12627] ? __kasan_check_read+0x11/0x20 [ 361.732422][T12627] ? get_mem_cgroup_from_mm+0x156/0x320 [ 361.738175][T12627] mem_cgroup_try_charge+0x136/0x590 [ 361.743477][T12627] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 361.749255][T12627] shmem_getpage_gfp+0x88e/0x2680 [ 361.754312][T12627] ? shmem_unuse_inode+0x1010/0x1010 [ 361.759753][T12627] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 361.765485][T12627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.771826][T12627] shmem_fault+0x22a/0x7b0 [ 361.776254][T12627] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 361.782684][T12627] ? lock_downgrade+0x920/0x920 [ 361.787554][T12627] __do_fault+0x111/0x540 [ 361.791894][T12627] ? do_raw_spin_unlock+0x57/0x270 [ 361.797017][T12627] __handle_mm_fault+0x2cb8/0x3f20 [ 361.802274][T12627] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 361.807871][T12627] ? __kasan_check_read+0x11/0x20 [ 361.812905][T12627] handle_mm_fault+0x1b5/0x6c0 [ 361.817675][T12627] __get_user_pages+0x7d4/0x1b30 [ 361.822613][T12627] ? mark_held_locks+0xf0/0xf0 [ 361.827392][T12627] ? follow_page_mask+0x1cf0/0x1cf0 [ 361.832587][T12627] ? __mm_populate+0x270/0x380 [ 361.837366][T12627] ? memset+0x32/0x40 [ 361.841357][T12627] populate_vma_page_range+0x20d/0x2a0 [ 361.846866][T12627] __mm_populate+0x204/0x380 [ 361.851477][T12627] ? populate_vma_page_range+0x2a0/0x2a0 [ 361.857121][T12627] ? __kasan_check_write+0x14/0x20 [ 361.862260][T12627] ? up_write+0x155/0x490 [ 361.866716][T12627] vm_mmap_pgoff+0x213/0x230 [ 361.871322][T12627] ? randomize_stack_top+0x110/0x110 [ 361.876611][T12627] ? __kasan_check_read+0x11/0x20 [ 361.881640][T12627] ? _copy_to_user+0x118/0x160 [ 361.886410][T12627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.892658][T12627] ksys_mmap_pgoff+0xf7/0x630 [ 361.897341][T12627] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 361.902980][T12627] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 361.908444][T12627] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 361.913900][T12627] ? do_syscall_64+0x26/0x760 [ 361.918580][T12627] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.924662][T12627] __x64_sys_mmap+0xe9/0x1b0 [ 361.929415][T12627] do_syscall_64+0xfa/0x760 [ 361.933928][T12627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.939836][T12627] RIP: 0033:0x4598e9 [ 361.943727][T12627] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.963335][T12627] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 361.971755][T12627] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 361.979809][T12627] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 361.987778][T12627] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 361.995926][T12627] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 362.003915][T12627] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 362.016036][T12627] memory: usage 295488kB, limit 307200kB, failcnt 101 [ 362.024142][T12627] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.030999][T12627] Memory cgroup stats for /syz0: [ 362.031119][T12627] anon 10412032 [ 362.031119][T12627] file 280023040 [ 362.031119][T12627] kernel_stack 851968 [ 362.031119][T12627] slab 6873088 [ 362.031119][T12627] sock 0 [ 362.031119][T12627] shmem 280014848 [ 362.031119][T12627] file_mapped 244654080 [ 362.031119][T12627] file_dirty 0 [ 362.031119][T12627] file_writeback 0 [ 362.031119][T12627] anon_thp 6291456 [ 362.031119][T12627] inactive_anon 244654080 [ 362.031119][T12627] active_anon 45723648 [ 362.031119][T12627] inactive_file 135168 [ 362.031119][T12627] active_file 0 [ 362.031119][T12627] unevictable 0 [ 362.031119][T12627] slab_reclaimable 1622016 [ 362.031119][T12627] slab_unreclaimable 5251072 [ 362.031119][T12627] pgfault 207801 [ 362.031119][T12627] pgmajfault 0 [ 362.031119][T12627] workingset_refault 0 [ 362.031119][T12627] workingset_activate 0 [ 362.031119][T12627] workingset_nodereclaim 0 [ 362.031119][T12627] pgrefill 33 [ 362.031119][T12627] pgscan 33 [ 362.031119][T12627] pgsteal 0 [ 362.042169][T12627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10594,uid=0 [ 362.143948][T12627] Memory cgroup out of memory: Killed process 10594 (syz-executor.0) total-vm:72708kB, anon-rss:3004kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 362.165301][ T1065] oom_reaper: reaped process 10594 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB 11:48:49 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', 0x0, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20041000108912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = accept4$rose(r1, 0x0, &(0x7f0000000040), 0x400) accept4(r3, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000100)=0x80, 0xeb5c76e6daa60d03) 11:48:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ex%3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:49 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:49 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='ppp1-em0\x00', &(0x7f0000000180)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu'], 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x7000000}}]}) 11:48:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x40000000}}]}) 11:48:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ex\\3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x50, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fcntl$setlease(r3, 0x400, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$void(r7, 0x18008b0f0) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) sendto$inet(r8, &(0x7f0000000040)="67ef15ed00079230b21ae0fdc66ea02919368c0a5389d8442048a9a204a77b1f658cf80a7f586bff1bf2dacaca2bc35f1fc6dfd64197e3006d217adaddeb3abdb7c21a46865335523be7eda436fa9e66bdebfcb12c56d8b53a65c0186f5e1a05c7cb44a8c87b24bab1e767b8e84b61fbe5d0a08a6d1aa502d6fc9b96b94fb092d56a3c8bcffdfc8c2d58893bfa788abc7349a77171fb2e4f25180c6fe258391fccc8c5762d7cd4a288dbe35f8917df8f3ad10ea84e6afd9bbbc407fee1cd27b30bfa409d", 0xc4, 0x0, 0x0, 0xffffffffffffff48) 11:48:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0xff0f0000}}]}) 11:48:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext\t\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 363.070838][T12687] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 363.152335][T12687] CPU: 0 PID: 12687 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 363.161475][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.171676][T12687] Call Trace: [ 363.175067][T12687] dump_stack+0x172/0x1f0 [ 363.179407][T12687] dump_header+0x177/0x1152 [ 363.183924][T12687] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 363.189736][T12687] ? ___ratelimit+0x2c8/0x595 [ 363.194417][T12687] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 363.200219][T12687] ? lockdep_hardirqs_on+0x418/0x5d0 [ 363.205487][T12687] ? trace_hardirqs_on+0x67/0x240 [ 363.210691][T12687] ? pagefault_out_of_memory+0x11c/0x11c [ 363.216307][T12687] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 363.222097][T12687] ? ___ratelimit+0x60/0x595 [ 363.226666][T12687] ? do_raw_spin_unlock+0x57/0x270 [ 363.231770][T12687] oom_kill_process.cold+0x10/0x15 [ 363.237095][T12687] out_of_memory+0x334/0x1340 [ 363.241759][T12687] ? lock_downgrade+0x920/0x920 [ 363.246602][T12687] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 363.252394][T12687] ? oom_killer_disable+0x280/0x280 [ 363.257586][T12687] mem_cgroup_out_of_memory+0x1d8/0x240 [ 363.263722][T12687] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 363.269340][T12687] ? do_raw_spin_unlock+0x57/0x270 [ 363.274454][T12687] ? _raw_spin_unlock+0x2d/0x50 [ 363.279290][T12687] try_charge+0xf4b/0x1440 [ 363.283695][T12687] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 363.289225][T12687] ? percpu_ref_tryget_live+0x111/0x290 [ 363.294767][T12687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.300999][T12687] ? __kasan_check_read+0x11/0x20 [ 363.306086][T12687] ? get_mem_cgroup_from_mm+0x156/0x320 [ 363.311639][T12687] mem_cgroup_try_charge+0x136/0x590 [ 363.316999][T12687] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 363.322616][T12687] shmem_getpage_gfp+0x88e/0x2680 [ 363.327634][T12687] ? shmem_unuse_inode+0x1010/0x1010 [ 363.332919][T12687] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 363.338633][T12687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.344953][T12687] shmem_fault+0x22a/0x7b0 [ 363.349368][T12687] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 363.355424][T12687] ? lock_downgrade+0x920/0x920 [ 363.360264][T12687] __do_fault+0x111/0x540 [ 363.364664][T12687] ? do_raw_spin_unlock+0x57/0x270 [ 363.369869][T12687] __handle_mm_fault+0x2cb8/0x3f20 [ 363.374973][T12687] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 363.380512][T12687] ? __kasan_check_read+0x11/0x20 [ 363.385535][T12687] handle_mm_fault+0x1b5/0x6c0 [ 363.390293][T12687] __get_user_pages+0x7d4/0x1b30 [ 363.395213][T12687] ? mark_held_locks+0xf0/0xf0 [ 363.400055][T12687] ? follow_page_mask+0x1cf0/0x1cf0 [ 363.405241][T12687] ? __mm_populate+0x270/0x380 [ 363.409994][T12687] ? memset+0x32/0x40 [ 363.413962][T12687] populate_vma_page_range+0x20d/0x2a0 [ 363.419414][T12687] __mm_populate+0x204/0x380 [ 363.423996][T12687] ? populate_vma_page_range+0x2a0/0x2a0 [ 363.429621][T12687] ? __kasan_check_write+0x14/0x20 [ 363.434718][T12687] ? up_write+0x155/0x490 [ 363.439045][T12687] vm_mmap_pgoff+0x213/0x230 [ 363.443622][T12687] ? randomize_stack_top+0x110/0x110 [ 363.448889][T12687] ? __kasan_check_read+0x11/0x20 [ 363.453904][T12687] ? _copy_to_user+0x118/0x160 [ 363.458656][T12687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.464886][T12687] ksys_mmap_pgoff+0xf7/0x630 [ 363.469571][T12687] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 363.475189][T12687] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 363.480654][T12687] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 363.486094][T12687] ? do_syscall_64+0x26/0x760 [ 363.490760][T12687] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.497014][T12687] __x64_sys_mmap+0xe9/0x1b0 [ 363.501600][T12687] do_syscall_64+0xfa/0x760 [ 363.506100][T12687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.511989][T12687] RIP: 0033:0x4598e9 [ 363.515897][T12687] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.535578][T12687] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 363.543977][T12687] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 11:48:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0xffff8000}}]}) [ 363.552124][T12687] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 363.560097][T12687] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 363.569893][T12687] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 363.577871][T12687] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 363.852229][T12687] memory: usage 307200kB, limit 307200kB, failcnt 91 [ 363.880050][T12687] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.908593][T12687] Memory cgroup stats for /syz2: [ 363.908715][T12687] anon 22880256 [ 363.908715][T12687] file 280260608 [ 363.908715][T12687] kernel_stack 851968 [ 363.908715][T12687] slab 5804032 [ 363.908715][T12687] sock 0 [ 363.908715][T12687] shmem 280260608 [ 363.908715][T12687] file_mapped 245059584 [ 363.908715][T12687] file_dirty 0 [ 363.908715][T12687] file_writeback 0 [ 363.908715][T12687] anon_thp 18874368 [ 363.908715][T12687] inactive_anon 244924416 [ 363.908715][T12687] active_anon 58064896 [ 363.908715][T12687] inactive_file 0 [ 363.908715][T12687] active_file 0 [ 363.908715][T12687] unevictable 0 [ 363.908715][T12687] slab_reclaimable 1486848 [ 363.908715][T12687] slab_unreclaimable 4317184 [ 363.908715][T12687] pgfault 201927 [ 363.908715][T12687] pgmajfault 0 [ 363.908715][T12687] workingset_refault 0 [ 363.908715][T12687] workingset_activate 0 [ 363.908715][T12687] workingset_nodereclaim 0 [ 363.908715][T12687] pgrefill 33 [ 363.908715][T12687] pgscan 33 [ 363.908715][T12687] pgsteal 0 [ 364.006715][T12687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12651,uid=0 [ 364.034489][T12687] Memory cgroup out of memory: Killed process 12651 (syz-executor.2) total-vm:72840kB, anon-rss:5064kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 364.077597][ T1065] oom_reaper: reaped process 12651 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB [ 364.089887][T12690] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 364.135216][T12690] CPU: 0 PID: 12690 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 364.144659][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.144731][T12690] Call Trace: [ 364.144757][T12690] dump_stack+0x172/0x1f0 [ 364.144780][T12690] dump_header+0x177/0x1152 [ 364.144798][T12690] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 364.172939][T12690] ? ___ratelimit+0x2c8/0x595 [ 364.177622][T12690] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 364.183427][T12690] ? lockdep_hardirqs_on+0x418/0x5d0 [ 364.188714][T12690] ? trace_hardirqs_on+0x67/0x240 [ 364.193766][T12690] ? pagefault_out_of_memory+0x11c/0x11c [ 364.199399][T12690] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 364.205214][T12690] ? ___ratelimit+0x60/0x595 [ 364.210057][T12690] ? do_raw_spin_unlock+0x57/0x270 [ 364.215184][T12690] oom_kill_process.cold+0x10/0x15 [ 364.220314][T12690] out_of_memory+0x334/0x1340 [ 364.225095][T12690] ? lock_downgrade+0x920/0x920 [ 364.230042][T12690] ? oom_killer_disable+0x280/0x280 [ 364.235264][T12690] mem_cgroup_out_of_memory+0x1d8/0x240 [ 364.240977][T12690] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 364.246622][T12690] ? do_raw_spin_unlock+0x57/0x270 [ 364.251753][T12690] ? _raw_spin_unlock+0x2d/0x50 [ 364.256607][T12690] try_charge+0xf4b/0x1440 [ 364.261124][T12690] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 364.266693][T12690] ? find_held_lock+0x35/0x130 [ 364.271606][T12690] ? get_mem_cgroup_from_mm+0x139/0x320 [ 364.277165][T12690] ? lock_downgrade+0x920/0x920 [ 364.282057][T12690] ? percpu_ref_tryget_live+0x111/0x290 [ 364.287609][T12690] __memcg_kmem_charge_memcg+0x71/0xf0 [ 364.293066][T12690] ? memcg_kmem_put_cache+0x50/0x50 [ 364.298273][T12690] ? get_mem_cgroup_from_mm+0x156/0x320 [ 364.303827][T12690] __memcg_kmem_charge+0x13a/0x3a0 [ 364.308952][T12690] __alloc_pages_nodemask+0x4f7/0x900 [ 364.314328][T12690] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 364.320052][T12690] ? __alloc_pages_slowpath+0x2540/0x2540 [ 364.325773][T12690] ? percpu_ref_put_many+0xb6/0x190 [ 364.331158][T12690] ? lockdep_hardirqs_on+0x418/0x5d0 [ 364.336586][T12690] ? trace_hardirqs_on+0x67/0x240 [ 364.341611][T12690] ? __kasan_check_read+0x11/0x20 [ 364.346825][T12690] copy_process+0x3f8/0x6830 [ 364.351533][T12690] ? __kasan_check_read+0x11/0x20 [ 364.356564][T12690] ? __lock_acquire+0x16f2/0x4a00 [ 364.361603][T12690] ? __cleanup_sighand+0x60/0x60 [ 364.366678][T12690] ? __might_fault+0x12b/0x1e0 [ 364.371453][T12690] ? __might_fault+0x12b/0x1e0 [ 364.376227][T12690] _do_fork+0x146/0xfa0 [ 364.380387][T12690] ? copy_init_mm+0x20/0x20 [ 364.384904][T12690] ? __kasan_check_read+0x11/0x20 [ 364.390019][T12690] ? _copy_to_user+0x118/0x160 [ 364.394792][T12690] __x64_sys_clone+0x1ab/0x270 [ 364.399562][T12690] ? __ia32_sys_vfork+0xd0/0xd0 [ 364.404426][T12690] ? do_syscall_64+0x26/0x760 [ 364.409199][T12690] ? lockdep_hardirqs_on+0x418/0x5d0 [ 364.414602][T12690] ? trace_hardirqs_on+0x67/0x240 [ 364.419649][T12690] do_syscall_64+0xfa/0x760 [ 364.424178][T12690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.424188][T12690] RIP: 0033:0x4598e9 [ 364.424202][T12690] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.424208][T12690] RSP: 002b:00007f2cfb667c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 364.424219][T12690] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9 [ 364.424227][T12690] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000208100 [ 364.424234][T12690] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 364.424242][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cfb6686d4 [ 364.424249][T12690] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 00000000ffffffff [ 364.438099][T12690] memory: usage 306600kB, limit 307200kB, failcnt 49 11:48:52 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', 0x0, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) socket$alg(0x26, 0x5, 0x0) 11:48:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext\n\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 364.633507][T12690] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.662493][T12690] Memory cgroup stats for /syz5: [ 364.662604][T12690] anon 44945408 [ 364.662604][T12690] file 258465792 [ 364.662604][T12690] kernel_stack 786432 [ 364.662604][T12690] slab 5623808 [ 364.662604][T12690] sock 0 [ 364.662604][T12690] shmem 258506752 [ 364.662604][T12690] file_mapped 223162368 [ 364.662604][T12690] file_dirty 0 [ 364.662604][T12690] file_writeback 0 [ 364.662604][T12690] anon_thp 37748736 [ 364.662604][T12690] inactive_anon 223162368 [ 364.662604][T12690] active_anon 80138240 [ 364.662604][T12690] inactive_file 0 [ 364.662604][T12690] active_file 0 [ 364.662604][T12690] unevictable 0 [ 364.662604][T12690] slab_reclaimable 1622016 [ 364.662604][T12690] slab_unreclaimable 4001792 [ 364.662604][T12690] pgfault 197340 [ 364.662604][T12690] pgmajfault 0 [ 364.662604][T12690] workingset_refault 0 [ 364.662604][T12690] workingset_activate 0 [ 364.662604][T12690] workingset_nodereclaim 0 [ 364.662604][T12690] pgrefill 0 [ 364.662604][T12690] pgscan 0 [ 364.662604][T12690] pgsteal 0 [ 364.775302][T12690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9075,uid=0 [ 364.931811][T12690] Memory cgroup out of memory: Killed process 9075 (syz-executor.5) total-vm:72708kB, anon-rss:5064kB, file-rss:35808kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 364.966284][ T1065] oom_reaper: reaped process 9075 (syz-executor.5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:11480kB [ 365.061513][T12685] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 365.120364][T12685] CPU: 1 PID: 12685 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 365.129508][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.139562][T12685] Call Trace: [ 365.142857][T12685] dump_stack+0x172/0x1f0 [ 365.147202][T12685] dump_header+0x177/0x1152 [ 365.151725][T12685] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 365.157534][T12685] ? ___ratelimit+0x2c8/0x595 [ 365.162211][T12685] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 365.168029][T12685] ? lockdep_hardirqs_on+0x418/0x5d0 [ 365.173407][T12685] ? trace_hardirqs_on+0x67/0x240 [ 365.178442][T12685] ? pagefault_out_of_memory+0x11c/0x11c [ 365.184073][T12685] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 365.189873][T12685] ? ___ratelimit+0x60/0x595 [ 365.194476][T12685] ? do_raw_spin_unlock+0x57/0x270 [ 365.199702][T12685] oom_kill_process.cold+0x10/0x15 [ 365.204822][T12685] out_of_memory+0x334/0x1340 [ 365.209525][T12685] ? lock_downgrade+0x920/0x920 [ 365.214386][T12685] ? oom_killer_disable+0x280/0x280 [ 365.219599][T12685] mem_cgroup_out_of_memory+0x1d8/0x240 [ 365.225144][T12685] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 365.230777][T12685] ? do_raw_spin_unlock+0x57/0x270 [ 365.235898][T12685] ? _raw_spin_unlock+0x2d/0x50 [ 365.240896][T12685] try_charge+0xa2d/0x1440 [ 365.245331][T12685] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 365.250873][T12685] ? percpu_ref_tryget_live+0x111/0x290 [ 365.256435][T12685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.262677][T12685] ? __kasan_check_read+0x11/0x20 [ 365.267705][T12685] ? get_mem_cgroup_from_mm+0x156/0x320 [ 365.273290][T12685] mem_cgroup_try_charge+0x136/0x590 [ 365.278573][T12685] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 365.284816][T12685] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 365.290450][T12685] __handle_mm_fault+0x1e34/0x3f20 [ 365.295578][T12685] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 365.301222][T12685] ? __kasan_check_read+0x11/0x20 [ 365.306254][T12685] handle_mm_fault+0x1b5/0x6c0 [ 365.311109][T12685] __do_page_fault+0x536/0xdd0 [ 365.316055][T12685] do_page_fault+0x38/0x590 [ 365.320558][T12685] page_fault+0x39/0x40 [ 365.324703][T12685] RIP: 0033:0x45c29d [ 365.328601][T12685] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 30 8e fb ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 365.348387][T12685] RSP: 002b:00007fffbac3a008 EFLAGS: 00010202 [ 365.354450][T12685] RAX: ffffffffffffffea RBX: 00007f2cfb626700 RCX: 00007f2cfb626700 [ 365.363384][T12685] RDX: 00000000003d0f00 RSI: 00007f2cfb625db0 RDI: 0000000000410620 [ 365.371492][T12685] RBP: 00007fffbac3a220 R08: 00007f2cfb6269d0 R09: 00007f2cfb626700 [ 365.379469][T12685] R10: 00007f2cfb625dc0 R11: 0000000000000246 R12: 0000000000000000 [ 365.387527][T12685] R13: 00007fffbac3a0bf R14: 00007f2cfb6269c0 R15: 000000000075c07c [ 365.404290][T12685] memory: usage 301452kB, limit 307200kB, failcnt 49 [ 365.427729][T12685] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 365.453191][T12685] Memory cgroup stats for /syz5: [ 365.453480][T12685] anon 39903232 [ 365.453480][T12685] file 258465792 [ 365.453480][T12685] kernel_stack 786432 [ 365.453480][T12685] slab 5623808 [ 365.453480][T12685] sock 0 [ 365.453480][T12685] shmem 258506752 [ 365.453480][T12685] file_mapped 211673088 [ 365.453480][T12685] file_dirty 0 [ 365.453480][T12685] file_writeback 0 [ 365.453480][T12685] anon_thp 33554432 [ 365.453480][T12685] inactive_anon 211673088 [ 365.453480][T12685] active_anon 86691840 [ 365.453480][T12685] inactive_file 0 [ 365.453480][T12685] active_file 0 [ 365.453480][T12685] unevictable 0 [ 365.453480][T12685] slab_reclaimable 1622016 [ 365.453480][T12685] slab_unreclaimable 4001792 [ 365.453480][T12685] pgfault 197340 [ 365.453480][T12685] pgmajfault 0 [ 365.453480][T12685] workingset_refault 0 [ 365.453480][T12685] workingset_activate 0 [ 365.453480][T12685] workingset_nodereclaim 0 [ 365.453480][T12685] pgrefill 0 [ 365.453480][T12685] pgscan 0 [ 365.453480][T12685] pgsteal 0 [ 365.614162][T12685] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11242,uid=0 [ 365.645037][T12685] Memory cgroup out of memory: Killed process 11242 (syz-executor.5) total-vm:72708kB, anon-rss:5064kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 11:48:53 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x20000000000000}}]}) 11:48:53 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000340)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000200)='keyring.(\'.]\x00', &(0x7f0000000240)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000300)='proc#selfvboxnet1vmnet1\'system\x00'], 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendto$inet(r2, &(0x7f0000000040), 0xe0, 0x4286c, 0x0, 0x0) 11:48:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext%\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:53 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x80ffff00000000}}]}) 11:48:53 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0xd) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = accept4(r2, 0x0, 0x0, 0x100c00) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000003c0)={0x3c, 0x18, 0x3, 0x1f, 0x6, 0x5, 0x4, 0xe8}) fcntl$setlease(r4, 0x400, 0x2) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r6, &(0x7f0000000100)='net/mcfilter6\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0x1, &(0x7f0000000240)="0f42bb1eb54687b1dfe55dbb27bb19cc7082b97bb815fea28baccb5370faef9d079c376236053e39e76909f65d86fd7205e4e393fd4c6f715f7ed3c03391d07da28cfcb1c92dd8b8e8104566b3b95f4bc787db27e64fcce976976354b95344658dda42400c10cd540d88ea8dbd7963df6038394b12c662d6dddba35157d3b65043b10aa6aa5e36c6440fc15e527e235a82742be1428848ebe8cf24b93baa34eea80b8b63cd86315d431166d53d96776368b193ffbc17bbe25a5bc703f66526ba6f78856ad93e6c5cc0ffa3b30023841690a7071ea2d93e86c4549554a74bc3e072d61f7cb950cfd3b0fb", &(0x7f0000000080)=""/34}, 0x18) ioctl(r7, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0xfffffffeffffffff) fallocate(r3, 0x4, 0x10000, 0x4) sendto$inet(r3, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x100, 0x0) open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x100) 11:48:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext/\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x100000000000000}}]}) 11:48:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x240601, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syncfs(r0) 11:48:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:54 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x7}, 0x8) 11:48:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x200000000000000}}]}) 11:48:54 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x8, 0x8, 0x3, 0x0, 0x1d}) 11:48:54 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext7\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x300000000000000}}]}) [ 367.282635][T12858] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 367.334235][T12858] CPU: 1 PID: 12858 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 367.343462][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.353522][T12858] Call Trace: [ 367.356821][T12858] dump_stack+0x172/0x1f0 [ 367.361177][T12858] dump_header+0x177/0x1152 [ 367.365695][T12858] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 367.371506][T12858] ? ___ratelimit+0x2c8/0x595 [ 367.376185][T12858] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 367.381993][T12858] ? lockdep_hardirqs_on+0x418/0x5d0 [ 367.387289][T12858] ? trace_hardirqs_on+0x67/0x240 [ 367.392319][T12858] ? pagefault_out_of_memory+0x11c/0x11c [ 367.397959][T12858] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 367.403771][T12858] ? ___ratelimit+0x60/0x595 [ 367.408360][T12858] ? do_raw_spin_unlock+0x57/0x270 [ 367.413993][T12858] oom_kill_process.cold+0x10/0x15 [ 367.419112][T12858] out_of_memory+0x334/0x1340 [ 367.423794][T12858] ? lock_downgrade+0x920/0x920 [ 367.428743][T12858] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 367.434557][T12858] ? oom_killer_disable+0x280/0x280 [ 367.439771][T12858] mem_cgroup_out_of_memory+0x1d8/0x240 [ 367.445608][T12858] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 367.451257][T12858] ? do_raw_spin_unlock+0x57/0x270 [ 367.456380][T12858] ? _raw_spin_unlock+0x2d/0x50 [ 367.461292][T12858] try_charge+0xf4b/0x1440 [ 367.465725][T12858] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 367.471361][T12858] ? percpu_ref_tryget_live+0x111/0x290 [ 367.476922][T12858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.483432][T12858] ? __kasan_check_read+0x11/0x20 [ 367.488467][T12858] ? get_mem_cgroup_from_mm+0x156/0x320 [ 367.494264][T12858] mem_cgroup_try_charge+0x136/0x590 [ 367.499572][T12858] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 367.505390][T12858] shmem_getpage_gfp+0x88e/0x2680 [ 367.510438][T12858] ? shmem_unuse_inode+0x1010/0x1010 [ 367.515737][T12858] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 367.521466][T12858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.527722][T12858] shmem_fault+0x22a/0x7b0 [ 367.532149][T12858] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 367.538138][T12858] ? lock_downgrade+0x920/0x920 [ 367.543004][T12858] __do_fault+0x111/0x540 [ 367.547335][T12858] ? do_raw_spin_unlock+0x57/0x270 [ 367.552599][T12858] __handle_mm_fault+0x2cb8/0x3f20 [ 367.557724][T12858] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 367.563288][T12858] ? __kasan_check_read+0x11/0x20 [ 367.568590][T12858] handle_mm_fault+0x1b5/0x6c0 [ 367.573560][T12858] __get_user_pages+0x7d4/0x1b30 [ 367.578502][T12858] ? mark_held_locks+0xf0/0xf0 [ 367.583286][T12858] ? follow_page_mask+0x1cf0/0x1cf0 [ 367.588496][T12858] ? __mm_populate+0x270/0x380 [ 367.593275][T12858] ? memset+0x32/0x40 [ 367.597267][T12858] populate_vma_page_range+0x20d/0x2a0 [ 367.602999][T12858] __mm_populate+0x204/0x380 [ 367.607607][T12858] ? populate_vma_page_range+0x2a0/0x2a0 [ 367.613253][T12858] ? __kasan_check_write+0x14/0x20 [ 367.618373][T12858] ? up_write+0x155/0x490 [ 367.622717][T12858] vm_mmap_pgoff+0x213/0x230 [ 367.627319][T12858] ? randomize_stack_top+0x110/0x110 [ 367.632711][T12858] ? __kasan_check_read+0x11/0x20 [ 367.637745][T12858] ? _copy_to_user+0x118/0x160 [ 367.642518][T12858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.648773][T12858] ksys_mmap_pgoff+0xf7/0x630 [ 367.653460][T12858] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 367.659102][T12858] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 367.664568][T12858] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 367.670030][T12858] ? do_syscall_64+0x26/0x760 [ 367.674711][T12858] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.680844][T12858] __x64_sys_mmap+0xe9/0x1b0 [ 367.685442][T12858] do_syscall_64+0xfa/0x760 [ 367.690137][T12858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.696176][T12858] RIP: 0033:0x4598e9 [ 367.700076][T12858] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.719689][T12858] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.728107][T12858] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 367.736078][T12858] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 367.744134][T12858] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 367.752124][T12858] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 367.760093][T12858] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 367.785621][T12858] memory: usage 307200kB, limit 307200kB, failcnt 143 [ 367.792721][T12858] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.800599][T12858] Memory cgroup stats for /syz0: [ 367.800720][T12858] anon 7626752 [ 367.800720][T12858] file 295735296 [ 367.800720][T12858] kernel_stack 917504 [ 367.800720][T12858] slab 5492736 [ 367.800720][T12858] sock 0 [ 367.800720][T12858] shmem 295735296 [ 367.800720][T12858] file_mapped 260333568 [ 367.800720][T12858] file_dirty 0 [ 367.800720][T12858] file_writeback 0 [ 367.800720][T12858] anon_thp 4194304 [ 367.800720][T12858] inactive_anon 260333568 [ 367.800720][T12858] active_anon 42934272 [ 367.800720][T12858] inactive_file 135168 [ 367.800720][T12858] active_file 0 [ 367.800720][T12858] unevictable 0 [ 367.800720][T12858] slab_reclaimable 1622016 [ 367.800720][T12858] slab_unreclaimable 3870720 [ 367.800720][T12858] pgfault 217140 [ 367.800720][T12858] pgmajfault 0 [ 367.800720][T12858] workingset_refault 0 [ 367.800720][T12858] workingset_activate 0 [ 367.800720][T12858] workingset_nodereclaim 0 [ 367.800720][T12858] pgrefill 33 [ 367.800720][T12858] pgscan 33 [ 367.800720][T12858] pgsteal 0 [ 367.910230][T12858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12771,uid=0 11:48:55 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(0x0, 0x0) [ 367.958043][T12858] Memory cgroup out of memory: Killed process 12771 (syz-executor.0) total-vm:72840kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 11:48:55 executing program 4: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$sock_void(r0, 0x1, 0x20, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext<\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x400000000000000}}]}) 11:48:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext\\\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000240)="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", 0x1b8, 0xa000, 0x0, 0x0) 11:48:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x500000000000000}}]}) 11:48:56 executing program 2: r0 = gettid() syz_genetlink_get_family_id$nbd(&(0x7f0000001ac0)='nbd\x00') socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f0000000180)='./file0\x00', 0x244000, 0x100) recvmsg$kcm(r2, &(0x7f0000001a80)={&(0x7f00000002c0)=@ipx, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001b00)=""/170, 0xaa}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000001740)=""/216, 0xd8}, {&(0x7f0000001840)=""/173, 0xad}, {&(0x7f0000001900)=""/60, 0x3c}, {&(0x7f0000001940)=""/103, 0x67}], 0xa}, 0x40002003) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7, 0xc0001) fstat(r5, &(0x7f0000000240)) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x28, &(0x7f0000000340)}, 0x10) fcntl$setlease(r4, 0x400, 0x2) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000000c0)='.uservboxnet1eth1selfvboxnet0\x00', &(0x7f0000000100)='./file0\x00', r4) tkill(r0, 0x18) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f00000003c0)="d7939104a7491215df831e46401b99489b1bb79ccbf95df8cb04f9cfd2a73016e418a05ee922") rt_sigsuspend(&(0x7f0000000040), 0x8) 11:48:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext`\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:57 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xe591cb88a3f9a234, 0x7a) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x40) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x900, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000140)) r7 = accept4(r5, 0x0, 0x0, 0x80000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r7, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) 11:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x600000000000000}}]}) 11:48:57 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(0x0, 0x0) 11:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='extc\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 369.496738][ T26] audit: type=1804 audit(1568461737.070:38): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir925593995/syzkaller.yl4MJx/178/file0" dev="sda1" ino=16993 res=1 [ 369.585685][ T26] audit: type=1804 audit(1568461737.100:39): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir925593995/syzkaller.yl4MJx/178/file0" dev="sda1" ino=16993 res=1 11:48:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000040), 0xff3b, 0x0, 0x0, 0xfffffffffffffd32) 11:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x02', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x700000000000000}}]}) [ 369.719120][ T26] audit: type=1804 audit(1568461737.160:40): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir925593995/syzkaller.yl4MJx/178/file0" dev="sda1" ino=16993 res=1 11:48:57 executing program 2: r0 = gettid() r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 369.889879][ T26] audit: type=1804 audit(1568461737.160:41): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir925593995/syzkaller.yl4MJx/178/file0" dev="sda1" ino=16993 res=1 11:48:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x0) mq_getsetattr(r3, &(0x7f0000000080)={0x5, 0x9, 0x101, 0x8, 0x6, 0x0, 0x0, 0x4d7f}, &(0x7f00000000c0)) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x4000000000000000}}]}) [ 370.184553][T12946] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 11:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x03', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 370.278401][T12946] CPU: 0 PID: 12946 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 370.287549][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.297617][T12946] Call Trace: [ 370.300919][T12946] dump_stack+0x172/0x1f0 [ 370.305261][T12946] dump_header+0x177/0x1152 [ 370.309880][T12946] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 370.315963][T12946] ? ___ratelimit+0x2c8/0x595 [ 370.320655][T12946] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 370.326561][T12946] ? lockdep_hardirqs_on+0x418/0x5d0 [ 370.332465][T12946] ? trace_hardirqs_on+0x67/0x240 [ 370.332484][T12946] ? pagefault_out_of_memory+0x11c/0x11c [ 370.332504][T12946] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 370.332519][T12946] ? ___ratelimit+0x60/0x595 [ 370.332532][T12946] ? do_raw_spin_unlock+0x57/0x270 [ 370.332550][T12946] oom_kill_process.cold+0x10/0x15 [ 370.332563][T12946] out_of_memory+0x334/0x1340 [ 370.332574][T12946] ? lock_downgrade+0x920/0x920 [ 370.332588][T12946] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 370.332600][T12946] ? oom_killer_disable+0x280/0x280 [ 370.332625][T12946] mem_cgroup_out_of_memory+0x1d8/0x240 [ 370.332639][T12946] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 370.332656][T12946] ? do_raw_spin_unlock+0x57/0x270 [ 370.332673][T12946] ? _raw_spin_unlock+0x2d/0x50 [ 370.332691][T12946] try_charge+0xf4b/0x1440 [ 370.332736][T12946] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 370.415824][T12946] ? percpu_ref_tryget_live+0x111/0x290 [ 370.421391][T12946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.427809][T12946] ? __kasan_check_read+0x11/0x20 [ 370.432859][T12946] ? get_mem_cgroup_from_mm+0x156/0x320 [ 370.438445][T12946] mem_cgroup_try_charge+0x136/0x590 [ 370.443873][T12946] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 370.449525][T12946] shmem_getpage_gfp+0x88e/0x2680 [ 370.454693][T12946] ? shmem_unuse_inode+0x1010/0x1010 [ 370.460002][T12946] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 370.465872][T12946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.472263][T12946] shmem_fault+0x22a/0x7b0 [ 370.476981][T12946] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 370.483209][T12946] ? lock_downgrade+0x920/0x920 [ 370.488285][T12946] __do_fault+0x111/0x540 [ 370.493528][T12946] ? do_raw_spin_unlock+0x57/0x270 [ 370.498750][T12946] __handle_mm_fault+0x2cb8/0x3f20 [ 370.504061][T12946] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 370.509645][T12946] ? __kasan_check_read+0x11/0x20 [ 370.514851][T12946] handle_mm_fault+0x1b5/0x6c0 [ 370.519738][T12946] __get_user_pages+0x7d4/0x1b30 [ 370.524737][T12946] ? mark_held_locks+0xf0/0xf0 [ 370.529705][T12946] ? follow_page_mask+0x1cf0/0x1cf0 [ 370.535013][T12946] ? __mm_populate+0x270/0x380 [ 370.539926][T12946] ? memset+0x32/0x40 [ 370.544190][T12946] populate_vma_page_range+0x20d/0x2a0 [ 370.550035][T12946] __mm_populate+0x204/0x380 [ 370.554738][T12946] ? populate_vma_page_range+0x2a0/0x2a0 [ 370.560832][T12946] ? __kasan_check_write+0x14/0x20 [ 370.565965][T12946] ? up_write+0x155/0x490 [ 370.570318][T12946] vm_mmap_pgoff+0x213/0x230 [ 370.570343][T12946] ? randomize_stack_top+0x110/0x110 [ 370.580309][T12946] ? __kasan_check_read+0x11/0x20 [ 370.585665][T12946] ? _copy_to_user+0x118/0x160 [ 370.590543][T12946] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.596811][T12946] ksys_mmap_pgoff+0xf7/0x630 [ 370.601640][T12946] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 370.607576][T12946] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 370.613343][T12946] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 370.618858][T12946] ? do_syscall_64+0x26/0x760 [ 370.623758][T12946] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.629835][T12946] __x64_sys_mmap+0xe9/0x1b0 [ 370.634696][T12946] do_syscall_64+0xfa/0x760 [ 370.639208][T12946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.645366][T12946] RIP: 0033:0x4598e9 [ 370.649526][T12946] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.669508][T12946] RSP: 002b:00007f2cfb667c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 370.678295][T12946] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 370.686675][T12946] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 370.694762][T12946] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 370.702914][T12946] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f2cfb6686d4 [ 370.711205][T12946] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 370.764273][T12946] memory: usage 307200kB, limit 307200kB, failcnt 94 [ 370.771182][T12946] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 370.799601][T12946] Memory cgroup stats for /syz5: [ 370.799721][T12946] anon 35033088 [ 370.799721][T12946] file 268251136 [ 370.799721][T12946] kernel_stack 786432 [ 370.799721][T12946] slab 6176768 [ 370.799721][T12946] sock 0 [ 370.799721][T12946] shmem 268177408 [ 370.799721][T12946] file_mapped 233029632 [ 370.799721][T12946] file_dirty 0 [ 370.799721][T12946] file_writeback 0 [ 370.799721][T12946] anon_thp 29360128 [ 370.799721][T12946] inactive_anon 233029632 [ 370.799721][T12946] active_anon 70254592 [ 370.799721][T12946] inactive_file 0 [ 370.799721][T12946] active_file 0 [ 370.799721][T12946] unevictable 0 11:48:58 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:48:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x3f, 0x300, 0x70bd29, 0x25dfdbfe, {0x8}, [@typed={0xb4, 0x3b, @binary="6ca838f36849a9cb3bcdb8a832bd6ebc719f251653921d87b152920db6c2e2bdb16da328d4d4f38ef6e70876e3ea66c4d001ee2bbfc16c5d20b557402ed8f91febeb919c72fb486070b4bfd0528b6607cd1c8ca9e4140681c47d4e15c798965d38139876ce8366dc9fd9e4189fab13588decf8a3b866104dcf9bc0475acf7d6d98ce871d168ecdb59045573677bfe10b99283eed782c4c864a22dd8c8cebd0dc5dd34fff0643d9b7c38ace6334e570"}, @typed={0x14, 0x95, @ipv6=@empty}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44}, 0x40000) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 370.799721][T12946] slab_reclaimable 1622016 [ 370.799721][T12946] slab_unreclaimable 4554752 [ 370.799721][T12946] pgfault 208593 [ 370.799721][T12946] pgmajfault 0 [ 370.799721][T12946] workingset_refault 0 [ 370.799721][T12946] workingset_activate 0 [ 370.799721][T12946] workingset_nodereclaim 0 [ 370.799721][T12946] pgrefill 0 [ 370.799721][T12946] pgscan 0 [ 370.799721][T12946] pgsteal 0 11:48:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0xff0f000000000000}}]}) [ 371.094524][T12946] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11090,uid=0 [ 371.160767][T12946] Memory cgroup out of memory: Killed process 11090 (syz-executor.5) total-vm:72708kB, anon-rss:5064kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 371.332206][T13001] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 371.387493][T13001] CPU: 0 PID: 13001 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 371.397322][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.407890][T13001] Call Trace: [ 371.411650][T13001] dump_stack+0x172/0x1f0 [ 371.416015][T13001] dump_header+0x177/0x1152 [ 371.420815][T13001] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 371.427218][T13001] ? ___ratelimit+0x2c8/0x595 [ 371.432433][T13001] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 371.438446][T13001] ? lockdep_hardirqs_on+0x418/0x5d0 [ 371.444035][T13001] ? trace_hardirqs_on+0x67/0x240 [ 371.449345][T13001] ? pagefault_out_of_memory+0x11c/0x11c [ 371.455673][T13001] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 371.461796][T13001] ? ___ratelimit+0x60/0x595 [ 371.466595][T13001] ? do_raw_spin_unlock+0x57/0x270 [ 371.471922][T13001] oom_kill_process.cold+0x10/0x15 [ 371.477428][T13001] out_of_memory+0x334/0x1340 [ 371.482355][T13001] ? lock_downgrade+0x920/0x920 [ 371.487479][T13001] ? oom_killer_disable+0x280/0x280 [ 371.492886][T13001] mem_cgroup_out_of_memory+0x1d8/0x240 [ 371.498781][T13001] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 371.504528][T13001] ? do_raw_spin_unlock+0x57/0x270 [ 371.509932][T13001] ? _raw_spin_unlock+0x2d/0x50 [ 371.514837][T13001] try_charge+0xf4b/0x1440 [ 371.519504][T13001] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 371.525163][T13001] ? percpu_ref_tryget_live+0x111/0x290 [ 371.530956][T13001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.537259][T13001] ? __kasan_check_read+0x11/0x20 [ 371.542547][T13001] ? get_mem_cgroup_from_mm+0x156/0x320 [ 371.548582][T13001] mem_cgroup_try_charge+0x136/0x590 [ 371.553982][T13001] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 371.559759][T13001] shmem_getpage_gfp+0x88e/0x2680 [ 371.565057][T13001] ? shmem_unuse_inode+0x1010/0x1010 [ 371.570558][T13001] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 371.576734][T13001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.583420][T13001] shmem_fault+0x22a/0x7b0 [ 371.588150][T13001] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 371.594329][T13001] ? lock_downgrade+0x920/0x920 [ 371.599200][T13001] __do_fault+0x111/0x540 [ 371.603544][T13001] ? do_raw_spin_unlock+0x57/0x270 [ 371.608692][T13001] __handle_mm_fault+0x2cb8/0x3f20 [ 371.613916][T13001] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 371.620109][T13001] ? __kasan_check_read+0x11/0x20 [ 371.625693][T13001] handle_mm_fault+0x1b5/0x6c0 [ 371.630662][T13001] __get_user_pages+0x7d4/0x1b30 [ 371.636167][T13001] ? mark_held_locks+0xf0/0xf0 [ 371.641139][T13001] ? follow_page_mask+0x1cf0/0x1cf0 [ 371.646532][T13001] ? __mm_populate+0x270/0x380 [ 371.651637][T13001] ? memset+0x32/0x40 [ 371.655803][T13001] populate_vma_page_range+0x20d/0x2a0 [ 371.655821][T13001] __mm_populate+0x204/0x380 [ 371.655838][T13001] ? populate_vma_page_range+0x2a0/0x2a0 [ 371.655849][T13001] ? __kasan_check_write+0x14/0x20 [ 371.655861][T13001] ? up_write+0x155/0x490 [ 371.655883][T13001] vm_mmap_pgoff+0x213/0x230 [ 371.655903][T13001] ? randomize_stack_top+0x110/0x110 [ 371.655916][T13001] ? __kasan_check_read+0x11/0x20 [ 371.655930][T13001] ? _copy_to_user+0x118/0x160 [ 371.655948][T13001] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.655967][T13001] ksys_mmap_pgoff+0xf7/0x630 [ 371.715881][T13001] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 371.721891][T13001] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 371.727490][T13001] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 371.733357][T13001] ? do_syscall_64+0x26/0x760 [ 371.738958][T13001] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.745227][T13001] __x64_sys_mmap+0xe9/0x1b0 [ 371.749987][T13001] do_syscall_64+0xfa/0x760 [ 371.754628][T13001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.760981][T13001] RIP: 0033:0x4598e9 [ 371.764979][T13001] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.785219][T13001] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 371.794477][T13001] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 371.802809][T13001] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 371.811097][T13001] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 371.819767][T13001] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 371.828073][T13001] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:48:59 executing program 5: r0 = gettid() ioctl(0xffffffffffffffff, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(0x0, 0x0) 11:48:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x04', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:48:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000000)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000080)={0x7e3, 0x8000, 0x3, 0x80000000}) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:48:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0xffffffff00000000}}]}) 11:48:59 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) getpeername$packet(r4, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)=@report={0x9c, 0x20, 0x400, 0x70bd2d, 0x25dfdbfc, {0x33, {@in6=@ipv4={[], [], @local}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e22, 0x6, 0x4e21, 0x10001, 0xa, 0xac03e943590d921, 0x20, 0x62, r5, 0xee00}}, [@sec_ctx={0x3c, 0x8, {0x35, 0x8, 0x1, 0x5, 0x2d, "680d29c9a89df8cbebbf517d5c51fac14f8efb985d89095a8452314e0b0b9283d866c7d3b459c172dff0894f7b"}}, @mark={0xc, 0x15, {0x7, 0x1ff}}, @etimer_thresh={0x8, 0xc, 0x49}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20}, 0x24000001) tkill(r0, 0x1b) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 371.837806][T13001] memory: usage 307200kB, limit 307200kB, failcnt 201 [ 371.845409][T13001] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 371.894147][T13001] Memory cgroup stats for /syz0: [ 371.894285][T13001] anon 7761920 [ 371.894285][T13001] file 295788544 [ 371.894285][T13001] kernel_stack 917504 [ 371.894285][T13001] slab 5492736 [ 371.894285][T13001] sock 0 [ 371.894285][T13001] shmem 295653376 [ 371.894285][T13001] file_mapped 260468736 [ 371.894285][T13001] file_dirty 0 [ 371.894285][T13001] file_writeback 0 [ 371.894285][T13001] anon_thp 4194304 [ 371.894285][T13001] inactive_anon 260468736 [ 371.894285][T13001] active_anon 43069440 [ 371.894285][T13001] inactive_file 135168 [ 371.894285][T13001] active_file 0 [ 371.894285][T13001] unevictable 0 [ 371.894285][T13001] slab_reclaimable 1622016 [ 371.894285][T13001] slab_unreclaimable 3870720 [ 371.894285][T13001] pgfault 223014 [ 371.894285][T13001] pgmajfault 0 [ 371.894285][T13001] workingset_refault 0 [ 371.894285][T13001] workingset_activate 0 [ 371.894285][T13001] workingset_nodereclaim 0 [ 371.894285][T13001] pgrefill 33 [ 371.894285][T13001] pgscan 33 [ 371.894285][T13001] pgsteal 0 [ 372.054167][T13001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12505,uid=0 [ 372.130281][T13001] Memory cgroup out of memory: Killed process 12505 (syz-executor.0) total-vm:72840kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 11:48:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x2}}]}) [ 372.219597][ T1065] oom_reaper: reaped process 12505 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:11480kB 11:48:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x05', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 372.285123][T13001] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 372.330396][T13001] CPU: 1 PID: 13001 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 372.340233][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.351177][T13001] Call Trace: [ 372.354674][T13001] dump_stack+0x172/0x1f0 [ 372.359114][T13001] dump_header+0x177/0x1152 [ 372.363811][T13001] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 372.370149][T13001] ? ___ratelimit+0x2c8/0x595 [ 372.375013][T13001] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 372.381476][T13001] ? lockdep_hardirqs_on+0x418/0x5d0 [ 372.386946][T13001] ? trace_hardirqs_on+0x67/0x240 [ 372.392163][T13001] ? pagefault_out_of_memory+0x11c/0x11c [ 372.398096][T13001] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 372.403925][T13001] ? ___ratelimit+0x60/0x595 [ 372.408908][T13001] ? do_raw_spin_unlock+0x57/0x270 [ 372.414311][T13001] oom_kill_process.cold+0x10/0x15 [ 372.419541][T13001] out_of_memory+0x334/0x1340 [ 372.424392][T13001] ? lock_downgrade+0x920/0x920 [ 372.429272][T13001] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 372.435102][T13001] ? oom_killer_disable+0x280/0x280 [ 372.440324][T13001] mem_cgroup_out_of_memory+0x1d8/0x240 [ 372.446053][T13001] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 372.451855][T13001] ? do_raw_spin_unlock+0x57/0x270 [ 372.456988][T13001] ? _raw_spin_unlock+0x2d/0x50 [ 372.462131][T13001] try_charge+0xf4b/0x1440 [ 372.466751][T13001] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 372.472317][T13001] ? percpu_ref_tryget_live+0x111/0x290 11:48:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40800, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x6, 0x5, 0x3, 0x3, 0x7, "0317b5964e04e34dbb53bbae4c4a09f7e8cbbd", 0x440, 0x4fe}) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 372.478330][T13001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.485084][T13001] ? __kasan_check_read+0x11/0x20 [ 372.490588][T13001] ? get_mem_cgroup_from_mm+0x156/0x320 [ 372.496650][T13001] mem_cgroup_try_charge+0x136/0x590 [ 372.502047][T13001] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 372.507944][T13001] shmem_getpage_gfp+0x88e/0x2680 [ 372.513086][T13001] ? shmem_unuse_inode+0x1010/0x1010 [ 372.518841][T13001] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 372.524933][T13001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.531475][T13001] shmem_fault+0x22a/0x7b0 [ 372.536548][T13001] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 372.542838][T13001] ? lock_downgrade+0x920/0x920 [ 372.548605][T13001] __do_fault+0x111/0x540 [ 372.553258][T13001] ? do_raw_spin_unlock+0x57/0x270 [ 372.558657][T13001] __handle_mm_fault+0x2cb8/0x3f20 [ 372.565237][T13001] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 372.571437][T13001] ? __kasan_check_read+0x11/0x20 [ 372.577332][T13001] handle_mm_fault+0x1b5/0x6c0 [ 372.582403][T13001] __get_user_pages+0x7d4/0x1b30 [ 372.588105][T13001] ? mark_held_locks+0xf0/0xf0 [ 372.593787][T13001] ? follow_page_mask+0x1cf0/0x1cf0 [ 372.599278][T13001] ? __mm_populate+0x270/0x380 [ 372.604156][T13001] ? memset+0x32/0x40 [ 372.608390][T13001] populate_vma_page_range+0x20d/0x2a0 [ 372.614083][T13001] __mm_populate+0x204/0x380 [ 372.619265][T13001] ? populate_vma_page_range+0x2a0/0x2a0 [ 372.625267][T13001] ? __kasan_check_write+0x14/0x20 [ 372.630644][T13001] ? up_write+0x155/0x490 [ 372.635168][T13001] vm_mmap_pgoff+0x213/0x230 [ 372.640429][T13001] ? randomize_stack_top+0x110/0x110 [ 372.646330][T13001] ? __kasan_check_read+0x11/0x20 [ 372.651737][T13001] ? _copy_to_user+0x118/0x160 [ 372.657148][T13001] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.663788][T13001] ksys_mmap_pgoff+0xf7/0x630 [ 372.668577][T13001] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 372.674400][T13001] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 372.680076][T13001] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 372.685811][T13001] ? do_syscall_64+0x26/0x760 [ 372.691044][T13001] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.697974][T13001] __x64_sys_mmap+0xe9/0x1b0 [ 372.703149][T13001] do_syscall_64+0xfa/0x760 [ 372.708331][T13001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.714537][T13001] RIP: 0033:0x4598e9 [ 372.718630][T13001] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.741219][T13001] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 372.750012][T13001] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 372.758781][T13001] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 372.767762][T13001] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 11:49:00 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000200)) r3 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) r4 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000180)=""/99) [ 372.776758][T13001] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 372.785000][T13001] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 372.797838][T13001] memory: usage 295576kB, limit 307200kB, failcnt 239 [ 372.819558][T13001] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 372.873451][T13001] Memory cgroup stats for /syz0: [ 372.873569][T13001] anon 7761920 [ 372.873569][T13001] file 284213248 [ 372.873569][T13001] kernel_stack 917504 [ 372.873569][T13001] slab 5492736 [ 372.873569][T13001] sock 0 [ 372.873569][T13001] shmem 284225536 [ 372.873569][T13001] file_mapped 249114624 [ 372.873569][T13001] file_dirty 0 [ 372.873569][T13001] file_writeback 0 [ 372.873569][T13001] anon_thp 4194304 [ 372.873569][T13001] inactive_anon 249114624 [ 372.873569][T13001] active_anon 43069440 [ 372.873569][T13001] inactive_file 135168 [ 372.873569][T13001] active_file 0 [ 372.873569][T13001] unevictable 0 [ 372.873569][T13001] slab_reclaimable 1622016 [ 372.873569][T13001] slab_unreclaimable 3870720 [ 372.873569][T13001] pgfault 223047 [ 372.873569][T13001] pgmajfault 0 [ 372.873569][T13001] workingset_refault 0 [ 372.873569][T13001] workingset_activate 0 [ 372.873569][T13001] workingset_nodereclaim 0 [ 372.873569][T13001] pgrefill 33 [ 372.873569][T13001] pgscan 66 [ 372.873569][T13001] pgsteal 0 [ 373.107325][T13001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12322,uid=0 [ 373.183825][T13001] Memory cgroup out of memory: Killed process 12322 (syz-executor.0) total-vm:72840kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 [ 373.404778][T13063] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 373.438058][T13063] CPU: 0 PID: 13063 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 373.447745][T13063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.458289][T13063] Call Trace: [ 373.462336][T13063] dump_stack+0x172/0x1f0 [ 373.467068][T13063] dump_header+0x177/0x1152 [ 373.472697][T13063] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 373.478963][T13063] ? ___ratelimit+0x2c8/0x595 [ 373.484148][T13063] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 373.490683][T13063] ? lockdep_hardirqs_on+0x418/0x5d0 [ 373.496087][T13063] ? trace_hardirqs_on+0x67/0x240 [ 373.502103][T13063] ? pagefault_out_of_memory+0x11c/0x11c [ 373.508037][T13063] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 373.514069][T13063] ? ___ratelimit+0x60/0x595 [ 373.519181][T13063] ? do_raw_spin_unlock+0x57/0x270 [ 373.524506][T13063] oom_kill_process.cold+0x10/0x15 [ 373.530099][T13063] out_of_memory+0x334/0x1340 [ 373.535029][T13063] ? lock_downgrade+0x920/0x920 [ 373.539952][T13063] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 373.546702][T13063] ? oom_killer_disable+0x280/0x280 [ 373.552258][T13063] mem_cgroup_out_of_memory+0x1d8/0x240 [ 373.558453][T13063] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 373.565116][T13063] ? do_raw_spin_unlock+0x57/0x270 [ 373.570791][T13063] ? _raw_spin_unlock+0x2d/0x50 [ 373.575854][T13063] try_charge+0xf4b/0x1440 [ 373.580577][T13063] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 373.586498][T13063] ? percpu_ref_tryget_live+0x111/0x290 [ 373.592767][T13063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.599274][T13063] ? __kasan_check_read+0x11/0x20 [ 373.604512][T13063] ? get_mem_cgroup_from_mm+0x156/0x320 [ 373.610592][T13063] mem_cgroup_try_charge+0x136/0x590 [ 373.616443][T13063] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 373.622364][T13063] shmem_getpage_gfp+0x88e/0x2680 [ 373.627924][T13063] ? shmem_unuse_inode+0x1010/0x1010 [ 373.633536][T13063] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 373.640360][T13063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.647254][T13063] shmem_fault+0x22a/0x7b0 [ 373.652629][T13063] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 373.659363][T13063] ? lock_downgrade+0x920/0x920 [ 373.664758][T13063] __do_fault+0x111/0x540 [ 373.669561][T13063] ? do_raw_spin_unlock+0x57/0x270 [ 373.674965][T13063] __handle_mm_fault+0x2cb8/0x3f20 [ 373.680674][T13063] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 373.687188][T13063] ? __kasan_check_read+0x11/0x20 [ 373.692607][T13063] handle_mm_fault+0x1b5/0x6c0 [ 373.697754][T13063] __get_user_pages+0x7d4/0x1b30 [ 373.703027][T13063] ? mark_held_locks+0xf0/0xf0 [ 373.707996][T13063] ? follow_page_mask+0x1cf0/0x1cf0 [ 373.713443][T13063] ? __mm_populate+0x270/0x380 [ 373.718325][T13063] ? memset+0x32/0x40 [ 373.722576][T13063] populate_vma_page_range+0x20d/0x2a0 [ 373.728463][T13063] __mm_populate+0x204/0x380 [ 373.733293][T13063] ? populate_vma_page_range+0x2a0/0x2a0 [ 373.739858][T13063] ? __kasan_check_write+0x14/0x20 [ 373.745345][T13063] ? up_write+0x155/0x490 [ 373.750144][T13063] vm_mmap_pgoff+0x213/0x230 [ 373.755549][T13063] ? randomize_stack_top+0x110/0x110 [ 373.761126][T13063] ? __kasan_check_read+0x11/0x20 [ 373.766793][T13063] ? _copy_to_user+0x118/0x160 [ 373.771673][T13063] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.778034][T13063] ksys_mmap_pgoff+0xf7/0x630 [ 373.782826][T13063] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 373.788745][T13063] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 373.794491][T13063] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 373.800244][T13063] ? do_syscall_64+0x26/0x760 [ 373.806644][T13063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.813431][T13063] __x64_sys_mmap+0xe9/0x1b0 [ 373.818215][T13063] do_syscall_64+0xfa/0x760 [ 373.822829][T13063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.829040][T13063] RIP: 0033:0x4598e9 [ 373.833066][T13063] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.854203][T13063] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 373.862959][T13063] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 373.871298][T13063] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 373.879597][T13063] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 373.887771][T13063] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 373.895937][T13063] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 373.917849][T13063] memory: usage 307200kB, limit 307200kB, failcnt 123 [ 373.932916][T13063] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 373.954053][T13063] Memory cgroup stats for /syz2: [ 373.954183][T13063] anon 17911808 [ 373.954183][T13063] file 283107328 [ 373.954183][T13063] kernel_stack 917504 [ 373.954183][T13063] slab 7979008 [ 373.954183][T13063] sock 0 [ 373.954183][T13063] shmem 283107328 [ 373.954183][T13063] file_mapped 247898112 [ 373.954183][T13063] file_dirty 0 [ 373.954183][T13063] file_writeback 0 [ 373.954183][T13063] anon_thp 14680064 [ 373.954183][T13063] inactive_anon 247898112 [ 373.954183][T13063] active_anon 53178368 [ 373.954183][T13063] inactive_file 0 [ 373.954183][T13063] active_file 0 [ 373.954183][T13063] unevictable 0 [ 373.954183][T13063] slab_reclaimable 1757184 11:49:01 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:49:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x3}}]}) [ 373.954183][T13063] slab_unreclaimable 6221824 [ 373.954183][T13063] pgfault 217404 [ 373.954183][T13063] pgmajfault 0 [ 373.954183][T13063] workingset_refault 0 [ 373.954183][T13063] workingset_activate 0 [ 373.954183][T13063] workingset_nodereclaim 0 [ 373.954183][T13063] pgrefill 33 [ 373.954183][T13063] pgscan 33 [ 373.954183][T13063] pgsteal 0 [ 374.055758][T13063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10853,uid=0 [ 374.078717][T13063] Memory cgroup out of memory: Killed process 10853 (syz-executor.2) total-vm:72708kB, anon-rss:12436kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:163840kB oom_score_adj:1000 11:49:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x80040, 0x180) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0xffffffffffffff36) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="9d5b89ce7144a9ba498f00a626cac0847c64b7a48ab20066cfdd3052cdb3e86a65c246d475b2af863d44d9627692551b1f85fa6b770283854f2c0519ba9c89628a656f8bd7134873df0ebf82f3ce222f78e10423a7da9e2702baa79f5097d484259f594af18eee7d3179cda15b64596d3c196d0d1733331de210f52aa095029b2190f85118edacad3e219c30d6bae657780861224a010c54831a752bece12d1c622c193e7212f850451c2505", 0xac) sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r4 = getuid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r4, r5, 0x1400) 11:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x06', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:01 executing program 5: io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x2) 11:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\a', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:02 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x1f) 11:49:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x4}}]}) 11:49:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x100080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffffa, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="44040000240007e744c01e69dfc8a800f1ffffff", @ANYRESOCT, @ANYRES64=r8], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x2000) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x400, 0x70bd2a, 0x25dfdbff, {0x2, 0x1, 0x174, 0xff, r7}, [@IFA_LABEL={0x14, 0x3, 'team0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200008d2) fcntl$setlease(r2, 0x400, 0x2) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x724) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x5}}]}) 11:49:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:02 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0xba, 0x1fffffffc000, @scatter={0x3, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000180)=""/83, 0x53}]}, &(0x7f0000000240)="e4317ab1038f9532f8631d98a35590cf779ff6f2a0f8979ad1229c320743803a8406903ea6c425eb7452bc4d3d46e3bfcc79079a3cebaa8764a2e1a416ccc314c61a097ef8ebad246f05d21385d61ca0535c0f2b51093855bbd36a96421dcd94f8de90bd71aa4af1cda7bf17e52e40000a8d38e246b01b3d56090385551772b414003532d1ee066000207894e830e3651887e38d7582a02bf7e32cbe4189ba140716dab50867e1ff1e5aef06867f869fe14b90b5dfc097e4bf5d", &(0x7f0000000300)=""/185, 0x4, 0x22, 0x0, &(0x7f00000003c0)}) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:02 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x0) 11:49:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x6}}]}) 11:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\b', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x7}}]}) 11:49:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f0000001880)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) sendmsg$xdp(r1, &(0x7f0000001800)={&(0x7f0000000280)={0x2c, 0x1, r5, 0x16}, 0xfffffffffffffc90, &(0x7f0000001740)=[{&(0x7f00000002c0)="5a2407d3a2156b6cd7884176eda087fbf078ebc0269585165baae67eaecffa5cb62d9d91bdd54bb9816228757288f71cdbd2d508bc69504450381b84f37b02da3a198ecac04c3ea15681c69aa62ee4fea086b1de0c199904958b1ef54260be3ec498e82ed190191e5abdd990c5b53688", 0x70}, {&(0x7f0000000340)="c631cb0dd9192f5dc2172524bf3d09313d519b163852de70300af86ee0ab73", 0x1f}, {&(0x7f0000000380)="c35cecb17187ba2a124b77619c71ba127a3dc11c4e46f0442b6546b6fa2a90d04109dfadffafa3ac0a0fe749642f036ce50070f4076b861b52aa551d181393c011d1925af705bdce07bc039297046b044c0142b558b318a3bb58c65adc7d4b14bb66a688fabdf09aa49001545dcaff4a8f500909270e7a158bf4a428670e8d32b2c2aa112641718dbbb26bae285803ae71c16ea0865dc51ed7099f221e262b52f63b7c73e8ee3b457885a4d82fdeb73acd4c3ed5e6edefad658dc9ac9cdc090000", 0xc1}, {&(0x7f0000000480)="7a2f8de92ecb47ce7820b301eb751e117d0322335d80362a35799a21f38cff0c8d70ac385f2ed27a4abdf84a0f12fda2d9cbd39007a0adb5f2e43a13d43d115f56ab404e900ea65c86dad0b33bae473883e84541f2b9a501db310487647ade6a050c03581f3a02d0357a71ae29f27191a12e5ea62ed81fbfc75b7f83ab316a4a511e791c9d7bf425b46ebf72c0a1e1fb036f9cb804d3a2dc767194ecf4c07944edc098d5b73a3685fe58ee31b4ca8501fd2d967e1f", 0xb5}, {&(0x7f00000018c0)="ad59b543489ba2ade2c45652d5078c57638a91bb7caa5676ec8bc8d24a35c8d06705ff3a1a03ed08a34c5a363b823300029c1cdcf81d448af1fce968ef2b41ab38207c1ac9820c371cda8388e7b16d35a3ebf2a3eda6a112f6f11c2d702abcc0ba3946488702d0", 0x67}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="b37d4fe14c48334ae3d85f729b7d3d", 0xf}, {&(0x7f0000000700)="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", 0xa99}, {&(0x7f0000001700)}], 0xda, 0x0, 0x0, 0x200080c2}, 0x44050008) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$binfmt_script(r6, &(0x7f0000001940)={'#! ', './file0', [{0x20, 'hash\x00'}, {0x20, '*%'}, {0x20, 'keyringlo]'}, {0x20, 'hash\x00'}, {0x20, '\\cpuset'}], 0xa, "b6ace553cf0c1f73390fb7e6c4cf2f689f3034e2d2cb24eadb3c6d97195f1d47bf6dad2b78340caa6b603a2978c4bc7bd4569e67bbc92ed680adaa9b9585e9e8bacd5874443076837bacdbe84cf9d65a3717a87ea9d01b6c1e0bd77132bae3ef80727b52036b9fe7fdb2a34bc9beba6dd75c447c901e8fbaef2aa101f1325e6f8b2241d8579f054c8deaff3a6a772b2a5c0a7d3e78f5211514311f5a9addfda59d95d1ac12d7c2ec3a6497fa19082c33159b9a95e5f9dde31bf9c771534f80972aaca780e71aa546f560099056678172f3077cd81d2077e078c9a87c3021fa523298fe7efc02e3"}, 0x114) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0x20, 0x3}, 0xc) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) keyctl$clear(0x7, r7) 11:49:03 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmsg$tipc(r0, &(0x7f00000016c0)={&(0x7f0000001280)=@name={0x1e, 0x2, 0x0, {{0x0, 0xe000600}, 0xe000000}}, 0x10, 0x0}, 0x0) 11:49:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 375.716367][T13148] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 375.844252][T13148] CPU: 1 PID: 13148 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 375.854348][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.865575][T13148] Call Trace: [ 375.869069][T13148] dump_stack+0x172/0x1f0 [ 375.873656][T13148] dump_header+0x177/0x1152 [ 375.873673][T13148] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 375.873690][T13148] ? ___ratelimit+0x2c8/0x595 [ 375.884344][T13148] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 375.884363][T13148] ? lockdep_hardirqs_on+0x418/0x5d0 [ 375.884382][T13148] ? trace_hardirqs_on+0x67/0x240 [ 375.884399][T13148] ? pagefault_out_of_memory+0x11c/0x11c [ 375.884418][T13148] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 375.918177][T13148] ? ___ratelimit+0x60/0x595 [ 375.923316][T13148] ? do_raw_spin_unlock+0x57/0x270 [ 375.928944][T13148] oom_kill_process.cold+0x10/0x15 [ 375.934436][T13148] out_of_memory+0x334/0x1340 [ 375.940319][T13148] ? lock_downgrade+0x920/0x920 [ 375.945649][T13148] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 375.951816][T13148] ? oom_killer_disable+0x280/0x280 [ 375.957132][T13148] mem_cgroup_out_of_memory+0x1d8/0x240 [ 375.962778][T13148] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 375.969129][T13148] ? do_raw_spin_unlock+0x57/0x270 [ 375.975033][T13148] ? _raw_spin_unlock+0x2d/0x50 [ 375.975051][T13148] try_charge+0xf4b/0x1440 [ 375.975073][T13148] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 375.975087][T13148] ? percpu_ref_tryget_live+0x111/0x290 [ 375.975105][T13148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.975124][T13148] ? __kasan_check_read+0x11/0x20 [ 376.010608][T13148] ? get_mem_cgroup_from_mm+0x156/0x320 [ 376.016449][T13148] mem_cgroup_try_charge+0x136/0x590 [ 376.022069][T13148] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 376.027974][T13148] shmem_getpage_gfp+0x88e/0x2680 [ 376.033234][T13148] ? shmem_unuse_inode+0x1010/0x1010 [ 376.039551][T13148] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 376.045756][T13148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.052907][T13148] shmem_fault+0x22a/0x7b0 [ 376.057884][T13148] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 376.064073][T13148] ? lock_downgrade+0x920/0x920 [ 376.069277][T13148] __do_fault+0x111/0x540 [ 376.073892][T13148] ? do_raw_spin_unlock+0x57/0x270 [ 376.079230][T13148] __handle_mm_fault+0x2cb8/0x3f20 [ 376.084625][T13148] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 376.090511][T13148] ? __kasan_check_read+0x11/0x20 [ 376.095678][T13148] handle_mm_fault+0x1b5/0x6c0 [ 376.100527][T13148] __get_user_pages+0x7d4/0x1b30 [ 376.105844][T13148] ? mark_held_locks+0xf0/0xf0 [ 376.110808][T13148] ? follow_page_mask+0x1cf0/0x1cf0 [ 376.116164][T13148] ? __mm_populate+0x270/0x380 [ 376.121049][T13148] ? memset+0x32/0x40 [ 376.125033][T13148] populate_vma_page_range+0x20d/0x2a0 [ 376.130695][T13148] __mm_populate+0x204/0x380 [ 376.135430][T13148] ? populate_vma_page_range+0x2a0/0x2a0 [ 376.141069][T13148] ? __kasan_check_write+0x14/0x20 [ 376.146447][T13148] ? up_write+0x155/0x490 [ 376.151071][T13148] vm_mmap_pgoff+0x213/0x230 [ 376.156046][T13148] ? randomize_stack_top+0x110/0x110 [ 376.161440][T13148] ? __kasan_check_read+0x11/0x20 [ 376.166719][T13148] ? _copy_to_user+0x118/0x160 [ 376.171592][T13148] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.177929][T13148] ksys_mmap_pgoff+0xf7/0x630 [ 376.182977][T13148] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 376.188612][T13148] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 376.194492][T13148] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 376.200072][T13148] ? do_syscall_64+0x26/0x760 [ 376.204954][T13148] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.211194][T13148] __x64_sys_mmap+0xe9/0x1b0 [ 376.215908][T13148] do_syscall_64+0xfa/0x760 [ 376.220758][T13148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.226728][T13148] RIP: 0033:0x4598e9 [ 376.230615][T13148] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.251424][T13148] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 376.260010][T13148] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 376.267974][T13148] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 376.275946][T13148] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 376.283910][T13148] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 11:49:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x300}}]}) 11:49:03 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x2) [ 376.291960][T13148] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 376.315064][T13148] memory: usage 307200kB, limit 307200kB, failcnt 271 [ 376.322133][T13148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 376.346429][T13148] Memory cgroup stats for /syz0: [ 376.346546][T13148] anon 7622656 [ 376.346546][T13148] file 295755776 [ 376.346546][T13148] kernel_stack 917504 [ 376.346546][T13148] slab 5492736 [ 376.346546][T13148] sock 0 [ 376.346546][T13148] shmem 295661568 [ 376.346546][T13148] file_mapped 260333568 [ 376.346546][T13148] file_dirty 0 [ 376.346546][T13148] file_writeback 0 [ 376.346546][T13148] anon_thp 4194304 [ 376.346546][T13148] inactive_anon 260333568 [ 376.346546][T13148] active_anon 42934272 11:49:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x101900b1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") socket$packet(0x11, 0x3, 0x300) sendto$inet(r3, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 376.346546][T13148] inactive_file 135168 [ 376.346546][T13148] active_file 0 [ 376.346546][T13148] unevictable 0 [ 376.346546][T13148] slab_reclaimable 1622016 [ 376.346546][T13148] slab_unreclaimable 3870720 [ 376.346546][T13148] pgfault 228888 [ 376.346546][T13148] pgmajfault 0 [ 376.346546][T13148] workingset_refault 0 [ 376.346546][T13148] workingset_activate 0 [ 376.346546][T13148] workingset_nodereclaim 0 [ 376.346546][T13148] pgrefill 33 [ 376.346546][T13148] pgscan 66 [ 376.346546][T13148] pgsteal 0 [ 376.574310][T13148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12036,uid=0 11:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x500}}]}) [ 376.648266][T13148] Memory cgroup out of memory: Killed process 12036 (syz-executor.0) total-vm:72708kB, anon-rss:148kB, file-rss:35800kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 11:49:04 executing program 5: r0 = socket(0x11, 0x80a, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r2, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2000c00c, 0x0, 0x6) 11:49:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3ff, 0x20080) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='/cpuset', &(0x7f00000000c0)='./file0\x00', r4) accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000140)=0x1c, 0x80000) 11:49:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\n', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:04 executing program 2: r0 = gettid() r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r4, 0x7ff}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f00000000c0)=""/77, &(0x7f0000000180)=0x4d) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:04 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) 11:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x600}}]}) 11:49:04 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000810006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f0000000380)="19", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="19e7dd25c7778f00c2fa8b7e96610b6b2b69c9543cd76130db092aab6dcdc177cedca3b7feb4141f251f55e66b3c47", 0xaa, 0x421ffe2, 0x0, 0x0) 11:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x700}}]}) 11:49:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x10', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 377.703530][T13235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 377.862713][T13232] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 377.927202][T13232] CPU: 1 PID: 13232 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 377.936347][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.946565][T13232] Call Trace: [ 377.951046][T13232] dump_stack+0x172/0x1f0 [ 377.955521][T13232] dump_header+0x177/0x1152 [ 377.960128][T13232] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 377.965951][T13232] ? ___ratelimit+0x2c8/0x595 [ 377.970649][T13232] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 377.976563][T13232] ? lockdep_hardirqs_on+0x418/0x5d0 [ 377.982153][T13232] ? trace_hardirqs_on+0x67/0x240 [ 377.987279][T13232] ? pagefault_out_of_memory+0x11c/0x11c [ 377.992924][T13232] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 377.998918][T13232] ? ___ratelimit+0x60/0x595 [ 378.003602][T13232] ? do_raw_spin_unlock+0x57/0x270 [ 378.008734][T13232] oom_kill_process.cold+0x10/0x15 [ 378.013859][T13232] out_of_memory+0x334/0x1340 [ 378.018544][T13232] ? lock_downgrade+0x920/0x920 [ 378.023513][T13232] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 378.029936][T13232] ? oom_killer_disable+0x280/0x280 [ 378.035165][T13232] mem_cgroup_out_of_memory+0x1d8/0x240 [ 378.040722][T13232] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 378.046469][T13232] ? do_raw_spin_unlock+0x57/0x270 [ 378.051765][T13232] ? _raw_spin_unlock+0x2d/0x50 [ 378.056630][T13232] try_charge+0xf4b/0x1440 [ 378.061065][T13232] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 378.066703][T13232] ? percpu_ref_tryget_live+0x111/0x290 [ 378.072254][T13232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.078498][T13232] ? __kasan_check_read+0x11/0x20 [ 378.083596][T13232] ? get_mem_cgroup_from_mm+0x156/0x320 [ 378.089238][T13232] mem_cgroup_try_charge+0x136/0x590 [ 378.094531][T13232] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 378.100264][T13232] shmem_getpage_gfp+0x88e/0x2680 [ 378.105313][T13232] ? shmem_unuse_inode+0x1010/0x1010 [ 378.110731][T13232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 378.116667][T13232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.123176][T13232] shmem_fault+0x22a/0x7b0 [ 378.127602][T13232] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 378.133587][T13232] ? lock_downgrade+0x920/0x920 [ 378.138448][T13232] __do_fault+0x111/0x540 [ 378.142884][T13232] ? do_raw_spin_unlock+0x57/0x270 [ 378.148094][T13232] __handle_mm_fault+0x2cb8/0x3f20 [ 378.153226][T13232] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 378.158875][T13232] ? __kasan_check_read+0x11/0x20 [ 378.164518][T13232] handle_mm_fault+0x1b5/0x6c0 [ 378.169474][T13232] __get_user_pages+0x7d4/0x1b30 [ 378.174801][T13232] ? mark_held_locks+0xf0/0xf0 [ 378.179707][T13232] ? follow_page_mask+0x1cf0/0x1cf0 [ 378.184913][T13232] ? __mm_populate+0x270/0x380 [ 378.189791][T13232] ? memset+0x32/0x40 [ 378.193869][T13232] populate_vma_page_range+0x20d/0x2a0 [ 378.199335][T13232] __mm_populate+0x204/0x380 [ 378.203934][T13232] ? populate_vma_page_range+0x2a0/0x2a0 [ 378.209579][T13232] ? __kasan_check_write+0x14/0x20 [ 378.214689][T13232] ? up_write+0x155/0x490 [ 378.219026][T13232] vm_mmap_pgoff+0x213/0x230 [ 378.223720][T13232] ? randomize_stack_top+0x110/0x110 [ 378.229003][T13232] ? __kasan_check_read+0x11/0x20 [ 378.234047][T13232] ? _copy_to_user+0x118/0x160 [ 378.238997][T13232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.245251][T13232] ksys_mmap_pgoff+0xf7/0x630 [ 378.249942][T13232] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 378.255580][T13232] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 378.261040][T13232] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 378.266521][T13232] ? do_syscall_64+0x26/0x760 [ 378.271201][T13232] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.277359][T13232] __x64_sys_mmap+0xe9/0x1b0 [ 378.281961][T13232] do_syscall_64+0xfa/0x760 [ 378.286473][T13232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.292370][T13232] RIP: 0033:0x4598e9 [ 378.296296][T13232] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.316153][T13232] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.324577][T13232] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 378.332692][T13232] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 378.340682][T13232] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 378.348657][T13232] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 378.356652][T13232] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:49:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x1a0, 0x1d, 0x0, &(0x7f00000000c0)="4871f905cac413551b9ab16624ef7774fa246ac850da24982a806c14e3", 0x0, 0x4000}, 0x2e0) [ 378.378398][T13232] memory: usage 307200kB, limit 307200kB, failcnt 322 [ 378.416462][T13232] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 378.491321][T13232] Memory cgroup stats for /syz0: [ 378.491440][T13232] anon 7622656 [ 378.491440][T13232] file 296472576 [ 378.491440][T13232] kernel_stack 983040 [ 378.491440][T13232] slab 4665344 [ 378.491440][T13232] sock 0 [ 378.491440][T13232] shmem 296525824 [ 378.491440][T13232] file_mapped 261144576 [ 378.491440][T13232] file_dirty 0 [ 378.491440][T13232] file_writeback 0 [ 378.491440][T13232] anon_thp 4194304 [ 378.491440][T13232] inactive_anon 261144576 [ 378.491440][T13232] active_anon 43069440 11:49:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x2000}}]}) [ 378.491440][T13232] inactive_file 135168 [ 378.491440][T13232] active_file 0 [ 378.491440][T13232] unevictable 0 [ 378.491440][T13232] slab_reclaimable 1622016 [ 378.491440][T13232] slab_unreclaimable 3043328 [ 378.491440][T13232] pgfault 232056 [ 378.491440][T13232] pgmajfault 0 [ 378.491440][T13232] workingset_refault 0 [ 378.491440][T13232] workingset_activate 0 [ 378.491440][T13232] workingset_nodereclaim 0 [ 378.491440][T13232] pgrefill 33 [ 378.491440][T13232] pgscan 66 [ 378.491440][T13232] pgsteal 0 11:49:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) getsockopt$rose(r3, 0x104, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) open(&(0x7f0000000180)='./file1\x00', 0x141000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x100010, r4, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x8000000, 0x6, 0x4, 0x70000, {0x0, 0x2710}, {0x4, 0x0, 0x3, 0x1f, 0x100000001, 0x3ff, '/s?Y'}, 0x3, 0xb, @fd=r5, 0x4}) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x301001) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3#', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 378.619650][T13232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11993,uid=0 11:49:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000520000002854105001a0000000c10206509a3061317d895c9ff0600000000000000020000000000009adc53ab0037"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020100090e00000003000000000000040500068d000000000a0000000000000400000000000200000000c02100000020000100020000000002000100010000000000000200fd000805000500000000000a004872bb01000000000000001309e339be593f770700000001c5b100410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) [ 378.653989][T13232] Memory cgroup out of memory: Killed process 11993 (syz-executor.0) total-vm:72708kB, anon-rss:148kB, file-rss:35800kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 [ 378.697137][ T1065] oom_reaper: reaped process 11993 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:11480kB 11:49:06 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) write$FUSE_DIRENT(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000000300000000000000060000000000000000040000000000000000000001000080ff478f8dd45dbfdcf59d15bd017eaccc897960de84e9bfd07eb6677a5a659ae53c61cdb42e7aea1f5bd007af7a723fd0b13747d460af728491d718f043694908673e5113e7056a24d257b2f76d2d23bdc1132401f822ef6eefa7af96d6a194291c291ef2f6af6b3e558e"], 0x28) r3 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x0, r4}) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x235bcef2f4bc71eb, &(0x7f00000002c0)={@empty, @dev, 0x0}, &(0x7f0000000300)=0xc) bind$can_raw(r5, &(0x7f0000000340)={0x1d, r6}, 0x10) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 378.782690][T13232] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 378.916393][T13232] CPU: 1 PID: 13232 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 378.925720][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.935855][T13232] Call Trace: [ 378.939161][T13232] dump_stack+0x172/0x1f0 [ 378.943516][T13232] dump_header+0x177/0x1152 [ 378.943535][T13232] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 378.943546][T13232] ? ___ratelimit+0x2c8/0x595 [ 378.943564][T13232] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 378.964540][T13232] ? lockdep_hardirqs_on+0x418/0x5d0 [ 378.964558][T13232] ? trace_hardirqs_on+0x67/0x240 [ 378.964574][T13232] ? pagefault_out_of_memory+0x11c/0x11c [ 378.964592][T13232] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 378.964612][T13232] ? ___ratelimit+0x60/0x595 [ 378.991917][T13232] ? do_raw_spin_unlock+0x57/0x270 [ 378.997125][T13232] oom_kill_process.cold+0x10/0x15 [ 379.002336][T13232] out_of_memory+0x334/0x1340 [ 379.007110][T13232] ? lock_downgrade+0x920/0x920 [ 379.011978][T13232] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 379.017806][T13232] ? oom_killer_disable+0x280/0x280 [ 379.023030][T13232] mem_cgroup_out_of_memory+0x1d8/0x240 [ 379.028706][T13232] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 379.034520][T13232] ? do_raw_spin_unlock+0x57/0x270 [ 379.039813][T13232] ? _raw_spin_unlock+0x2d/0x50 [ 379.044714][T13232] try_charge+0xf4b/0x1440 [ 379.049518][T13232] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 379.055164][T13232] ? percpu_ref_tryget_live+0x111/0x290 [ 379.060722][T13232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.066975][T13232] ? __kasan_check_read+0x11/0x20 [ 379.072020][T13232] ? get_mem_cgroup_from_mm+0x156/0x320 [ 379.077575][T13232] mem_cgroup_try_charge+0x136/0x590 [ 379.082899][T13232] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 379.088550][T13232] shmem_getpage_gfp+0x88e/0x2680 [ 379.093603][T13232] ? shmem_unuse_inode+0x1010/0x1010 [ 379.098907][T13232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 379.104727][T13232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.110984][T13232] shmem_fault+0x22a/0x7b0 [ 379.115416][T13232] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 379.121407][T13232] ? lock_downgrade+0x920/0x920 [ 379.126272][T13232] __do_fault+0x111/0x540 [ 379.130625][T13232] ? do_raw_spin_unlock+0x57/0x270 [ 379.135743][T13232] __handle_mm_fault+0x2cb8/0x3f20 [ 379.140862][T13232] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 379.146427][T13232] ? __kasan_check_read+0x11/0x20 [ 379.151547][T13232] handle_mm_fault+0x1b5/0x6c0 [ 379.156332][T13232] __get_user_pages+0x7d4/0x1b30 [ 379.161274][T13232] ? mark_held_locks+0xf0/0xf0 [ 379.166053][T13232] ? follow_page_mask+0x1cf0/0x1cf0 [ 379.171443][T13232] ? __mm_populate+0x270/0x380 [ 379.176379][T13232] ? memset+0x32/0x40 [ 379.180368][T13232] populate_vma_page_range+0x20d/0x2a0 [ 379.185838][T13232] __mm_populate+0x204/0x380 [ 379.190436][T13232] ? populate_vma_page_range+0x2a0/0x2a0 [ 379.196069][T13232] ? __kasan_check_write+0x14/0x20 [ 379.201182][T13232] ? up_write+0x155/0x490 [ 379.205517][T13232] vm_mmap_pgoff+0x213/0x230 [ 379.210142][T13232] ? randomize_stack_top+0x110/0x110 [ 379.215443][T13232] ? __kasan_check_read+0x11/0x20 [ 379.220465][T13232] ? _copy_to_user+0x118/0x160 [ 379.225229][T13232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.231496][T13232] ksys_mmap_pgoff+0xf7/0x630 [ 379.236196][T13232] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 379.241935][T13232] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 379.247401][T13232] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 379.252866][T13232] ? do_syscall_64+0x26/0x760 [ 379.257556][T13232] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.263630][T13232] __x64_sys_mmap+0xe9/0x1b0 [ 379.268228][T13232] do_syscall_64+0xfa/0x760 [ 379.272749][T13232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.278637][T13232] RIP: 0033:0x4598e9 [ 379.282529][T13232] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.302743][T13232] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 379.311287][T13232] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 379.319259][T13232] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 379.327226][T13232] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 379.335194][T13232] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 379.343167][T13232] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 379.353789][T13232] memory: usage 295516kB, limit 307200kB, failcnt 369 [ 379.361116][T13232] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 379.369178][T13232] Memory cgroup stats for /syz0: [ 379.369297][T13232] anon 7622656 [ 379.369297][T13232] file 285036544 [ 379.369297][T13232] kernel_stack 917504 [ 379.369297][T13232] slab 4665344 [ 379.369297][T13232] sock 0 [ 379.369297][T13232] shmem 285040640 [ 379.369297][T13232] file_mapped 249925632 [ 379.369297][T13232] file_dirty 0 [ 379.369297][T13232] file_writeback 0 [ 379.369297][T13232] anon_thp 4194304 [ 379.369297][T13232] inactive_anon 249925632 [ 379.369297][T13232] active_anon 42934272 [ 379.369297][T13232] inactive_file 135168 [ 379.369297][T13232] active_file 0 [ 379.369297][T13232] unevictable 0 [ 379.369297][T13232] slab_reclaimable 1622016 [ 379.369297][T13232] slab_unreclaimable 3043328 [ 379.369297][T13232] pgfault 232089 [ 379.369297][T13232] pgmajfault 0 [ 379.369297][T13232] workingset_refault 0 [ 379.369297][T13232] workingset_activate 0 [ 379.369297][T13232] workingset_nodereclaim 0 [ 379.369297][T13232] pgrefill 33 [ 379.369297][T13232] pgscan 66 [ 379.369297][T13232] pgsteal 0 [ 379.470470][T13232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11952,uid=0 [ 379.495299][T13232] Memory cgroup out of memory: Killed process 11952 (syz-executor.0) total-vm:72708kB, anon-rss:148kB, file-rss:35800kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 11:49:07 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) 11:49:07 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3}) 11:49:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x4000}}]}) 11:49:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3-', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000040)) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000240)="ec73a4e68d297423063cb9645a4738f82572169314e84ddb7e5becd298eb8e98724864bc1c7db4835a69b30a74ce7e448cd84efb7aafd589b38b5590da15dc28475e5f116b9629529ad4c3e4e24825e075f28175c611352e90ee87a9a9bdbd34bae5630b923ff7554be6ed911f58537c99c208da177e17f35c9bcbf64ca3fd1bc132f07c7a63daff12e197980bc3427b4fdf711deacbf5a8e5b6a2d802ffeb8b06b69f896dab48bcf2743c9a53de3782eedee44bcf40106b171d1dd22c13146a8bd9a2b0c8115c3de3b87e4631d8ba0b8cf3db2f6671c29e0415bab80653f0376a74635db8b7902cc8cc", 0xff9d, 0x80, 0x0, 0x31e2c79ced742c8) 11:49:07 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x0, 0x4, 0x3, "bec6c45c4e6e3a9400b3f8d1dd492f1b3aeaf7811904ea518ff6c8df028fbdda"}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) inotify_add_watch(r3, &(0x7f0000000180)='./file0\x00', 0x4000100) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r4 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r5 = dup(r4) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020a00000200000000000000000000008024c2e0f980b317a944d190936b7cec79b92b366c42a4f070b1f628d2ba9b8ef06b727e2902e09e5d723da3b3ada1cb2d36d1c25cfac3de839f7bfdd22af6922112a31173085742229b9f0cc645c7ebf2d4fa7fefdfa4"], 0x10}}, 0x0) 11:49:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x800300) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000240)={@empty, @multicast1, r5}, 0xc) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0xff0f}}]}) 11:49:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3H', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 380.430413][T13306] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 380.494234][T13306] CPU: 0 PID: 13306 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 380.503378][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.514155][T13306] Call Trace: [ 380.517443][T13306] dump_stack+0x172/0x1f0 [ 380.521860][T13306] dump_header+0x177/0x1152 [ 380.526623][T13306] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 380.532434][T13306] ? ___ratelimit+0x2c8/0x595 [ 380.537109][T13306] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 380.542909][T13306] ? lockdep_hardirqs_on+0x418/0x5d0 [ 380.548183][T13306] ? trace_hardirqs_on+0x67/0x240 [ 380.553201][T13306] ? pagefault_out_of_memory+0x11c/0x11c [ 380.558820][T13306] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 380.564922][T13306] ? ___ratelimit+0x60/0x595 [ 380.569511][T13306] ? do_raw_spin_unlock+0x57/0x270 [ 380.574629][T13306] oom_kill_process.cold+0x10/0x15 [ 380.579915][T13306] out_of_memory+0x334/0x1340 [ 380.584578][T13306] ? lock_downgrade+0x920/0x920 [ 380.589431][T13306] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 380.595223][T13306] ? oom_killer_disable+0x280/0x280 [ 380.600412][T13306] mem_cgroup_out_of_memory+0x1d8/0x240 [ 380.605955][T13306] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 380.611573][T13306] ? do_raw_spin_unlock+0x57/0x270 [ 380.616682][T13306] ? _raw_spin_unlock+0x2d/0x50 [ 380.621518][T13306] try_charge+0xf4b/0x1440 [ 380.625923][T13306] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 380.631643][T13306] ? percpu_ref_tryget_live+0x111/0x290 [ 380.637188][T13306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.643421][T13306] ? __kasan_check_read+0x11/0x20 [ 380.648436][T13306] ? get_mem_cgroup_from_mm+0x156/0x320 [ 380.653965][T13306] mem_cgroup_try_charge+0x136/0x590 [ 380.659235][T13306] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 380.664983][T13306] shmem_getpage_gfp+0x88e/0x2680 [ 380.670027][T13306] ? shmem_unuse_inode+0x1010/0x1010 [ 380.675303][T13306] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 380.681092][T13306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.687320][T13306] shmem_fault+0x22a/0x7b0 [ 380.691726][T13306] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 380.697866][T13306] ? lock_downgrade+0x920/0x920 [ 380.702745][T13306] __do_fault+0x111/0x540 [ 380.707057][T13306] ? do_raw_spin_unlock+0x57/0x270 [ 380.712162][T13306] __handle_mm_fault+0x2cb8/0x3f20 [ 380.717259][T13306] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 380.722798][T13306] ? __kasan_check_read+0x11/0x20 [ 380.728027][T13306] handle_mm_fault+0x1b5/0x6c0 [ 380.732891][T13306] __get_user_pages+0x7d4/0x1b30 [ 380.738055][T13306] ? mark_held_locks+0xf0/0xf0 [ 380.742823][T13306] ? follow_page_mask+0x1cf0/0x1cf0 [ 380.748011][T13306] ? __mm_populate+0x270/0x380 [ 380.753135][T13306] ? memset+0x32/0x40 [ 380.757111][T13306] populate_vma_page_range+0x20d/0x2a0 [ 380.762556][T13306] __mm_populate+0x204/0x380 [ 380.767136][T13306] ? populate_vma_page_range+0x2a0/0x2a0 [ 380.772839][T13306] ? __kasan_check_write+0x14/0x20 [ 380.778033][T13306] ? up_write+0x155/0x490 [ 380.782528][T13306] vm_mmap_pgoff+0x213/0x230 [ 380.787107][T13306] ? randomize_stack_top+0x110/0x110 [ 380.792375][T13306] ? __kasan_check_read+0x11/0x20 [ 380.797383][T13306] ? _copy_to_user+0x118/0x160 [ 380.802151][T13306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.808384][T13306] ksys_mmap_pgoff+0xf7/0x630 [ 380.813047][T13306] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 380.818668][T13306] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 380.824112][T13306] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 380.829675][T13306] ? do_syscall_64+0x26/0x760 [ 380.834336][T13306] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.840414][T13306] __x64_sys_mmap+0xe9/0x1b0 [ 380.844992][T13306] do_syscall_64+0xfa/0x760 [ 380.849570][T13306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.855449][T13306] RIP: 0033:0x4598e9 [ 380.859326][T13306] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.879094][T13306] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 380.887922][T13306] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 380.895891][T13306] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 380.903846][T13306] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 380.911888][T13306] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 380.919842][T13306] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:49:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 11:49:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='hash\x00', r3) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) bind$ax25(r5, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) keyctl$read(0xb, r4, &(0x7f0000000240)=""/4096, 0x1000) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 381.280342][T13306] memory: usage 306940kB, limit 307200kB, failcnt 194 [ 381.290993][T13306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 381.322461][T13306] Memory cgroup stats for /syz2: [ 381.322581][T13306] anon 5488640 [ 381.322581][T13306] file 296669184 [ 381.322581][T13306] kernel_stack 917504 [ 381.322581][T13306] slab 6586368 [ 381.322581][T13306] sock 0 [ 381.322581][T13306] shmem 296677376 [ 381.322581][T13306] file_mapped 261550080 [ 381.322581][T13306] file_dirty 0 [ 381.322581][T13306] file_writeback 0 [ 381.322581][T13306] anon_thp 2097152 [ 381.322581][T13306] inactive_anon 261550080 [ 381.322581][T13306] active_anon 40755200 [ 381.322581][T13306] inactive_file 0 [ 381.322581][T13306] active_file 0 [ 381.322581][T13306] unevictable 0 [ 381.322581][T13306] slab_reclaimable 1757184 [ 381.322581][T13306] slab_unreclaimable 4829184 [ 381.322581][T13306] pgfault 229614 [ 381.322581][T13306] pgmajfault 0 [ 381.322581][T13306] workingset_refault 0 [ 381.322581][T13306] workingset_activate 0 [ 381.322581][T13306] workingset_nodereclaim 0 [ 381.322581][T13306] pgrefill 33 [ 381.322581][T13306] pgscan 33 [ 381.322581][T13306] pgsteal 0 [ 381.473653][T13306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12547,uid=0 [ 381.498651][T13306] Memory cgroup out of memory: Killed process 12547 (syz-executor.2) total-vm:72708kB, anon-rss:116kB, file-rss:36388kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 381.518097][ T1065] oom_reaper: reaped process 12547 (syz-executor.2), now anon-rss:0kB, file-rss:35428kB, shmem-rss:11480kB [ 381.538222][T13306] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 381.550154][T13306] CPU: 1 PID: 13306 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 381.559267][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.569612][T13306] Call Trace: [ 381.572915][T13306] dump_stack+0x172/0x1f0 [ 381.577282][T13306] dump_header+0x177/0x1152 [ 381.581793][T13306] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 381.587606][T13306] ? ___ratelimit+0x2c8/0x595 [ 381.592289][T13306] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 381.598123][T13306] ? lockdep_hardirqs_on+0x418/0x5d0 [ 381.603421][T13306] ? trace_hardirqs_on+0x67/0x240 [ 381.608456][T13306] ? pagefault_out_of_memory+0x11c/0x11c [ 381.614096][T13306] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 381.619984][T13306] ? ___ratelimit+0x60/0x595 [ 381.624769][T13306] ? do_raw_spin_unlock+0x57/0x270 [ 381.629880][T13306] oom_kill_process.cold+0x10/0x15 [ 381.635007][T13306] out_of_memory+0x334/0x1340 [ 381.639685][T13306] ? lock_downgrade+0x920/0x920 [ 381.644537][T13306] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 381.650535][T13306] ? oom_killer_disable+0x280/0x280 [ 381.655916][T13306] mem_cgroup_out_of_memory+0x1d8/0x240 [ 381.661468][T13306] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 381.667193][T13306] ? do_raw_spin_unlock+0x57/0x270 [ 381.672303][T13306] ? _raw_spin_unlock+0x2d/0x50 [ 381.677146][T13306] try_charge+0xf4b/0x1440 [ 381.681591][T13306] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 381.687945][T13306] ? percpu_ref_tryget_live+0x111/0x290 [ 381.693475][T13306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.699712][T13306] ? __kasan_check_read+0x11/0x20 [ 381.704738][T13306] ? get_mem_cgroup_from_mm+0x156/0x320 [ 381.710276][T13306] mem_cgroup_try_charge+0x136/0x590 [ 381.715558][T13306] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 381.721188][T13306] shmem_getpage_gfp+0x88e/0x2680 [ 381.726204][T13306] ? shmem_unuse_inode+0x1010/0x1010 [ 381.731472][T13306] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 381.737260][T13306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.743482][T13306] shmem_fault+0x22a/0x7b0 [ 381.747891][T13306] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 381.753946][T13306] ? lock_downgrade+0x920/0x920 [ 381.758983][T13306] __do_fault+0x111/0x540 [ 381.763400][T13306] ? do_raw_spin_unlock+0x57/0x270 [ 381.768497][T13306] __handle_mm_fault+0x2cb8/0x3f20 [ 381.773600][T13306] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 381.779131][T13306] ? __kasan_check_read+0x11/0x20 [ 381.784140][T13306] handle_mm_fault+0x1b5/0x6c0 [ 381.788891][T13306] __get_user_pages+0x7d4/0x1b30 [ 381.793805][T13306] ? mark_held_locks+0xf0/0xf0 [ 381.798642][T13306] ? follow_page_mask+0x1cf0/0x1cf0 [ 381.803833][T13306] ? __mm_populate+0x270/0x380 [ 381.808583][T13306] ? memset+0x32/0x40 [ 381.812563][T13306] populate_vma_page_range+0x20d/0x2a0 [ 381.819106][T13306] __mm_populate+0x204/0x380 [ 381.823779][T13306] ? populate_vma_page_range+0x2a0/0x2a0 [ 381.829400][T13306] ? __kasan_check_write+0x14/0x20 [ 381.834586][T13306] ? up_write+0x155/0x490 [ 381.839259][T13306] vm_mmap_pgoff+0x213/0x230 [ 381.843928][T13306] ? randomize_stack_top+0x110/0x110 [ 381.849220][T13306] ? __kasan_check_read+0x11/0x20 [ 381.854231][T13306] ? _copy_to_user+0x118/0x160 [ 381.858991][T13306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.865224][T13306] ksys_mmap_pgoff+0xf7/0x630 [ 381.870145][T13306] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 381.875791][T13306] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 381.881254][T13306] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 381.886704][T13306] ? do_syscall_64+0x26/0x760 [ 381.891368][T13306] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.897521][T13306] __x64_sys_mmap+0xe9/0x1b0 [ 381.902096][T13306] do_syscall_64+0xfa/0x760 [ 381.906583][T13306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.912453][T13306] RIP: 0033:0x4598e9 [ 381.916324][T13306] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.936221][T13306] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 381.944623][T13306] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 381.952746][T13306] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 381.960700][T13306] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 11:49:09 executing program 0: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='[', 0x1, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) 11:49:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3L', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x200000}}]}) 11:49:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 11:49:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 381.968661][T13306] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 381.976699][T13306] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 382.001785][T13306] memory: usage 295528kB, limit 307200kB, failcnt 223 [ 382.035827][T13306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 382.091125][T13306] Memory cgroup stats for /syz2: [ 382.091232][T13306] anon 5488640 [ 382.091232][T13306] file 285466624 [ 382.091232][T13306] kernel_stack 917504 [ 382.091232][T13306] slab 6586368 [ 382.091232][T13306] sock 0 [ 382.091232][T13306] shmem 285478912 [ 382.091232][T13306] file_mapped 250195968 [ 382.091232][T13306] file_dirty 0 [ 382.091232][T13306] file_writeback 0 [ 382.091232][T13306] anon_thp 2097152 [ 382.091232][T13306] inactive_anon 250195968 [ 382.091232][T13306] active_anon 40890368 [ 382.091232][T13306] inactive_file 0 [ 382.091232][T13306] active_file 0 [ 382.091232][T13306] unevictable 0 [ 382.091232][T13306] slab_reclaimable 1757184 [ 382.091232][T13306] slab_unreclaimable 4829184 [ 382.091232][T13306] pgfault 229713 [ 382.091232][T13306] pgmajfault 0 [ 382.091232][T13306] workingset_refault 0 [ 382.091232][T13306] workingset_activate 0 [ 382.091232][T13306] workingset_nodereclaim 0 [ 382.091232][T13306] pgrefill 33 [ 382.091232][T13306] pgscan 33 [ 382.091232][T13306] pgsteal 0 [ 382.124130][T13306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9283,uid=0 [ 382.223029][T13306] Memory cgroup out of memory: Killed process 9283 (syz-executor.2) total-vm:72708kB, anon-rss:148kB, file-rss:35820kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 382.316937][ T1065] oom_reaper: reaped process 9283 (syz-executor.2), now anon-rss:0kB, file-rss:34860kB, shmem-rss:11480kB [ 382.328810][T13365] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 382.384222][T13365] CPU: 1 PID: 13365 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 382.393697][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.393703][T13365] Call Trace: [ 382.393724][T13365] dump_stack+0x172/0x1f0 [ 382.393745][T13365] dump_header+0x177/0x1152 [ 382.415902][T13365] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 382.415915][T13365] ? ___ratelimit+0x2c8/0x595 [ 382.415933][T13365] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 382.432554][T13365] ? lockdep_hardirqs_on+0x418/0x5d0 [ 382.437839][T13365] ? trace_hardirqs_on+0x67/0x240 [ 382.443137][T13365] ? pagefault_out_of_memory+0x11c/0x11c [ 382.448757][T13365] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 382.454555][T13365] ? ___ratelimit+0x60/0x595 [ 382.459126][T13365] ? do_raw_spin_unlock+0x57/0x270 [ 382.464222][T13365] oom_kill_process.cold+0x10/0x15 [ 382.469327][T13365] out_of_memory+0x334/0x1340 [ 382.473990][T13365] ? lock_downgrade+0x920/0x920 [ 382.478830][T13365] ? oom_killer_disable+0x280/0x280 [ 382.484047][T13365] mem_cgroup_out_of_memory+0x1d8/0x240 [ 382.489579][T13365] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 382.495198][T13365] ? do_raw_spin_unlock+0x57/0x270 [ 382.500381][T13365] ? _raw_spin_unlock+0x2d/0x50 [ 382.505218][T13365] try_charge+0xf4b/0x1440 [ 382.509633][T13365] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 382.515159][T13365] ? percpu_ref_tryget_live+0x111/0x290 [ 382.520692][T13365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.526918][T13365] ? __kasan_check_read+0x11/0x20 [ 382.531966][T13365] ? get_mem_cgroup_from_mm+0x156/0x320 [ 382.537652][T13365] mem_cgroup_try_charge+0x136/0x590 [ 382.542951][T13365] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 382.548586][T13365] shmem_getpage_gfp+0x88e/0x2680 [ 382.553611][T13365] ? shmem_unuse_inode+0x1010/0x1010 [ 382.558891][T13365] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 382.564596][T13365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.570955][T13365] shmem_fault+0x22a/0x7b0 [ 382.575390][T13365] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 382.581375][T13365] ? lock_downgrade+0x920/0x920 [ 382.586222][T13365] __do_fault+0x111/0x540 [ 382.590533][T13365] ? do_raw_spin_unlock+0x57/0x270 [ 382.595641][T13365] __handle_mm_fault+0x2cb8/0x3f20 [ 382.600829][T13365] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 382.606477][T13365] ? __kasan_check_read+0x11/0x20 [ 382.611691][T13365] handle_mm_fault+0x1b5/0x6c0 [ 382.616442][T13365] __get_user_pages+0x7d4/0x1b30 [ 382.621366][T13365] ? mark_held_locks+0xf0/0xf0 [ 382.626134][T13365] ? follow_page_mask+0x1cf0/0x1cf0 [ 382.631555][T13365] ? __mm_populate+0x270/0x380 [ 382.636314][T13365] ? memset+0x32/0x40 [ 382.640283][T13365] populate_vma_page_range+0x20d/0x2a0 [ 382.645816][T13365] __mm_populate+0x204/0x380 [ 382.650406][T13365] ? populate_vma_page_range+0x2a0/0x2a0 [ 382.656027][T13365] ? __kasan_check_write+0x14/0x20 [ 382.661121][T13365] ? up_write+0x155/0x490 [ 382.665529][T13365] vm_mmap_pgoff+0x213/0x230 [ 382.670111][T13365] ? randomize_stack_top+0x110/0x110 [ 382.675533][T13365] ? __kasan_check_read+0x11/0x20 [ 382.680542][T13365] ? _copy_to_user+0x118/0x160 [ 382.685383][T13365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.691704][T13365] ksys_mmap_pgoff+0xf7/0x630 [ 382.696476][T13365] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 382.702277][T13365] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 382.707816][T13365] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 382.713450][T13365] ? do_syscall_64+0x26/0x760 [ 382.718202][T13365] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.724259][T13365] __x64_sys_mmap+0xe9/0x1b0 [ 382.729058][T13365] do_syscall_64+0xfa/0x760 [ 382.733562][T13365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.739435][T13365] RIP: 0033:0x4598e9 [ 382.743319][T13365] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.763069][T13365] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 382.771476][T13365] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 382.779429][T13365] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 382.787990][T13365] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 382.795945][T13365] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 382.803898][T13365] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 383.014165][T13365] memory: usage 306776kB, limit 307200kB, failcnt 408 [ 383.020980][T13365] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 383.039789][T13365] Memory cgroup stats for /syz0: [ 383.040024][T13365] anon 7618560 [ 383.040024][T13365] file 296546304 [ 383.040024][T13365] kernel_stack 983040 [ 383.040024][T13365] slab 4247552 [ 383.040024][T13365] sock 0 [ 383.040024][T13365] shmem 296546304 [ 383.040024][T13365] file_mapped 261279744 [ 383.040024][T13365] file_dirty 0 [ 383.040024][T13365] file_writeback 0 [ 383.040024][T13365] anon_thp 4194304 [ 383.040024][T13365] inactive_anon 261144576 [ 383.040024][T13365] active_anon 43069440 [ 383.040024][T13365] inactive_file 135168 [ 383.040024][T13365] active_file 0 [ 383.040024][T13365] unevictable 0 [ 383.040024][T13365] slab_reclaimable 1622016 [ 383.040024][T13365] slab_unreclaimable 2625536 [ 383.040024][T13365] pgfault 237930 [ 383.040024][T13365] pgmajfault 0 [ 383.040024][T13365] workingset_refault 0 [ 383.040024][T13365] workingset_activate 0 [ 383.040024][T13365] workingset_nodereclaim 0 [ 383.040024][T13365] pgrefill 66 [ 383.040024][T13365] pgscan 66 [ 383.040024][T13365] pgsteal 0 [ 383.145088][T13365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13348,uid=0 [ 383.174154][T13365] Memory cgroup out of memory: Killed process 13348 (syz-executor.0) total-vm:72708kB, anon-rss:148kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 [ 383.207119][ T1065] oom_reaper: reaped process 13348 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB [ 383.240342][T13365] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 383.261317][T13365] CPU: 1 PID: 13365 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 383.270459][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.280622][T13365] Call Trace: [ 383.283925][T13365] dump_stack+0x172/0x1f0 [ 383.288359][T13365] dump_header+0x177/0x1152 [ 383.293016][T13365] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 383.298924][T13365] ? ___ratelimit+0x2c8/0x595 [ 383.303603][T13365] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 383.309514][T13365] ? lockdep_hardirqs_on+0x418/0x5d0 [ 383.314821][T13365] ? trace_hardirqs_on+0x67/0x240 [ 383.319975][T13365] ? pagefault_out_of_memory+0x11c/0x11c [ 383.326056][T13365] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 383.331875][T13365] ? ___ratelimit+0x60/0x595 [ 383.336479][T13365] ? do_raw_spin_unlock+0x57/0x270 [ 383.341689][T13365] oom_kill_process.cold+0x10/0x15 [ 383.347858][T13365] out_of_memory+0x334/0x1340 [ 383.352626][T13365] ? lock_downgrade+0x920/0x920 [ 383.357611][T13365] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 383.363430][T13365] ? oom_killer_disable+0x280/0x280 [ 383.368636][T13365] mem_cgroup_out_of_memory+0x1d8/0x240 [ 383.374612][T13365] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 383.380243][T13365] ? do_raw_spin_unlock+0x57/0x270 [ 383.385358][T13365] ? _raw_spin_unlock+0x2d/0x50 [ 383.390225][T13365] try_charge+0xf4b/0x1440 [ 383.394652][T13365] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 383.400193][T13365] ? percpu_ref_tryget_live+0x111/0x290 [ 383.405787][T13365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.412030][T13365] ? __kasan_check_read+0x11/0x20 [ 383.417060][T13365] ? get_mem_cgroup_from_mm+0x156/0x320 [ 383.422726][T13365] mem_cgroup_try_charge+0x136/0x590 [ 383.428016][T13365] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 383.433648][T13365] shmem_getpage_gfp+0x88e/0x2680 [ 383.438687][T13365] ? shmem_unuse_inode+0x1010/0x1010 [ 383.443975][T13365] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 383.449688][T13365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.455948][T13365] shmem_fault+0x22a/0x7b0 [ 383.460369][T13365] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 383.466358][T13365] ? lock_downgrade+0x920/0x920 [ 383.471216][T13365] __do_fault+0x111/0x540 [ 383.475541][T13365] ? do_raw_spin_unlock+0x57/0x270 [ 383.480650][T13365] __handle_mm_fault+0x2cb8/0x3f20 [ 383.485907][T13365] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 383.491463][T13365] ? __kasan_check_read+0x11/0x20 [ 383.496491][T13365] handle_mm_fault+0x1b5/0x6c0 [ 383.501274][T13365] __get_user_pages+0x7d4/0x1b30 [ 383.506293][T13365] ? mark_held_locks+0xf0/0xf0 [ 383.511266][T13365] ? follow_page_mask+0x1cf0/0x1cf0 [ 383.516579][T13365] ? __mm_populate+0x270/0x380 [ 383.521356][T13365] ? memset+0x32/0x40 [ 383.525351][T13365] populate_vma_page_range+0x20d/0x2a0 [ 383.530830][T13365] __mm_populate+0x204/0x380 [ 383.535429][T13365] ? populate_vma_page_range+0x2a0/0x2a0 [ 383.541068][T13365] ? __kasan_check_write+0x14/0x20 [ 383.546179][T13365] ? up_write+0x155/0x490 [ 383.550510][T13365] vm_mmap_pgoff+0x213/0x230 [ 383.555107][T13365] ? randomize_stack_top+0x110/0x110 [ 383.560388][T13365] ? __kasan_check_read+0x11/0x20 [ 383.565421][T13365] ? _copy_to_user+0x118/0x160 [ 383.570207][T13365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 383.576501][T13365] ksys_mmap_pgoff+0xf7/0x630 [ 383.581188][T13365] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 383.586824][T13365] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 383.592286][T13365] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 383.597746][T13365] ? do_syscall_64+0x26/0x760 [ 383.602422][T13365] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 383.608494][T13365] __x64_sys_mmap+0xe9/0x1b0 [ 383.613104][T13365] do_syscall_64+0xfa/0x760 [ 383.617646][T13365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 383.623532][T13365] RIP: 0033:0x4598e9 [ 383.627426][T13365] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.647360][T13365] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 383.655792][T13365] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 383.663763][T13365] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 383.671888][T13365] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 383.679860][T13365] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 383.687914][T13365] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:49:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3`', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:11 executing program 5: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty=[0x0, 0xd00], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:49:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r3, 0x1ff}}, 0x18) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self\x00', 0x100000, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000300)={0x6c, 0x83, 0x2, 0x0, 0x0, [{r1, 0x0, 0x2}, {r0, 0x0, 0x7}]}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000280)={r6, 0x5}) ioctl(r5, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r4, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x80ffff}}]}) [ 383.712544][T13365] memory: usage 295532kB, limit 307200kB, failcnt 425 11:49:11 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x3, 0x18896, r1, 0x800000) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r6}) r8 = dup(r7) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000100)=0x6, 0x4) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r8, &(0x7f0000000000)='\x00', &(0x7f0000000240), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 383.756455][T13365] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 383.798650][T13365] Memory cgroup stats for /syz0: [ 383.798771][T13365] anon 7618560 [ 383.798771][T13365] file 285347840 [ 383.798771][T13365] kernel_stack 917504 [ 383.798771][T13365] slab 3973120 [ 383.798771][T13365] sock 0 [ 383.798771][T13365] shmem 285347840 [ 383.798771][T13365] file_mapped 250195968 [ 383.798771][T13365] file_dirty 0 [ 383.798771][T13365] file_writeback 0 [ 383.798771][T13365] anon_thp 4194304 [ 383.798771][T13365] inactive_anon 250060800 [ 383.798771][T13365] active_anon 42934272 [ 383.798771][T13365] inactive_file 135168 [ 383.798771][T13365] active_file 0 [ 383.798771][T13365] unevictable 0 [ 383.798771][T13365] slab_reclaimable 1622016 [ 383.798771][T13365] slab_unreclaimable 2351104 [ 383.798771][T13365] pgfault 238062 [ 383.798771][T13365] pgmajfault 0 [ 383.798771][T13365] workingset_refault 0 [ 383.798771][T13365] workingset_activate 0 [ 383.798771][T13365] workingset_nodereclaim 0 [ 383.798771][T13365] pgrefill 66 [ 383.798771][T13365] pgscan 66 [ 383.798771][T13365] pgsteal 33 11:49:11 executing program 5: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:49:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3h', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 384.277281][T13365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13206,uid=0 [ 384.384418][T13365] Memory cgroup out of memory: Killed process 13206 (syz-executor.0) total-vm:72708kB, anon-rss:148kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:159744kB oom_score_adj:1000 11:49:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3l', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xfab27360dd7e920b}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:12 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000000000004c2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x47) 11:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x1000000}}]}) 11:49:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) r1 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000002c0)={0x18}, 0x18) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:49:12 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffff41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{0x4, 0x5000, 0x10, 0x80000000, 0x7dd750fb, 0x8, 0x8, 0xffffffffffffff8c, 0x7, 0xffffffffffffffff, 0x3, 0x6}, {0x2000, 0x100000, 0xf, 0x2, 0x7, 0x80000000, 0x9, 0xfffffffffffffff8, 0x0, 0x1c0}, {0x100000, 0x1, 0xd, 0x9, 0x8, 0x8, 0xd4, 0x2, 0x91, 0x38, 0x36d7c28a, 0x100}, {0x2, 0x3000, 0x4, 0x0, 0x101, 0xc548, 0xff, 0x80000000, 0x9f, 0x6, 0x0, 0x100}, {0xd000, 0xd000, 0x4, 0x59, 0x1, 0xffffffffffffff01, 0x3ff, 0x0, 0x0, 0x9, 0x225, 0x7ff}, {0xedb854d5ddae1ae9, 0x100000, 0x4, 0xeb, 0x1, 0x7, 0x5, 0x2, 0xb57, 0x3, 0x5, 0x7fffffff}, {0x2, 0x2000, 0xc, 0xfffffffffffffffd, 0x800, 0x7f, 0x0, 0x101, 0x0, 0x0, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x9ea, 0xfffffffffffffa28, 0x8cdb, 0xc6cd, 0x7, 0xe4, 0x3, 0xc255}, {0x0, 0x4000}, {0x4, 0xe1ce22d7196a07a8}, 0x8, 0x0, 0x1000, 0x24010, 0x2, 0x4500, 0x2000, [0x0, 0x800, 0x3, 0x7]}) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) getpeername$unix(r4, &(0x7f0000000200)=@abs, &(0x7f0000000580)=0x6e) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) r5 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d4ebd625eec01000000", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000280)={r11, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000640)={r11, 0x48, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x400, @local, 0x2}, @in6={0xa, 0x4e21, 0x414, @loopback, 0x9}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000680)=0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x0, "d530ad047f28079057f83b20de626f19b70ebcebd97e6e82c29742cf3b8fb38700bb15515313211c466af5ab9d4f217a73790c52cb393d214e04406f03b793156d4be73d61b225aaa44f92d171b756a3"}, 0xd8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180), 0x5f6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r12, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r12}, &(0x7f0000000100)=0x8) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:12 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r0, &(0x7f00000003c0)=""/4096, 0x1000) 11:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x2000000}}]}) 11:49:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3t', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x3000000}}]}) 11:49:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xed, 0xc, 0x1, "4ee7d4ca587284496af6faff05177cc68dd4f6ef2ffb477e4667dd13b64965a5", 0x38415261}) 11:49:14 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xdc D\xffg\x8es\xd3\x90\xf0\x02', 0x4) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 386.778116][T13525] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x6000000}}]}) [ 386.896041][T13525] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x10', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20004001, 0x0, 0x0) 11:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x7000000}}]}) 11:49:14 executing program 0: clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 11:49:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000210047000001000000f8ffff03000000100018003a242f696d655f7479706500"], 0x24}}, 0x0) 11:49:16 executing program 0: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) add_key$user(&(0x7f0000000140)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x0) 11:49:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11ce0000000000000000") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x40000000}}]}) 11:49:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3@', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:16 executing program 2: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/120) r1 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r1, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) wait4(r5, &(0x7f0000000100), 0x1000009, &(0x7f0000000180)) 11:49:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0xff0f0000}}]}) 11:49:16 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) seccomp(0x1, 0x3, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) 11:49:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 389.432696][T13587] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 389.515104][T13587] CPU: 0 PID: 13587 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 389.524238][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.534312][T13587] Call Trace: [ 389.537857][T13587] dump_stack+0x172/0x1f0 [ 389.542284][T13587] dump_header+0x177/0x1152 [ 389.546791][T13587] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 389.552584][T13587] ? ___ratelimit+0x2c8/0x595 [ 389.557257][T13587] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 389.563055][T13587] ? lockdep_hardirqs_on+0x418/0x5d0 [ 389.568322][T13587] ? trace_hardirqs_on+0x67/0x240 [ 389.573517][T13587] ? pagefault_out_of_memory+0x11c/0x11c [ 389.579178][T13587] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 389.584993][T13587] ? ___ratelimit+0x60/0x595 [ 389.589567][T13587] ? do_raw_spin_unlock+0x57/0x270 [ 389.594667][T13587] oom_kill_process.cold+0x10/0x15 [ 389.599764][T13587] out_of_memory+0x334/0x1340 [ 389.604441][T13587] ? lock_downgrade+0x920/0x920 [ 389.609278][T13587] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 389.615329][T13587] ? oom_killer_disable+0x280/0x280 [ 389.620516][T13587] mem_cgroup_out_of_memory+0x1d8/0x240 [ 389.626043][T13587] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 389.631663][T13587] ? do_raw_spin_unlock+0x57/0x270 [ 389.636768][T13587] ? _raw_spin_unlock+0x2d/0x50 [ 389.641616][T13587] try_charge+0xf4b/0x1440 [ 389.646024][T13587] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 389.651553][T13587] ? percpu_ref_tryget_live+0x111/0x290 [ 389.657084][T13587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.663310][T13587] ? __kasan_check_read+0x11/0x20 [ 389.668542][T13587] ? get_mem_cgroup_from_mm+0x156/0x320 [ 389.674074][T13587] mem_cgroup_try_charge+0x136/0x590 [ 389.679343][T13587] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 389.684988][T13587] shmem_getpage_gfp+0x88e/0x2680 [ 389.690019][T13587] ? shmem_unuse_inode+0x1010/0x1010 [ 389.695300][T13587] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 389.701025][T13587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.707256][T13587] shmem_fault+0x22a/0x7b0 [ 389.711860][T13587] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 389.717852][T13587] ? lock_downgrade+0x920/0x920 [ 389.722735][T13587] __do_fault+0x111/0x540 [ 389.727059][T13587] ? do_raw_spin_unlock+0x57/0x270 [ 389.732251][T13587] __handle_mm_fault+0x2cb8/0x3f20 [ 389.737352][T13587] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 389.742891][T13587] ? __kasan_check_read+0x11/0x20 [ 389.748126][T13587] handle_mm_fault+0x1b5/0x6c0 [ 389.752881][T13587] __get_user_pages+0x7d4/0x1b30 [ 389.757806][T13587] ? mark_held_locks+0xf0/0xf0 [ 389.762564][T13587] ? follow_page_mask+0x1cf0/0x1cf0 [ 389.767754][T13587] ? __mm_populate+0x270/0x380 [ 389.772510][T13587] ? memset+0x32/0x40 [ 389.776483][T13587] populate_vma_page_range+0x20d/0x2a0 [ 389.781930][T13587] __mm_populate+0x204/0x380 [ 389.786505][T13587] ? populate_vma_page_range+0x2a0/0x2a0 [ 389.792123][T13587] ? __kasan_check_write+0x14/0x20 [ 389.797222][T13587] ? up_write+0x155/0x490 [ 389.801538][T13587] vm_mmap_pgoff+0x213/0x230 [ 389.806127][T13587] ? randomize_stack_top+0x110/0x110 [ 389.811813][T13587] ? __kasan_check_read+0x11/0x20 [ 389.816919][T13587] ? _copy_to_user+0x118/0x160 [ 389.821677][T13587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.828087][T13587] ksys_mmap_pgoff+0xf7/0x630 [ 389.832756][T13587] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 389.838373][T13587] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 389.843812][T13587] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 389.849255][T13587] ? do_syscall_64+0x26/0x760 [ 389.853914][T13587] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.860023][T13587] __x64_sys_mmap+0xe9/0x1b0 [ 389.864624][T13587] do_syscall_64+0xfa/0x760 [ 389.869113][T13587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.874991][T13587] RIP: 0033:0x4598e9 [ 389.878879][T13587] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.898463][T13587] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 389.906857][T13587] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 11:49:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000040)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 389.914810][T13587] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 389.922762][T13587] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 389.930720][T13587] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 389.938798][T13587] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:49:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0xffff8000}}]}) [ 390.142743][T13609] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 390.261857][T13609] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x396ba8d3, 0x6, 0x2}) [ 390.520947][T13587] memory: usage 307200kB, limit 307200kB, failcnt 243 [ 390.584605][T13621] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 390.619982][T13587] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 390.681155][T13587] Memory cgroup stats for /syz2: [ 390.681280][T13587] anon 5644288 [ 390.681280][T13587] file 296366080 [ 390.681280][T13587] kernel_stack 917504 [ 390.681280][T13587] slab 7024640 [ 390.681280][T13587] sock 0 [ 390.681280][T13587] shmem 296361984 [ 390.681280][T13587] file_mapped 261144576 [ 390.681280][T13587] file_dirty 0 [ 390.681280][T13587] file_writeback 0 [ 390.681280][T13587] anon_thp 2097152 [ 390.681280][T13587] inactive_anon 261144576 [ 390.681280][T13587] active_anon 40837120 [ 390.681280][T13587] inactive_file 0 [ 390.681280][T13587] active_file 0 [ 390.681280][T13587] unevictable 0 [ 390.681280][T13587] slab_reclaimable 1757184 [ 390.681280][T13587] slab_unreclaimable 5267456 [ 390.681280][T13587] pgfault 238458 [ 390.681280][T13587] pgmajfault 0 [ 390.681280][T13587] workingset_refault 0 [ 390.681280][T13587] workingset_activate 0 [ 390.681280][T13587] workingset_nodereclaim 0 [ 390.681280][T13587] pgrefill 33 [ 390.681280][T13587] pgscan 33 [ 390.681280][T13587] pgsteal 0 [ 390.776929][T13587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13376,uid=0 [ 390.793108][T13587] Memory cgroup out of memory: Killed process 13376 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35804kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 390.818536][ T1065] oom_reaper: reaped process 13376 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:11480kB [ 390.834677][T13583] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 390.879050][T13621] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 390.911784][T13583] CPU: 1 PID: 13583 Comm: syz-executor.0 Not tainted 5.3.0-rc6-next-20190830 #75 [ 390.921224][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.931296][T13583] Call Trace: [ 390.934689][T13583] dump_stack+0x172/0x1f0 [ 390.939162][T13583] dump_header+0x177/0x1152 [ 390.943703][T13583] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 390.949515][T13583] ? ___ratelimit+0x2c8/0x595 [ 390.954202][T13583] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 390.960022][T13583] ? lockdep_hardirqs_on+0x418/0x5d0 [ 390.965541][T13583] ? trace_hardirqs_on+0x67/0x240 [ 390.970928][T13583] ? pagefault_out_of_memory+0x11c/0x11c [ 390.976747][T13583] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 390.982626][T13583] ? ___ratelimit+0x60/0x595 [ 390.987201][T13583] ? do_raw_spin_unlock+0x57/0x270 [ 390.992520][T13583] oom_kill_process.cold+0x10/0x15 [ 390.997679][T13583] out_of_memory+0x334/0x1340 [ 391.002360][T13583] ? lock_downgrade+0x920/0x920 [ 391.007210][T13583] ? oom_killer_disable+0x280/0x280 [ 391.012834][T13583] mem_cgroup_out_of_memory+0x1d8/0x240 [ 391.018519][T13583] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 391.024153][T13583] ? do_raw_spin_unlock+0x57/0x270 [ 391.029368][T13583] ? _raw_spin_unlock+0x2d/0x50 [ 391.034232][T13583] try_charge+0xf4b/0x1440 [ 391.038748][T13583] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 391.044306][T13583] ? percpu_ref_tryget_live+0x111/0x290 [ 391.050089][T13583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.056374][T13583] ? __kasan_check_read+0x11/0x20 [ 391.061491][T13583] ? get_mem_cgroup_from_mm+0x156/0x320 [ 391.067069][T13583] mem_cgroup_try_charge+0x136/0x590 [ 391.072365][T13583] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 391.078093][T13583] shmem_getpage_gfp+0x88e/0x2680 [ 391.083138][T13583] ? shmem_unuse_inode+0x1010/0x1010 [ 391.088418][T13583] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 391.094126][T13583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.100383][T13583] shmem_fault+0x22a/0x7b0 [ 391.104892][T13583] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 391.110873][T13583] ? lock_downgrade+0x920/0x920 [ 391.115733][T13583] __do_fault+0x111/0x540 [ 391.120060][T13583] ? do_raw_spin_unlock+0x57/0x270 [ 391.125178][T13583] __handle_mm_fault+0x2cb8/0x3f20 [ 391.130298][T13583] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 391.136729][T13583] ? __kasan_check_read+0x11/0x20 [ 391.141747][T13583] handle_mm_fault+0x1b5/0x6c0 [ 391.146605][T13583] __get_user_pages+0x7d4/0x1b30 [ 391.151572][T13583] ? mark_held_locks+0xf0/0xf0 [ 391.156338][T13583] ? follow_page_mask+0x1cf0/0x1cf0 [ 391.161861][T13583] ? __mm_populate+0x270/0x380 [ 391.166702][T13583] ? memset+0x32/0x40 [ 391.170685][T13583] populate_vma_page_range+0x20d/0x2a0 [ 391.176156][T13583] __mm_populate+0x204/0x380 [ 391.180759][T13583] ? populate_vma_page_range+0x2a0/0x2a0 [ 391.186392][T13583] ? __kasan_check_write+0x14/0x20 [ 391.191491][T13583] ? up_write+0x155/0x490 [ 391.195810][T13583] vm_mmap_pgoff+0x213/0x230 [ 391.200469][T13583] ? randomize_stack_top+0x110/0x110 [ 391.205848][T13583] ? __kasan_check_read+0x11/0x20 [ 391.210897][T13583] ? _copy_to_user+0x118/0x160 [ 391.215666][T13583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.221922][T13583] ksys_mmap_pgoff+0xf7/0x630 [ 391.226609][T13583] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 391.232247][T13583] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 391.237710][T13583] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 391.243172][T13583] ? do_syscall_64+0x26/0x760 [ 391.247840][T13583] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.253917][T13583] __x64_sys_mmap+0xe9/0x1b0 [ 391.258587][T13583] do_syscall_64+0xfa/0x760 [ 391.263110][T13583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.269099][T13583] RIP: 0033:0x4598e9 [ 391.273010][T13583] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 391.292628][T13583] RSP: 002b:00007fbfd044fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 391.301049][T13583] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 391.309018][T13583] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 391.316981][T13583] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 391.324952][T13583] R10: 0000000000008031 R11: 0000000000000246 R12: 00007fbfd04506d4 [ 391.332920][T13583] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 391.342029][T13583] memory: usage 307176kB, limit 307200kB, failcnt 438 [ 391.348976][T13583] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 391.355921][T13583] Memory cgroup stats for /syz0: [ 391.356027][T13583] anon 14905344 [ 391.356027][T13583] file 289947648 [ 391.356027][T13583] kernel_stack 917504 [ 391.356027][T13583] slab 4108288 [ 391.356027][T13583] sock 0 [ 391.356027][T13583] shmem 289947648 [ 391.356027][T13583] file_mapped 254656512 [ 391.356027][T13583] file_dirty 0 [ 391.356027][T13583] file_writeback 0 [ 391.356027][T13583] anon_thp 10485760 [ 391.356027][T13583] inactive_anon 254656512 [ 391.356027][T13583] active_anon 50098176 [ 391.356027][T13583] inactive_file 135168 [ 391.356027][T13583] active_file 0 [ 391.356027][T13583] unevictable 0 [ 391.356027][T13583] slab_reclaimable 1757184 [ 391.356027][T13583] slab_unreclaimable 2351104 [ 391.356027][T13583] pgfault 242748 [ 391.356027][T13583] pgmajfault 0 [ 391.356027][T13583] workingset_refault 0 [ 391.356027][T13583] workingset_activate 0 [ 391.356027][T13583] workingset_nodereclaim 0 [ 391.356027][T13583] pgrefill 66 [ 391.356027][T13583] pgscan 66 [ 391.356027][T13583] pgsteal 33 [ 391.360984][T13583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13423,uid=0 [ 391.467267][T13583] Memory cgroup out of memory: Killed process 13423 (syz-executor.0) total-vm:72708kB, anon-rss:5052kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:167936kB oom_score_adj:1000 [ 391.485956][T13587] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 391.488521][ T1065] oom_reaper: reaped process 13423 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:11480kB [ 391.504164][T13587] CPU: 1 PID: 13587 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 391.519743][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.529804][T13587] Call Trace: [ 391.533124][T13587] dump_stack+0x172/0x1f0 [ 391.537475][T13587] dump_header+0x177/0x1152 [ 391.541995][T13587] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 391.547928][T13587] ? ___ratelimit+0x2c8/0x595 [ 391.552609][T13587] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 391.558532][T13587] ? lockdep_hardirqs_on+0x418/0x5d0 [ 391.563836][T13587] ? trace_hardirqs_on+0x67/0x240 [ 391.568881][T13587] ? pagefault_out_of_memory+0x11c/0x11c [ 391.574810][T13587] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 391.580627][T13587] ? ___ratelimit+0x60/0x595 [ 391.585750][T13587] ? do_raw_spin_unlock+0x57/0x270 [ 391.590878][T13587] oom_kill_process.cold+0x10/0x15 [ 391.595998][T13587] out_of_memory+0x334/0x1340 [ 391.600688][T13587] ? lock_downgrade+0x920/0x920 [ 391.605644][T13587] ? oom_killer_disable+0x280/0x280 [ 391.610865][T13587] mem_cgroup_out_of_memory+0x1d8/0x240 [ 391.616421][T13587] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 391.622113][T13587] ? do_raw_spin_unlock+0x57/0x270 [ 391.627232][T13587] ? _raw_spin_unlock+0x2d/0x50 [ 391.632094][T13587] try_charge+0xf4b/0x1440 [ 391.636668][T13587] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 391.642323][T13587] ? percpu_ref_tryget_live+0x111/0x290 [ 391.647967][T13587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.654217][T13587] ? __kasan_check_read+0x11/0x20 [ 391.659257][T13587] ? get_mem_cgroup_from_mm+0x156/0x320 [ 391.664808][T13587] mem_cgroup_try_charge+0x136/0x590 [ 391.670121][T13587] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 391.675758][T13587] shmem_getpage_gfp+0x88e/0x2680 [ 391.681040][T13587] ? shmem_unuse_inode+0x1010/0x1010 [ 391.686348][T13587] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 391.693300][T13587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.699732][T13587] shmem_fault+0x22a/0x7b0 [ 391.704169][T13587] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 391.710252][T13587] ? lock_downgrade+0x920/0x920 [ 391.715230][T13587] __do_fault+0x111/0x540 [ 391.719570][T13587] ? do_raw_spin_unlock+0x57/0x270 [ 391.724701][T13587] __handle_mm_fault+0x2cb8/0x3f20 [ 391.729976][T13587] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 391.735545][T13587] ? __kasan_check_read+0x11/0x20 [ 391.740672][T13587] handle_mm_fault+0x1b5/0x6c0 [ 391.745832][T13587] __get_user_pages+0x7d4/0x1b30 [ 391.751002][T13587] ? mark_held_locks+0xf0/0xf0 [ 391.755786][T13587] ? follow_page_mask+0x1cf0/0x1cf0 [ 391.761006][T13587] ? __mm_populate+0x270/0x380 [ 391.765781][T13587] ? memset+0x32/0x40 [ 391.769871][T13587] populate_vma_page_range+0x20d/0x2a0 [ 391.775616][T13587] __mm_populate+0x204/0x380 [ 391.780451][T13587] ? populate_vma_page_range+0x2a0/0x2a0 [ 391.786265][T13587] ? __kasan_check_write+0x14/0x20 [ 391.791466][T13587] ? up_write+0x155/0x490 [ 391.795805][T13587] vm_mmap_pgoff+0x213/0x230 [ 391.800406][T13587] ? randomize_stack_top+0x110/0x110 [ 391.805696][T13587] ? __kasan_check_read+0x11/0x20 [ 391.810809][T13587] ? _copy_to_user+0x118/0x160 [ 391.815704][T13587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.822032][T13587] ksys_mmap_pgoff+0xf7/0x630 [ 391.826735][T13587] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 391.832419][T13587] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 391.837897][T13587] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 391.843362][T13587] ? do_syscall_64+0x26/0x760 [ 391.848158][T13587] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.854241][T13587] __x64_sys_mmap+0xe9/0x1b0 [ 391.858839][T13587] do_syscall_64+0xfa/0x760 [ 391.863365][T13587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.869267][T13587] RIP: 0033:0x4598e9 [ 391.873164][T13587] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 391.892944][T13587] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 391.901357][T13587] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 391.909340][T13587] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 391.917396][T13587] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 391.925538][T13587] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 391.933719][T13587] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 391.943828][T13587] memory: usage 295524kB, limit 307200kB, failcnt 282 [ 391.950794][T13587] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 391.957890][T13587] Memory cgroup stats for /syz2: [ 391.957996][T13587] anon 5644288 [ 391.957996][T13587] file 284921856 [ 391.957996][T13587] kernel_stack 917504 [ 391.957996][T13587] slab 6889472 [ 391.957996][T13587] sock 0 [ 391.957996][T13587] shmem 285052928 [ 391.957996][T13587] file_mapped 249790464 [ 391.957996][T13587] file_dirty 0 [ 391.957996][T13587] file_writeback 0 [ 391.957996][T13587] anon_thp 2097152 [ 391.957996][T13587] inactive_anon 249790464 [ 391.957996][T13587] active_anon 40837120 [ 391.957996][T13587] inactive_file 0 [ 391.957996][T13587] active_file 0 [ 391.957996][T13587] unevictable 0 [ 391.957996][T13587] slab_reclaimable 1757184 [ 391.957996][T13587] slab_unreclaimable 5132288 [ 391.957996][T13587] pgfault 238524 [ 391.957996][T13587] pgmajfault 0 11:49:19 executing program 0: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000100)={[0x2000]}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x03\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 11:49:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x20000000000000}}]}) 11:49:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 11:49:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept4$inet(r3, &(0x7f0000000840)={0x2, 0x0, @remote}, &(0x7f0000000880)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000008c0)={{0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'lblcr\x00', 0x4, 0x6, 0x11}, {@remote, 0x4e20, 0x10000, 0x9db, 0x8, 0x1}}, 0x44) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0xffffffffffffffba, 0x0, 0x0, 0x31e2c79ced742c8) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) [ 391.957996][T13587] workingset_refault 0 [ 391.957996][T13587] workingset_activate 0 [ 391.957996][T13587] workingset_nodereclaim 0 [ 391.957996][T13587] pgrefill 33 [ 391.957996][T13587] pgscan 33 [ 391.957996][T13587] pgsteal 0 [ 392.063209][T13587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13280,uid=0 [ 392.083679][T13587] Memory cgroup out of memory: Killed process 13280 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35804kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 392.103956][ T1065] oom_reaper: reaped process 13280 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:11480kB [ 392.164983][T13651] dns_resolver: Unsupported content type (32) 11:49:19 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) r3 = semget$private(0x0, 0x0, 0x4) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000000c0)=""/88) 11:49:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:19 executing program 5: sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000005200)=""/4096) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") 11:49:19 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0xc000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x0) 11:49:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x80ffff00000000}}]}) [ 392.494775][T13661] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r1 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, r1}}) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0xee00, 0x0, 0x600) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 392.590163][T13661] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x100000000000000}}]}) 11:49:20 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="148100002e0033040000000000000000000096b265417c662f08fe9306000800000023d183cdbc5663b1ab631c9f1689c0"], 0x16f}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a000700", 0x26}], 0x1) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 392.919870][T13687] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 392.930908][T13683] gfs2: not a GFS2 filesystem 11:49:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 393.073145][T13681] cgroup: fork rejected by pids controller in /syz0 [ 393.091133][T13687] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x200000000000000}}]}) 11:49:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r1 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, r1}}) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0xee00, 0x0, 0x600) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:49:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r1 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, r1}}) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0xee00, 0x0, 0x600) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x300000000000000}}]}) 11:49:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000277000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3f, 0x29ed}) r2 = gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00000000c0)=""/44, 0xc4e7d0df8d530500, 0x3) r5 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r6 = dup(r5) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r2, 0x18) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) ioprio_get$uid(0x3, r7) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:21 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x41c000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r5, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 393.684792][T13823] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 393.840629][T13823] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x400000000000000}}]}) [ 393.886737][T13820] gfs2: not a GFS2 filesystem [ 393.951034][T13828] gfs2: not a GFS2 filesystem 11:49:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x04', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r1 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, r1}}) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0xee00, 0x0, 0x600) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x500000000000000}}]}) 11:49:21 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x40006011, r1, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000004c0)=""/4096) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x0, @remote}}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r2, r2) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) seccomp(0x1, 0x3, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3e1, 0x0, 0x0, 0x0) [ 394.397952][T13852] gfs2: not a GFS2 filesystem 11:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x600000000000000}}]}) 11:49:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3 ', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'md5sum'}, {0x20, 'keyringppp0$'}, {0x20, 'lo@%lokeyringppp1md5sum>em0GPLwlan1/{#}:systemtrustedem1\\!self/-vboxnet1lo[cpusetposix_acl_access*'}], 0xa, "65c91209fac390d844c2fbd6dff00a23b653ca41ae7829c037ffffbce4df55a0781867392792424876fa4857a0d6b3e6d10790f0dcceda"}, 0xb9) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x118}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:49:22 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uhid\x00', 0x0, 0x0) 11:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x700000000000000}}]}) 11:49:22 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xc9c, 0x524a9e37d9758f6a) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = gettid() ioprio_set$pid(0x2, r3, 0x30000000000) 11:49:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) tkill(r0, 0x3c) 11:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0x4000000000000000}}]}) 11:49:22 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000810006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 395.214446][T13911] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0xff0f000000000000}}]}) [ 395.315065][T13911] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4d47ee989f19a2ac, 0x4) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000080)) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:22 executing program 0: pipe2(&(0x7f0000000180), 0x800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000100)={[0xf000]}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x03\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 395.563090][T13936] dns_resolver: Unsupported content type (240) 11:49:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') sendfile(r1, r2, 0x0, 0x50000000000443) 11:49:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x10', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0xffffffff00000000}}]}) 11:49:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) 11:49:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup2(r2, r0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x647b23f2998fa2fd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x49aff8aec72e4b4, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x6, 0x519240) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xfd7b) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r6 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f00000002c0)={0x0, 0x10000, 0x2010}) 11:49:25 executing program 2: r0 = gettid() getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) getpgrp(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x2) 11:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000ab2d61914f4fa24cf2900200000002000000000000000000000000000000000000000000000000000000000000000000000000000000057aca4e9a66bb1af141a002b40553262b1f9bb5ea9690f4d0c882b2051238b60da3d50b25ec993e8cd21ec8c1d2c080b5aa45acde90a8ff077ad9e5ba8a8dd66fc0af06f6ebd084c49fb880f6bef3"]) 11:49:25 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r2, &(0x7f0000000740)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x80) recvmmsg(r2, &(0x7f0000001900), 0x4000000000000ad, 0x40010000, 0x0) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000fcff23000000001c5c000008", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000347589669cc8654fb9e05a942e451fe3fd54b673382a48058c4c2cda1ed97116ef40f98b847839e7684590c3aecd8c84774b30c691"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="03000000fdffffff0023000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000008887ccb2644b44968e6dc1c6c911ad67e61588f48a6eaf8218b62cc06a2d30d882c4d96e7243f38a15d71ac895a26836ffce8853f5d1c3695450a1b615ddcac8"], 0x80}}, 0x0) 11:49:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 398.182235][T13986] bridge_slave_1: FDB only supports static addresses 11:49:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet(r1, &(0x7f0000000040)="dbf46f51e7aa04cd225760c5998d018600eb21df92e633ed5538bdac53e96a0b21", 0x188, 0x30004060, 0x0, 0xdf0c1a4ddf92f0bf) 11:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(0x0, r2, 0x35, &(0x7f0000000040)={0x2, 0x1, 0x674}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0xe3a4) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @irqchip={0xffffffffffffff1a, 0x2aa5}}]}) 11:49:25 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 398.421132][T14000] bridge_slave_1: FDB only supports static addresses [ 398.468926][T14002] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:26 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r2, &(0x7f0000000740)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x80) recvmmsg(r2, &(0x7f0000001900), 0x4000000000000ad, 0x40010000, 0x0) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000fcff23000000001c5c000008", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000347589669cc8654fb9e05a942e451fe3fd54b673382a48058c4c2cda1ed97116ef40f98b847839e7684590c3aecd8c84774b30c691"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="03000000fdffffff0023000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000008887ccb2644b44968e6dc1c6c911ad67e61588f48a6eaf8218b62cc06a2d30d882c4d96e7243f38a15d71ac895a26836ffce8853f5d1c3695450a1b615ddcac8"], 0x80}}, 0x0) [ 398.856620][T14022] bridge_slave_1: FDB only supports static addresses [ 398.863552][T14018] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 398.988598][T14018] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000300)={0x7b, 0x0, [0x7f, 0xffffffffffffff01, 0x40, 0x10]}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x2}}, 0x20) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r7, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000080)={&(0x7f0000001480)={0xf8, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff6ecf}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2041004}, 0x20000800) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x620531c5}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffe01}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd38}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11:49:26 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:26 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ppoll(&(0x7f00000000c0)=[{r1, 0x4}, {r3, 0xa0}], 0x2, &(0x7f0000000100), &(0x7f0000000180)={0x7}, 0x8) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r4 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r5 = dup(r4) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r5, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 399.102174][T14034] bridge_slave_1: FDB only supports static addresses 11:49:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:26 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0x0, 0x1100086) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 11:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5, 0x80000000}, 0x8) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 399.305347][T14038] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 399.306034][T14050] bridge_slave_1: FDB only supports static addresses [ 399.318498][T14045] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 399.401175][T14038] CPU: 1 PID: 14038 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 399.410319][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.420387][T14038] Call Trace: [ 399.423698][T14038] dump_stack+0x172/0x1f0 [ 399.428043][T14038] dump_header+0x177/0x1152 [ 399.428060][T14038] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 399.428071][T14038] ? ___ratelimit+0x2c8/0x595 [ 399.428083][T14038] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 11:49:27 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 399.428102][T14038] ? lockdep_hardirqs_on+0x418/0x5d0 [ 399.448925][T14038] ? trace_hardirqs_on+0x67/0x240 [ 399.448945][T14038] ? pagefault_out_of_memory+0x11c/0x11c [ 399.448962][T14038] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 399.448979][T14038] ? ___ratelimit+0x60/0x595 [ 399.475258][T14038] ? do_raw_spin_unlock+0x57/0x270 [ 399.480385][T14038] oom_kill_process.cold+0x10/0x15 [ 399.485599][T14038] out_of_memory+0x334/0x1340 [ 399.485616][T14038] ? lock_downgrade+0x920/0x920 [ 399.485637][T14038] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 399.485652][T14038] ? oom_killer_disable+0x280/0x280 [ 399.485677][T14038] mem_cgroup_out_of_memory+0x1d8/0x240 [ 399.485690][T14038] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 399.485708][T14038] ? do_raw_spin_unlock+0x57/0x270 [ 399.522719][T14038] ? _raw_spin_unlock+0x2d/0x50 [ 399.527593][T14038] try_charge+0xf4b/0x1440 [ 399.532035][T14038] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 399.537590][T14038] ? percpu_ref_tryget_live+0x111/0x290 [ 399.543153][T14038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.543170][T14038] ? __kasan_check_read+0x11/0x20 [ 399.543190][T14038] ? get_mem_cgroup_from_mm+0x156/0x320 [ 399.559973][T14038] mem_cgroup_try_charge+0x136/0x590 [ 399.565271][T14038] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 399.571004][T14038] shmem_getpage_gfp+0x88e/0x2680 [ 399.576052][T14038] ? shmem_unuse_inode+0x1010/0x1010 [ 399.581566][T14038] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 399.587294][T14038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.593543][T14038] shmem_fault+0x22a/0x7b0 [ 399.597975][T14038] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 399.605274][T14038] ? lock_downgrade+0x920/0x920 [ 399.610142][T14038] __do_fault+0x111/0x540 [ 399.614474][T14038] ? do_raw_spin_unlock+0x57/0x270 [ 399.615038][T14062] bridge_slave_1: FDB only supports static addresses [ 399.620024][T14038] __handle_mm_fault+0x2cb8/0x3f20 [ 399.620047][T14038] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 399.620078][T14038] ? __kasan_check_read+0x11/0x20 [ 399.620104][T14038] handle_mm_fault+0x1b5/0x6c0 [ 399.647262][T14038] __get_user_pages+0x7d4/0x1b30 11:49:27 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 399.652333][T14038] ? mark_held_locks+0xf0/0xf0 [ 399.657117][T14038] ? follow_page_mask+0x1cf0/0x1cf0 [ 399.662323][T14038] ? __mm_populate+0x270/0x380 [ 399.667106][T14038] ? memset+0x32/0x40 [ 399.671219][T14038] populate_vma_page_range+0x20d/0x2a0 [ 399.676693][T14038] __mm_populate+0x204/0x380 [ 399.681292][T14038] ? populate_vma_page_range+0x2a0/0x2a0 [ 399.686931][T14038] ? __kasan_check_write+0x14/0x20 [ 399.692039][T14038] ? up_write+0x155/0x490 [ 399.696369][T14038] vm_mmap_pgoff+0x213/0x230 [ 399.696391][T14038] ? randomize_stack_top+0x110/0x110 [ 399.696406][T14038] ? __kasan_check_read+0x11/0x20 [ 399.696423][T14038] ? _copy_to_user+0x118/0x160 [ 399.716159][T14038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.722530][T14038] ksys_mmap_pgoff+0xf7/0x630 [ 399.727226][T14038] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 399.732899][T14038] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 399.738373][T14038] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 399.743344][T14066] bridge_slave_1: FDB only supports static addresses 11:49:27 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 399.743835][T14038] ? do_syscall_64+0x26/0x760 [ 399.743852][T14038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.743872][T14038] __x64_sys_mmap+0xe9/0x1b0 [ 399.765842][T14038] do_syscall_64+0xfa/0x760 [ 399.770445][T14038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.776340][T14038] RIP: 0033:0x4598e9 [ 399.780235][T14038] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.800155][T14038] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 399.808584][T14038] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 399.816574][T14038] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 399.823506][T14047] Enabling of bearer rejected, failed to enable media [ 399.824555][T14038] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 399.824565][T14038] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 11:49:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpgrp(0x0) [ 399.824572][T14038] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 399.833597][T14038] memory: usage 307200kB, limit 307200kB, failcnt 327 [ 399.864161][T14038] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 399.871384][T14038] Memory cgroup stats for /syz2: [ 399.871515][T14038] anon 5337088 [ 399.871515][T14038] file 294830080 [ 399.871515][T14038] kernel_stack 917504 [ 399.871515][T14038] slab 8617984 [ 399.871515][T14038] sock 0 [ 399.871515][T14038] shmem 294830080 [ 399.871515][T14038] file_mapped 259657728 [ 399.871515][T14038] file_dirty 0 [ 399.871515][T14038] file_writeback 0 [ 399.871515][T14038] anon_thp 2097152 [ 399.871515][T14038] inactive_anon 259657728 [ 399.871515][T14038] active_anon 40591360 [ 399.871515][T14038] inactive_file 0 [ 399.871515][T14038] active_file 0 [ 399.871515][T14038] unevictable 0 [ 399.871515][T14038] slab_reclaimable 1892352 [ 399.871515][T14038] slab_unreclaimable 6725632 [ 399.871515][T14038] pgfault 250965 [ 399.871515][T14038] pgmajfault 0 [ 399.871515][T14038] workingset_refault 0 [ 399.871515][T14038] workingset_activate 0 [ 399.871515][T14038] workingset_nodereclaim 0 [ 399.871515][T14038] pgrefill 33 [ 399.871515][T14038] pgscan 33 [ 399.871515][T14038] pgsteal 0 [ 399.968338][T14038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9230,uid=0 [ 399.984328][T14038] Memory cgroup out of memory: Killed process 9230 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35800kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 400.025175][ T1065] oom_reaper: reaped process 9230 (syz-executor.2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:11480kB [ 400.041506][T14047] Enabling of bearer rejected, failed to enable media [ 400.063544][T14038] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 400.082760][T14045] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 400.092401][T14075] bridge_slave_1: FDB only supports static addresses [ 400.165067][T14038] CPU: 0 PID: 14038 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 400.174202][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.184263][T14038] Call Trace: [ 400.187755][T14038] dump_stack+0x172/0x1f0 [ 400.192095][T14038] dump_header+0x177/0x1152 [ 400.196613][T14038] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 400.202421][T14038] ? ___ratelimit+0x2c8/0x595 [ 400.207094][T14038] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 400.207114][T14038] ? lockdep_hardirqs_on+0x418/0x5d0 [ 400.218180][T14038] ? trace_hardirqs_on+0x67/0x240 [ 400.223202][T14038] ? pagefault_out_of_memory+0x11c/0x11c [ 400.223221][T14038] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 400.223235][T14038] ? ___ratelimit+0x60/0x595 [ 400.223252][T14038] ? do_raw_spin_unlock+0x57/0x270 [ 400.244448][T14038] oom_kill_process.cold+0x10/0x15 [ 400.249560][T14038] out_of_memory+0x334/0x1340 [ 400.254262][T14038] ? lock_downgrade+0x920/0x920 [ 400.259101][T14038] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 400.264910][T14038] ? oom_killer_disable+0x280/0x280 [ 400.270099][T14038] mem_cgroup_out_of_memory+0x1d8/0x240 [ 400.275626][T14038] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 400.281680][T14038] ? do_raw_spin_unlock+0x57/0x270 [ 400.286880][T14038] ? _raw_spin_unlock+0x2d/0x50 [ 400.291827][T14038] try_charge+0xf4b/0x1440 [ 400.296243][T14038] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 400.301859][T14038] ? percpu_ref_tryget_live+0x111/0x290 [ 400.307391][T14038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.313614][T14038] ? __kasan_check_read+0x11/0x20 [ 400.318656][T14038] ? get_mem_cgroup_from_mm+0x156/0x320 [ 400.324221][T14038] mem_cgroup_try_charge+0x136/0x590 [ 400.329522][T14038] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 400.335147][T14038] shmem_getpage_gfp+0x88e/0x2680 [ 400.340175][T14038] ? shmem_unuse_inode+0x1010/0x1010 [ 400.345458][T14038] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 400.351160][T14038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.357386][T14038] shmem_fault+0x22a/0x7b0 [ 400.361793][T14038] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 400.367762][T14038] ? lock_downgrade+0x920/0x920 [ 400.372728][T14038] __do_fault+0x111/0x540 [ 400.377054][T14038] ? do_raw_spin_unlock+0x57/0x270 [ 400.382191][T14038] __handle_mm_fault+0x2cb8/0x3f20 [ 400.387294][T14038] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 400.392834][T14038] ? __kasan_check_read+0x11/0x20 [ 400.397846][T14038] handle_mm_fault+0x1b5/0x6c0 [ 400.402614][T14038] __get_user_pages+0x7d4/0x1b30 [ 400.407538][T14038] ? mark_held_locks+0xf0/0xf0 [ 400.412294][T14038] ? follow_page_mask+0x1cf0/0x1cf0 [ 400.417502][T14038] ? __mm_populate+0x270/0x380 [ 400.422255][T14038] ? memset+0x32/0x40 [ 400.426237][T14038] populate_vma_page_range+0x20d/0x2a0 [ 400.431681][T14038] __mm_populate+0x204/0x380 [ 400.436271][T14038] ? populate_vma_page_range+0x2a0/0x2a0 [ 400.441889][T14038] ? __kasan_check_write+0x14/0x20 [ 400.447247][T14038] ? up_write+0x155/0x490 [ 400.451562][T14038] vm_mmap_pgoff+0x213/0x230 [ 400.456141][T14038] ? randomize_stack_top+0x110/0x110 [ 400.461405][T14038] ? __kasan_check_read+0x11/0x20 [ 400.466409][T14038] ? _copy_to_user+0x118/0x160 [ 400.471165][T14038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 400.477408][T14038] ksys_mmap_pgoff+0xf7/0x630 [ 400.482070][T14038] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 400.487687][T14038] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.493211][T14038] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 400.498656][T14038] ? do_syscall_64+0x26/0x760 [ 400.503317][T14038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.509392][T14038] __x64_sys_mmap+0xe9/0x1b0 [ 400.514083][T14038] do_syscall_64+0xfa/0x760 [ 400.518589][T14038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.524478][T14038] RIP: 0033:0x4598e9 [ 400.528364][T14038] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.548140][T14038] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 400.556547][T14038] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 11:49:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000080)={0x5, 0x20, 0xff, 0xb1}) 11:49:28 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 400.564515][T14038] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 400.572488][T14038] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 400.580458][T14038] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 400.588417][T14038] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:49:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 400.707017][T14083] bridge_slave_1: FDB only supports static addresses [ 400.773868][T14038] memory: usage 295528kB, limit 307200kB, failcnt 371 [ 400.797730][T14038] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.826446][T14038] Memory cgroup stats for /syz2: [ 400.826572][T14038] anon 5337088 [ 400.826572][T14038] file 283394048 [ 400.826572][T14038] kernel_stack 917504 [ 400.826572][T14038] slab 8617984 [ 400.826572][T14038] sock 0 [ 400.826572][T14038] shmem 283394048 [ 400.826572][T14038] file_mapped 248168448 [ 400.826572][T14038] file_dirty 0 [ 400.826572][T14038] file_writeback 0 [ 400.826572][T14038] anon_thp 2097152 [ 400.826572][T14038] inactive_anon 248168448 [ 400.826572][T14038] active_anon 40726528 [ 400.826572][T14038] inactive_file 0 [ 400.826572][T14038] active_file 0 [ 400.826572][T14038] unevictable 0 [ 400.826572][T14038] slab_reclaimable 1892352 [ 400.826572][T14038] slab_unreclaimable 6725632 [ 400.826572][T14038] pgfault 250998 [ 400.826572][T14038] pgmajfault 0 [ 400.826572][T14038] workingset_refault 0 [ 400.826572][T14038] workingset_activate 0 [ 400.826572][T14038] workingset_nodereclaim 0 [ 400.826572][T14038] pgrefill 33 [ 400.826572][T14038] pgscan 33 [ 400.826572][T14038] pgsteal 0 [ 400.922223][T14038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14021,uid=0 [ 400.938699][T14038] Memory cgroup out of memory: Killed process 14021 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 401.035212][T14089] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 401.121522][T14089] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESDEC=r9, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRESDEC=0x0], @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r3]]) 11:49:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 11:49:29 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x04', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:29 executing program 2: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) r1 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r4 = dup(0xffffffffffffffff) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) bind$alg(r6, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) tkill(r1, 0x400000000000022) rt_sigsuspend(&(0x7f0000000040), 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x6) [ 401.982068][T14109] bridge_slave_1: FDB only supports static addresses 11:49:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:49:29 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = accept4(r3, 0x0, 0x0, 0xe0e06f1084c5ad45) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xf7, 0x0, 0x2, 0xa789, 0xffffffffffff66e3, 0xb4, 0x100, 0x2, r8}, 0x20) sendto$inet(r4, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 402.290063][T14135] bridge_slave_1: FDB only supports static addresses 11:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, r0) 11:49:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2000) [ 402.510856][T14142] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 402.651525][T14142] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) r1 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000002c0)={0x18}, 0x18) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 11:49:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/Dev/kvm\x00', 0x3779c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:30 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x3, 0x7, 0xffffffffffffff51, 0x8, 0x3ff, 0x0, 0xfff, 0xffff, 0x10000}) 11:49:30 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x8e', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:30 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0xa40, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000140)=""/180, &(0x7f0000000200)=0xb4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000380)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000340)={0x9a0000, 0x9d, 0xffffffffffff11df, [], &(0x7f0000000300)={0xb874df316bf3e962, 0x1, [], @string=&(0x7f00000002c0)=0x183}}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e24, 0x1, @rand_addr="beea309f00ba91c60a43f742f3d3b990", 0x101}, {0xa, 0x4e24, 0xfffffffffffff000, @loopback, 0x7f}, 0x4, [0xc44e, 0x4, 0x6, 0x6, 0x100000, 0x100, 0x0, 0x7]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000580)={0x3, 0x0, 0x2080, {0x4, 0x10000, 0x2}, [], "8f98ddb3a7426c25891484afbecdb3c584079d1c9b6661c47fc3d8ac5fce317c2ae1b61972cc907bf61b182b357b5dff5f236cedcc7e688e62f7b828961f0090a319c2ada58219fa6823a1f1cde1fa0bd9510094c388db7b729f523507b96c9f9ab6898ddbf65035de20d75f12d7ea987fc3383ac2ad408375e4088606bb1bdb034465a72c0913e6db5531a838a43ff0d1d79cdb77f79480db8d75f54b340142b58995d1d7936e33c3c7fcdb341996592da6357d99a3a277e7d92f38db7b84dd3959ace18b1ff81137b017154e57920d2200d540cb015e46a9582444fa77d365a1743ed4acc28390cde7d4c8706cc527ba0154f541bb07c8044b25643fd279f2d9746a53dbe3f0ed45d35cfbfa654f110dc3d4996f344ed0a4e66dccf789876248f0bfde661d7af3a3e2222b468dd9ad3f22c8484493b58f0af6153be8878450b54c3cd1bb7fff13de690a56cdb650ec896dca3cd690b04052bc0f5a780ad89b518ba6b9bf08d218ed4b99d91a965fbb1736d1adcfbe40b221b69ba22930b5974443ccfdcd841cca7d8cdcc71d4cfe82fa1e3bfb64a4b559359e2ab4bd1005487f64652248a6bf5ebfca027268d6ee19a1c0fcf3528cc2be0e0f4b675d6f76514621ccbffb075748ddd4fdecc14ba2351a417f0ad91d1320a436fe619d0521772a0f166a6f3cd4c1754c094aac88fd4318e7305af6fd95b9ea4ec76750fe309a5c09c927ba9f077ab87173fa65dcef8ef289c08244e33aa36a1cf5c45d97fc0bf71f6246d6d31fa1dcaeea69ef7a0d59eacd66bc2285d8447926986a6d17482db0dbd4da31630cc696073316ca200f8851f0bdb2b15b2fe313e29c70f21588e0846621727e42b63954d66cce282ccf5ca2eea7421f21cd52dcc6f8f9a74c138a9dce4f447a5f3936ce39e2d11e872f14bbb031987c36127fc135b572e61edca19bbdcbe07d7e9e1e7cd790f796b71cde9a7ff829aa232132fe11ff0a2cd57588d02b4dd7eaa2c1a0dfe56f5d3f4807f5157f5b8f6d3c8acd2de55a04a7dc26a67a80e9ac14ec04ee76d6df3705ddf5f24ec7ea8e6104bcb04eeb41547faecbb2ccaeb908ee65315881e629fc81e7575e40918662ca5d17ee54e8a94e76eab928e79f6b4ba13df472548131431befa41e0ccd602d473419c9f900f3e4e1c2dfaecd29a2127fa515a52c4dee08d6333f022f04d01696392c1012bb6c72e84313e9fcbc449895a24975b66fdd97d5412695a3590090a6cc135b20c2a26357b08f174d62cd0e6099147034fff23e8781f952ac651694d830ef442ce475ca59a2d8e461f882ec187c49f1e8cc8c8229370b660f66f9a2712ebef1da8c3208016e536d6a4138b8317d3b0f7e98ea1aa08c918dbfa2d91d962a55e3577a88998ef4e04c39e17c29138a06085a0aad7850a65f21c4b57b4d50ca46398da08a9c470a267557b4ea323421627b7a515daa2b6ec86c72c8a10b94b0244067cc4d866bf7389e7f0d50816a22a5f5c351d46b9a191fd46967aa4469b55d99a953e3cf493d66cf2d2237cf6a1cf58f15024ba06dde05f896fe849910145f00f3f3b53e0707cd9b0bf82c8bb59db3e48185b6d14fd8d20672bd3e887cd046b392ab333b2ed14d1db5069fd663c66def0a0b2c92dd65097ae5b31ff09338de8e96cd695f56cfaea92d804048f8e4f7854c60fa3feb682b29d51faa3448485f5cd3853c7f97b1178fcd31d878e5276713c7465b5a35d1caf55c128458d9ffcf18d677919266b3162e5b0fe6537ccf61241d394ca620bd099bfd6a7af95f2609c83d0f7c94972d48fbde9096f9ccefe8c3111d98205464e9c0f44fde94565654618d7a5b8a7fa1f79998c0a08cad56510326d72a8dcf73ed4e1ddb9cbebef5f0d3db1e567b47c1bf9a545213be316da3d46f888ae9ac3f30b59718b199d327cd447a5757ca4f3890d2a64f0772fe426de0e61def37255f650d2c915bf7e8cd8c07cc2bd42cbc0900baa6de08e0c571429b35c4ef4f2bd3f059eb1534e70b7d8f67effef00d54bd13d7a387c69e96a9dd0adc85d6409295d1ddaefe96d78124f50941b8d2e383fe5127e519b840d791be15ccb11c12c0be46bbe8cec17f44f88388d56aaab20bc4e817572a20e4f1ee6f0417c8b519145f05c29472a3be846c148e089203a549f9a26a9380579275a918f295ca91a5cba2935861d83208278ae0c34f43269a8fa7d154022d0810129265d2f97894fb16112eb63b71dd36b7033aa87eaf70b881afbf262f9a05b048c5fd4add8897a622a7e28450d0a0648978a73175fa25d2f4d3b4876a814be5bb36a34895d801823817a5039a485b9c222382d5ad34a45a2f5efde51a7d13c5198ec24f59a0966e45dbdd6a2150237295230aebee1893388c91a31e7c22e59f04010ca4693a9e5dec5ab6aad62720d7b3f6a9d1fe92c4dd485f30dcd6da8a4c743508768ff88a22bc5504c4e424a234111d4550c100ed4be30edcfbc288a42545b2e78d9302fc8717153ececb771ab31cd07c05d180270ce8c3093343d5bb9ba27bf260ee03d2ee0d742377893eb4a0dbd406eb78d1492956e33260893a50172f8f9ea809ab9e5b6b599d2e668685e10fe1aa3c498b0bfaaf2d3f8ac521c55a06182757e1ca5691768a4abd91a99364d7528d3a595a1c2ed36aa2c114e6c96c54713bb84e0d1b7a36dd94a9d64816a13b0f9831c2f162812330b03dc33bd508f27326a8acd7c273ce1cac1bc1b73cd1ba0a629d6eaf1cde30047632bd350f54df39f77a7478014078bc473a372dbcb9c6d14586fbc105ee957d2c5dfadd991f1921d790efeec9ea3cae6d5d6e31d1721a003dd5a26324462bbc0faaa2ed0467a553b87a15b04f181ed468c711f66fb0a2d41ad78b841050452bece2559115b05cfada598aa7c1baa1b9a0b832d9ac3dbf97853319c1e755ed5f9c0891427f8b3299ead29d94e40ae89d9e1b2f4aba950fb2177412b35da91f5471f558866b77d07ee6c104ffa41f5ab5f0d4fd68df4ac61aa72fe9e5709f8a19f5de3de93c090def442305ebffe8d066c2049a46eef1f735348bfc74a7aa22073296d7df592833a1e291a956ec799252e6ebafa0728c0b2c1ca4581d9043238d43dcb5c6678497b854402605563e851289c6025e9a98cc876a6d749a4bf5142c43b1bb821377ef6a1adb5ffd433e053a80c7a65579bc429bf684c59449f9483a9488da81f6eb01dc50977638d26a22082731fbc560998bb03fa792a8e9dbaac1f2e5eaf69574b1ae7984112ae1fcabfbd6c3097668c9a706ccd8eb4f85091ad1967793bc262073c80e142ca4e3a3abf123812c337690a977eaacd28bdfc718c49861a3d46f0048f640ab760e3b75bf5e223c6c723988474c84b7422c0b8de264e833a9b90482c6b87a9533bcd37e14ad907f1df18a18de13dabdf54e1556cb03c74b3eeb5e1e8195dd3e369acf1303bf35981d5cc1680adedd2b1db5519ca6d2dcab0d74fb78a53384fd6faeae06ce6e4ad486492b3ed625f3ae9a433329a927d49dadcccbee0a083fb97b901481d3a8d61afad2234f86879bdcccc17e666eb67844027b5e6c306944a35b87071715f55555401653b1f5637abe479316026f983ae5660a1a3fd3822ab42094e96198f1fb2913a6b05c46f634744517187779d758d0a0a39682ea7e96bcc6b539c1b7882e04a8652f4021b09eb07850ea0f60ba9cc56f309b1be462f2ff5d22a3fe9c808ca957138411d462cdcc30865f80a1ac4078ce8223968322a50f5f03e6ad46831d1a0d56f6c31a4bec94571b11c0ddb1b622c19c7dbcb1c9e67852d958fdf46a1ef796f9806dd19909eff29444ef6775b58e1e88d491e7f09fe22bc2d4ac5196a6da14ecbec1934c626ee3df4e391fc34c88bec353392d1b48f8999a2b04906b2b6ee49bbdc3243f933b2d233a3789053fadf954fa57f169194532b93b11b855a227e574076a984c0d9cc0ebca2ba459d10b1ca79bea694aa3a1c49dd29c15f85e3d4301a2e7c73df09f4f6b89fe8edba3b7ac261da0c660d1947188561eb2fa9fff251960d91de1025b500fae81fb4b1009859f50301d724814e94bbb0d1887ec988bcfca26cc240985a846fe4dbf8e6676a0ed8835bf4de6dff611830a7c776f4aef364bca9c50fb915ee40d017eddfab0d733776a8c286018383bbebcb20133e355372d26349c75b90331a171c28ccbc2cb05f9c964124480fe2d0a034e8ab1210058111cde6ba8e20f374fb7103aca5094186f84790ee2962ab65d62e7b0426a7948db314d08d83d46aff0f70758b76a5942ba3f58017dcad6fd363ef6bf9d5c0ababc0435ce9437fa8355e2e49500af9be0edac9d1d4a7d4a6ef29899ef2d585547e6720f5df83ee4f8c77bc3e9950b090ef0acef06f66b2f64ec5da664f69e89d075a428623c9e55f0eec4d42a3ea17a8386904262845ee25826c47751a15020d951469498308fa7004e2aa6536c53a2a50f9da9f6d9291992a8963fbbb8791c504ace2cf4c22bf70f89fce2d5470fee85b83649320cc14697a6c589ade1a2150674981b2ad9d968234a1f774fc7a214f0531288269bd2dba7303df24e3623d54f17cd2b32de74065daeabaf8e037fa324ef943e837a08e5f6e4963a2e55d7a68bdc89d066a239b13b773b149ed20307f7058dfb33812a169face561264f4d63dab08cd862f16f5e1aec9eb3ac4dbce5de4ca3f5d5b1c0face2fa7788a70159c5aa180f9ff8b2d5c98a8115be577ec1ba880148d575592d810fc57e7ef5779a7c7d114eb8342248e6a9b7662e512f0f28427670d41a76f579102a71a7651231682ed1edd4fff444aad83cb1d495cbef8bbc3ba903739f52d799c63220490b054458cd6db99952894a3903772e37364a03af0102ffe8833b34d2d3bf781d46d294e5ed6174b8e5dd1f419a2119ab667426636910a633ec224243063a664e85272de161f3692ab4319d9f4f0cb58c4d7115e85d71b1112d48689682b221ed8f2b6efef8be43915d9ecf3f7637335de2c0b1df568b2317eda7570f82a3d4781283a341e392970ed855cb7106f712de81a535ca3159e1ce3ef9d681e3b2965cd4e15f6fb2a0f9db7c0f74a8540e243db042d0bdf1b8edb96b5e4bafb8fc29e50f134f6dace1d66959c41c90704b09f59b1bc62062a15694d1921c5a9923500421cabaf895d36a279a1f2ac73e63c1b26ed03042f8a3b28cc4ab33c451cbb4ba1b105df2dd31789751eedf4f5604db8109abf44f27cddd104c58c8100369c6881fd3416df18736b9cde24a212026535234ff1afdfa0399caa70b5f8b890f3b2ead74093adca293bf3e6c3724ed6b613b78bf8817cbf150fbcc5d5c27034ab84d1e0285b2cb1cbde3d0ae40f864a016a2ec6776f2638bef1fb5b7093b8801055d8f4327fb610938c0ae7fdc08f707a04ea96198e46a760c443c92c8df402bda851be6a6b2ace487c91e94c4c13cec92ce47172048a3aae8aa69db6dce0c06e371a818f0a95b081301548f15cf6102e94a157e93983d5019e91ab3beeae682bffedbc8b6ceede8d06d9ab330e645d3e82bd27fbf7537e32e76374702254ec71ac30c247a585288ac75529e25c4da1023337bc5a86f3bb2b6d1b4e2ee94cdd4fa432b8629158deff1ff5932f27f7631cae5874815c7ded5a1adaf36f26492c78b6583ad1dfcebdf038e0f41d39c3d5da4f70e393044e3e02633021605fd671db46c30bd084585759ab37516866f9e2171fe9711b196c5baf5412f057114a7dccd6d85815d6463e844d4ecc4f8a35c91ac7bc1a", "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"}) r8 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7800, 0x400) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000040)={0x124}) 11:49:30 executing program 5: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'user.syz\x00'}, &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xd, 0x0) 11:49:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000140)) write$rfkill(r3, &(0x7f0000000080)={0x200000000, 0x1, 0x0, 0x0, 0x1}, 0x8) sendto$inet(r1, &(0x7f00000000c0)="ef412f7ab21d7999726e2737f9177c88e8d74b9cfc453f81dd506772b62f9a2a652dd786a9350cc97d6ea9e75a4b7025a914573c687346b596f16a672ea70cd962c70d92ae4c0cb09132181200363ebd0f3a021b233c50925463bdf4de81f855d6f3ac", 0x6afc3, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:30 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:30 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) 11:49:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x6, 0x2, 0x2, 0x304}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:31 executing program 0: r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:31 executing program 5: [ 403.556807][T14211] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 403.734293][T14211] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:31 executing program 5: 11:49:31 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x81, 0x5, 0x6}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x5, 0x408, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0xff871810b95ac058) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:31 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) wait4(r0, &(0x7f00000002c0), 0x2954f0ce03f08e48, &(0x7f0000000300)) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$RTC_VL_CLR(r3, 0x7014) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='em0selinux\x00', &(0x7f0000000100)='\'\x00', &(0x7f0000000180)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f00000001c0)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000200)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4~\xa2(\t\x00\x81\xafu', &(0x7f0000000240)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu'], 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 404.265019][T14243] bridge_slave_1: FDB only supports static addresses 11:49:31 executing program 5: [ 404.333477][T14247] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:32 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x190) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") socket$xdp(0x2c, 0x3, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$sock_proto_private(r3, 0x200000000089ea, &(0x7f0000000240)="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") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) membarrier(0x40, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000000)={0xffffffffffffffe1, 0x9, 0x4, 0x40000000, {r3, r4/1000+30000}, {0x4, 0xc, 0x0, 0x0, 0x100000001, 0x100000000, "5f637bf8"}, 0x0, 0x1, @fd=0xffffffffffffffff, 0x4}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000100)={{0x6, 0x5, 0x7fffffff, 0x2, 0x3, 0x9}, 0x3ff}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x7fff, 0x4, 0x6, 0x9, 0x9}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000f40000000000000200000002000000000000000000000000000000000000008b6ba6d41ddfbd41000000000000000000000000515bc7362d759f51"]) 11:49:32 executing program 5: 11:49:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 404.696395][T14268] bridge_slave_1: FDB only supports static addresses [ 404.734637][T14272] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:32 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:32 executing program 5: 11:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) write$FUSE_POLL(r4, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x1}}, 0x18) rt_sigaction(0x2c, &(0x7f0000000180)={&(0x7f0000000080)="f343afc4810253dc450f137f8f660f38087bbc666766400f381c4b0ff240a60f84d10b00002666660f3a0a3711c481d0580c87456f", {0x7fffffff}, 0x48000006, &(0x7f00000000c0)="c4017b70df95f236420f18edc4027933430266420f569d00000000640f01ee0f3800012e266767660fe2a4bbf3ffffffc462b8f3d8c422953b9c046556666644d9f9"}, &(0x7f0000000240)={&(0x7f00000001c0)="6545af64fe425dc4617c2bb6847e4998660f76ecc443fd0120fd1bc3093a67f3adc40191e391b9000000c4a16b11e5", {}, 0x0, &(0x7f0000000200)="2e260fc72458660f3a08f40a410f38f02664400f02090f6a3d000000000f0f2896c4014d5fd14385e1c443697a2555ad00000ac463791dd501"}, 0x8, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 404.957159][T14290] bridge_slave_1: FDB only supports static addresses 11:49:32 executing program 5: [ 405.152153][T14300] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 405.340582][T14300] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 405.341155][T14254] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 405.451487][T14254] CPU: 1 PID: 14254 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 405.460626][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.470687][T14254] Call Trace: [ 405.474009][T14254] dump_stack+0x172/0x1f0 [ 405.478359][T14254] dump_header+0x177/0x1152 [ 405.482883][T14254] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 405.488699][T14254] ? ___ratelimit+0x2c8/0x595 [ 405.493384][T14254] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 405.499213][T14254] ? lockdep_hardirqs_on+0x418/0x5d0 [ 405.504613][T14254] ? trace_hardirqs_on+0x67/0x240 [ 405.509654][T14254] ? pagefault_out_of_memory+0x11c/0x11c [ 405.515938][T14254] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 405.521910][T14254] ? ___ratelimit+0x60/0x595 [ 405.526516][T14254] ? do_raw_spin_unlock+0x57/0x270 [ 405.531647][T14254] oom_kill_process.cold+0x10/0x15 [ 405.536793][T14254] out_of_memory+0x334/0x1340 [ 405.541461][T14254] ? lock_downgrade+0x920/0x920 [ 405.546303][T14254] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 405.552101][T14254] ? oom_killer_disable+0x280/0x280 [ 405.557294][T14254] mem_cgroup_out_of_memory+0x1d8/0x240 [ 405.562834][T14254] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 405.568464][T14254] ? do_raw_spin_unlock+0x57/0x270 [ 405.573560][T14254] ? _raw_spin_unlock+0x2d/0x50 [ 405.578397][T14254] try_charge+0xf4b/0x1440 [ 405.582815][T14254] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 405.589303][T14254] ? percpu_ref_tryget_live+0x111/0x290 [ 405.594844][T14254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.601156][T14254] ? __kasan_check_read+0x11/0x20 [ 405.606252][T14254] ? get_mem_cgroup_from_mm+0x156/0x320 [ 405.611819][T14254] mem_cgroup_try_charge+0x136/0x590 [ 405.617091][T14254] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 405.622711][T14254] shmem_getpage_gfp+0x88e/0x2680 [ 405.627741][T14254] ? shmem_unuse_inode+0x1010/0x1010 [ 405.633011][T14254] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 405.638724][T14254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.644952][T14254] shmem_fault+0x22a/0x7b0 [ 405.649415][T14254] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 405.655384][T14254] ? lock_downgrade+0x920/0x920 [ 405.660229][T14254] __do_fault+0x111/0x540 [ 405.664628][T14254] ? do_raw_spin_unlock+0x57/0x270 [ 405.671030][T14254] __handle_mm_fault+0x2cb8/0x3f20 [ 405.676150][T14254] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 405.681718][T14254] ? __kasan_check_read+0x11/0x20 [ 405.686738][T14254] handle_mm_fault+0x1b5/0x6c0 [ 405.691494][T14254] __get_user_pages+0x7d4/0x1b30 [ 405.696417][T14254] ? mark_held_locks+0xf0/0xf0 [ 405.701173][T14254] ? follow_page_mask+0x1cf0/0x1cf0 [ 405.706360][T14254] ? __mm_populate+0x270/0x380 [ 405.711109][T14254] ? memset+0x32/0x40 [ 405.715089][T14254] populate_vma_page_range+0x20d/0x2a0 [ 405.720532][T14254] __mm_populate+0x204/0x380 [ 405.725109][T14254] ? populate_vma_page_range+0x2a0/0x2a0 [ 405.730725][T14254] ? __kasan_check_write+0x14/0x20 [ 405.735946][T14254] ? up_write+0x155/0x490 [ 405.740289][T14254] vm_mmap_pgoff+0x213/0x230 [ 405.744881][T14254] ? randomize_stack_top+0x110/0x110 [ 405.750159][T14254] ? __kasan_check_read+0x11/0x20 [ 405.755175][T14254] ? _copy_to_user+0x118/0x160 [ 405.759938][T14254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 405.766167][T14254] ksys_mmap_pgoff+0xf7/0x630 [ 405.770832][T14254] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 405.776448][T14254] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 405.781887][T14254] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 405.787325][T14254] ? do_syscall_64+0x26/0x760 [ 405.792072][T14254] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.798363][T14254] __x64_sys_mmap+0xe9/0x1b0 [ 405.803038][T14254] do_syscall_64+0xfa/0x760 [ 405.807530][T14254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.813405][T14254] RIP: 0033:0x4598e9 [ 405.817307][T14254] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.836896][T14254] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 405.845299][T14254] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 405.853253][T14254] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 405.861211][T14254] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 405.869286][T14254] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 405.877243][T14254] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 405.887769][T14254] memory: usage 307200kB, limit 307200kB, failcnt 380 [ 405.895839][T14254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.902864][T14254] Memory cgroup stats for /syz2: [ 405.902943][T14254] anon 5341184 [ 405.902943][T14254] file 293568512 [ 405.902943][T14254] kernel_stack 851968 [ 405.902943][T14254] slab 10153984 [ 405.902943][T14254] sock 0 [ 405.902943][T14254] shmem 293568512 [ 405.902943][T14254] file_mapped 258306048 [ 405.902943][T14254] file_dirty 0 [ 405.902943][T14254] file_writeback 0 [ 405.902943][T14254] anon_thp 2097152 [ 405.902943][T14254] inactive_anon 258306048 [ 405.902943][T14254] active_anon 40644608 [ 405.902943][T14254] inactive_file 0 [ 405.902943][T14254] active_file 0 [ 405.902943][T14254] unevictable 0 [ 405.902943][T14254] slab_reclaimable 1892352 [ 405.902943][T14254] slab_unreclaimable 8261632 [ 405.902943][T14254] pgfault 262581 [ 405.902943][T14254] pgmajfault 0 [ 405.902943][T14254] workingset_refault 0 [ 405.902943][T14254] workingset_activate 0 [ 405.902943][T14254] workingset_nodereclaim 0 [ 405.902943][T14254] pgrefill 33 [ 405.902943][T14254] pgscan 33 [ 405.902943][T14254] pgsteal 0 [ 405.997980][T14254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13568,uid=0 [ 406.014814][T14254] Memory cgroup out of memory: Killed process 13568 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 406.058533][T14254] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 406.070408][T14254] CPU: 1 PID: 14254 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 406.079529][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.089590][T14254] Call Trace: [ 406.092971][T14254] dump_stack+0x172/0x1f0 [ 406.097314][T14254] dump_header+0x177/0x1152 [ 406.101839][T14254] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 406.107670][T14254] ? ___ratelimit+0x2c8/0x595 [ 406.112355][T14254] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 406.118172][T14254] ? lockdep_hardirqs_on+0x418/0x5d0 [ 406.123457][T14254] ? trace_hardirqs_on+0x67/0x240 [ 406.128499][T14254] ? pagefault_out_of_memory+0x11c/0x11c [ 406.134140][T14254] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 406.139960][T14254] ? ___ratelimit+0x60/0x595 [ 406.144555][T14254] ? do_raw_spin_unlock+0x57/0x270 [ 406.149682][T14254] oom_kill_process.cold+0x10/0x15 [ 406.154805][T14254] out_of_memory+0x334/0x1340 [ 406.159493][T14254] ? lock_downgrade+0x920/0x920 [ 406.164363][T14254] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 406.170181][T14254] ? oom_killer_disable+0x280/0x280 [ 406.175400][T14254] mem_cgroup_out_of_memory+0x1d8/0x240 [ 406.181091][T14254] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 406.186736][T14254] ? do_raw_spin_unlock+0x57/0x270 [ 406.191861][T14254] ? _raw_spin_unlock+0x2d/0x50 [ 406.196724][T14254] try_charge+0xf4b/0x1440 [ 406.201200][T14254] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 406.206752][T14254] ? percpu_ref_tryget_live+0x111/0x290 [ 406.212309][T14254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.218560][T14254] ? __kasan_check_read+0x11/0x20 [ 406.223782][T14254] ? get_mem_cgroup_from_mm+0x156/0x320 [ 406.229317][T14254] mem_cgroup_try_charge+0x136/0x590 [ 406.235066][T14254] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 406.240698][T14254] shmem_getpage_gfp+0x88e/0x2680 [ 406.245727][T14254] ? shmem_unuse_inode+0x1010/0x1010 [ 406.251012][T14254] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 406.256737][T14254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.262963][T14254] shmem_fault+0x22a/0x7b0 [ 406.267388][T14254] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 406.273427][T14254] ? lock_downgrade+0x920/0x920 [ 406.278292][T14254] __do_fault+0x111/0x540 [ 406.282611][T14254] ? do_raw_spin_unlock+0x57/0x270 [ 406.287709][T14254] __handle_mm_fault+0x2cb8/0x3f20 [ 406.292814][T14254] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 406.298356][T14254] ? __kasan_check_read+0x11/0x20 [ 406.303487][T14254] handle_mm_fault+0x1b5/0x6c0 [ 406.308247][T14254] __get_user_pages+0x7d4/0x1b30 [ 406.313165][T14254] ? mark_held_locks+0xf0/0xf0 [ 406.317926][T14254] ? follow_page_mask+0x1cf0/0x1cf0 [ 406.323102][T14254] ? __mm_populate+0x270/0x380 [ 406.327849][T14254] ? memset+0x32/0x40 [ 406.331813][T14254] populate_vma_page_range+0x20d/0x2a0 [ 406.337264][T14254] __mm_populate+0x204/0x380 [ 406.341932][T14254] ? populate_vma_page_range+0x2a0/0x2a0 [ 406.347542][T14254] ? __kasan_check_write+0x14/0x20 [ 406.352831][T14254] ? up_write+0x155/0x490 [ 406.357158][T14254] vm_mmap_pgoff+0x213/0x230 [ 406.361737][T14254] ? randomize_stack_top+0x110/0x110 [ 406.367032][T14254] ? __kasan_check_read+0x11/0x20 [ 406.372038][T14254] ? _copy_to_user+0x118/0x160 [ 406.376789][T14254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.383011][T14254] ksys_mmap_pgoff+0xf7/0x630 [ 406.387708][T14254] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 406.393346][T14254] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 406.398796][T14254] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 406.404238][T14254] ? do_syscall_64+0x26/0x760 [ 406.408988][T14254] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.415036][T14254] __x64_sys_mmap+0xe9/0x1b0 [ 406.419610][T14254] do_syscall_64+0xfa/0x760 [ 406.424110][T14254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.429979][T14254] RIP: 0033:0x4598e9 [ 406.433853][T14254] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.453450][T14254] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 406.461949][T14254] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 406.469911][T14254] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 406.477869][T14254] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 406.485828][T14254] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 406.493799][T14254] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 406.503072][T14254] memory: usage 295528kB, limit 307200kB, failcnt 390 [ 406.510123][T14254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 406.517552][T14254] Memory cgroup stats for /syz2: [ 406.517674][T14254] anon 5201920 [ 406.517674][T14254] file 282083328 [ 406.517674][T14254] kernel_stack 851968 [ 406.517674][T14254] slab 10153984 [ 406.517674][T14254] sock 0 [ 406.517674][T14254] shmem 282083328 [ 406.517674][T14254] file_mapped 246816768 [ 406.517674][T14254] file_dirty 0 [ 406.517674][T14254] file_writeback 0 [ 406.517674][T14254] anon_thp 2097152 [ 406.517674][T14254] inactive_anon 246816768 [ 406.517674][T14254] active_anon 40509440 [ 406.517674][T14254] inactive_file 0 [ 406.517674][T14254] active_file 0 [ 406.517674][T14254] unevictable 0 [ 406.517674][T14254] slab_reclaimable 1892352 [ 406.517674][T14254] slab_unreclaimable 8261632 [ 406.517674][T14254] pgfault 262614 [ 406.517674][T14254] pgmajfault 0 [ 406.517674][T14254] workingset_refault 0 [ 406.517674][T14254] workingset_activate 0 [ 406.517674][T14254] workingset_nodereclaim 0 [ 406.517674][T14254] pgrefill 33 [ 406.517674][T14254] pgscan 33 [ 406.517674][T14254] pgsteal 0 [ 406.612966][T14254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12747,uid=0 [ 406.628537][T14254] Memory cgroup out of memory: Killed process 12747 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 406.648011][ T1065] oom_reaper: reaped process 12747 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB 11:49:34 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x200002, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) r5 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000040)=r6, 0x12) getpriority(0x1, r6) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @rand_addr=0x101}}, 0x1e) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000100)=0x54) 11:49:34 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x6, 0x2, 0x0, @adapter={0x6387, 0x8, 0xffffffffffffffc1, 0xdbb, 0x80000000020}}]}) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x200) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x1000, 0xe0, 0x0, 0x8, 0x6, [{0xfff, 0x101, 0x401, 0x0, 0x0, 0x4}, {0x800, 0xfff, 0x100, 0x0, 0x0, 0x400}, {0x1, 0xffffffff, 0x5, 0x0, 0x0, 0x1310}, {0x8, 0x7, 0x1}, {0x8, 0x2, 0x81}, {0x6, 0x4, 0x43dd, 0x0, 0x0, 0x800}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0) 11:49:34 executing program 5: 11:49:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000000680)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbc, 0xffffffa0}}, &(0x7f0000000200)='GPLz', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=r5, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001800)=r5, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r3, 0x0, 0x6, &(0x7f0000000040)='wp256\x00', r5}, 0x30) syz_open_procfs(r6, &(0x7f00000000c0)='net/raw6\x00') sendto$inet(r1, &(0x7f0000000240)="d9d628eb28c79eb0bc9259078251a3a09dac8433966abf04e50e411ba68eb2838a125c5f38943790e36cf068e5608f388373637cbecb2573d92c471841c938d0ac4461725329b5425126c733fa6983bbb7726ce7bd7ed589bfcd69eeb3ccfafeff30059b1a8f94d10d985d432a55a7cec8ff1fdbd996035ac8f10cd7db021d84e2c5e89f51de38abccd6a28e667c07990507d396679d721bf7f7b4ec36f107e76948972ca94de69c08780ff750476b74558514036d24b10cbba24dc37e5d29edfe936eb1cc4486f5db6f989ad68f797a94723603f09f3f591315e6826998c0db086c4107f591ea2bd3a899ce7411fd0d26714beb5f4700"/260, 0xf9, 0x4, 0x0, 0x0) 11:49:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:34 executing program 5: [ 407.330268][T14321] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 407.345650][T14327] bridge_slave_1: FDB only supports static addresses 11:49:35 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 407.467570][T14321] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = dup2(r2, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r5, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x200000) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000040)="5fd98e68c65fee8f09724d45e26968de9a0887248a62859c982917c7ce6ebd03db25c0b0202832f4b4522dca6c6a0d7dbf3bc3246f9edc8eeb7f1615d12525ea7b3f42981e08fd840ca5dad2a8ad98b50cf9827d4d595b22d757edd6890fd5853456532c7330073aa24eb9ad2880e2db35e2829124a64ce4556c2f3cac38b83af610da494c7e017781e1e78ec0ecd71e1c0087f43004d84149528d958591a7ffe5fe34bc57e8ff89ae2878c485aeedb8359fa25b54e60021986481937be2580db49c515ddd825e66f642862bfffa3ae11cdea59b1fdd03e970a898ed458b28c3c39d99", 0xe3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:35 executing program 5: 11:49:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 407.656869][T14342] bridge_slave_1: FDB only supports static addresses [ 407.868731][T14353] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 407.971234][T14353] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:36 executing program 2: r0 = gettid() r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) fchdir(r1) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x5, 0x1) fcntl$setlease(r2, 0x400, 0x2) ioctl$TCSETX(r2, 0x5433, &(0x7f00000000c0)={0x6, 0xbd6, [0x9, 0x6, 0x0, 0x6b7b, 0x7]}) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:36 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000400000000000000020000000200"/56]) 11:49:36 executing program 5: 11:49:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3H', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x3, 0x0, 0x1) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x1b}}, 0xc) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 408.867203][T14372] bridge_slave_1: FDB only supports static addresses 11:49:36 executing program 5: 11:49:36 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x800, 0x7fff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:36 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 409.061733][T14384] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 11:49:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xc0', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:36 executing program 5: [ 409.186333][T14384] CPU: 1 PID: 14384 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 409.195477][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.199899][T14397] bridge_slave_1: FDB only supports static addresses [ 409.205531][T14384] Call Trace: [ 409.205554][T14384] dump_stack+0x172/0x1f0 [ 409.205575][T14384] dump_header+0x177/0x1152 [ 409.205592][T14384] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 409.205603][T14384] ? ___ratelimit+0x2c8/0x595 [ 409.205617][T14384] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 409.205637][T14384] ? lockdep_hardirqs_on+0x418/0x5d0 [ 409.219887][T14384] ? trace_hardirqs_on+0x67/0x240 [ 409.230243][T14384] ? pagefault_out_of_memory+0x11c/0x11c [ 409.230262][T14384] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 409.230278][T14384] ? ___ratelimit+0x60/0x595 [ 409.267143][T14384] ? do_raw_spin_unlock+0x57/0x270 [ 409.272241][T14384] oom_kill_process.cold+0x10/0x15 [ 409.277342][T14384] out_of_memory+0x334/0x1340 [ 409.282004][T14384] ? lock_downgrade+0x920/0x920 [ 409.286852][T14384] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 409.292650][T14384] ? oom_killer_disable+0x280/0x280 [ 409.297924][T14384] mem_cgroup_out_of_memory+0x1d8/0x240 [ 409.303555][T14384] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 409.309196][T14384] ? do_raw_spin_unlock+0x57/0x270 [ 409.314309][T14384] ? _raw_spin_unlock+0x2d/0x50 [ 409.319159][T14384] try_charge+0xf4b/0x1440 [ 409.323573][T14384] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 409.329210][T14384] ? percpu_ref_tryget_live+0x111/0x290 [ 409.336746][T14384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.343066][T14384] ? __kasan_check_read+0x11/0x20 [ 409.348517][T14384] ? get_mem_cgroup_from_mm+0x156/0x320 [ 409.354051][T14384] mem_cgroup_try_charge+0x136/0x590 [ 409.359327][T14384] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 409.365037][T14384] shmem_getpage_gfp+0x88e/0x2680 [ 409.370327][T14384] ? shmem_unuse_inode+0x1010/0x1010 [ 409.375609][T14384] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 409.381328][T14384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.387559][T14384] shmem_fault+0x22a/0x7b0 [ 409.391974][T14384] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 409.397945][T14384] ? lock_downgrade+0x920/0x920 [ 409.402920][T14384] __do_fault+0x111/0x540 [ 409.407230][T14384] ? do_raw_spin_unlock+0x57/0x270 [ 409.412331][T14384] __handle_mm_fault+0x2cb8/0x3f20 [ 409.417434][T14384] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 409.422986][T14384] ? __kasan_check_read+0x11/0x20 [ 409.428010][T14384] handle_mm_fault+0x1b5/0x6c0 [ 409.432872][T14384] __get_user_pages+0x7d4/0x1b30 [ 409.437918][T14384] ? mark_held_locks+0xf0/0xf0 [ 409.442678][T14384] ? follow_page_mask+0x1cf0/0x1cf0 [ 409.448991][T14384] ? __mm_populate+0x270/0x380 [ 409.453834][T14384] ? memset+0x32/0x40 [ 409.457803][T14384] populate_vma_page_range+0x20d/0x2a0 [ 409.463256][T14384] __mm_populate+0x204/0x380 [ 409.467947][T14384] ? populate_vma_page_range+0x2a0/0x2a0 [ 409.473653][T14384] ? __kasan_check_write+0x14/0x20 [ 409.478755][T14384] ? up_write+0x155/0x490 [ 409.483074][T14384] vm_mmap_pgoff+0x213/0x230 [ 409.487653][T14384] ? randomize_stack_top+0x110/0x110 [ 409.492924][T14384] ? __kasan_check_read+0x11/0x20 [ 409.498122][T14384] ? _copy_to_user+0x118/0x160 [ 409.502967][T14384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 409.509567][T14384] ksys_mmap_pgoff+0xf7/0x630 [ 409.514235][T14384] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 409.520044][T14384] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 409.525487][T14384] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 409.530936][T14384] ? do_syscall_64+0x26/0x760 [ 409.535791][T14384] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.541950][T14384] __x64_sys_mmap+0xe9/0x1b0 [ 409.546528][T14384] do_syscall_64+0xfa/0x760 [ 409.551130][T14384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.557218][T14384] RIP: 0033:0x4598e9 [ 409.561273][T14384] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.581429][T14384] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 409.589836][T14384] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 409.597829][T14384] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 409.605824][T14384] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 409.613979][T14384] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 409.621994][T14384] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff 11:49:37 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 409.749413][T14408] bridge_slave_1: FDB only supports static addresses [ 409.927140][T14384] memory: usage 307200kB, limit 307200kB, failcnt 403 [ 409.933948][T14384] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 409.997133][T14384] Memory cgroup stats for /syz2: [ 409.997245][T14384] anon 15335424 [ 409.997245][T14384] file 283168768 [ 409.997245][T14384] kernel_stack 851968 [ 409.997245][T14384] slab 10387456 [ 409.997245][T14384] sock 0 [ 409.997245][T14384] shmem 283168768 [ 409.997245][T14384] file_mapped 247898112 [ 409.997245][T14384] file_dirty 0 [ 409.997245][T14384] file_writeback 0 [ 409.997245][T14384] anon_thp 10485760 [ 409.997245][T14384] inactive_anon 247898112 [ 409.997245][T14384] active_anon 50601984 [ 409.997245][T14384] inactive_file 0 [ 409.997245][T14384] active_file 0 [ 409.997245][T14384] unevictable 0 [ 409.997245][T14384] slab_reclaimable 1892352 [ 409.997245][T14384] slab_unreclaimable 8495104 [ 409.997245][T14384] pgfault 266343 [ 409.997245][T14384] pgmajfault 0 [ 409.997245][T14384] workingset_refault 0 [ 409.997245][T14384] workingset_activate 0 [ 409.997245][T14384] workingset_nodereclaim 0 [ 409.997245][T14384] pgrefill 33 [ 409.997245][T14384] pgscan 33 [ 409.997245][T14384] pgsteal 0 [ 410.095081][T14384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14315,uid=0 [ 410.112115][T14384] Memory cgroup out of memory: Killed process 14315 (syz-executor.2) total-vm:72840kB, anon-rss:5064kB, file-rss:35804kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 410.139018][ T1065] oom_reaper: reaped process 14315 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:11480kB 11:49:38 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:38 executing program 5: 11:49:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x4000, 0x100) fcntl$setlease(r4, 0x400, 0x2) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) fcntl$setlease(r3, 0x400, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000040)={0xffffffff00000000, 0x5, 'client1\x00', 0xffffffff80000002, "38389bee6999ded4", "0888b1642bc3fd18e482ef3aecc805f6d97a3c71c0530fb84344e93106f54b80", 0x0, 0x479c}) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:38 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) getpid() tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 410.578414][T14432] bridge_slave_1: FDB only supports static addresses [ 410.595725][T14431] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:38 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:38 executing program 5: [ 410.706635][T14431] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) socketpair(0x8, 0x80002, 0x9ef3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x1, 0x4) 11:49:38 executing program 5: 11:49:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x0f', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 410.868820][T14447] bridge_slave_1: FDB only supports static addresses 11:49:38 executing program 5: 11:49:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:38 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:38 executing program 5: [ 411.185340][T14440] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 411.262413][T14468] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 411.294310][T14469] bridge_slave_1: FDB only supports static addresses [ 411.295587][T14440] CPU: 0 PID: 14440 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 411.310125][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.320296][T14440] Call Trace: [ 411.323616][T14440] dump_stack+0x172/0x1f0 [ 411.328049][T14440] dump_header+0x177/0x1152 [ 411.332566][T14440] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 411.338489][T14440] ? ___ratelimit+0x2c8/0x595 [ 411.343177][T14440] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 411.349036][T14440] ? lockdep_hardirqs_on+0x418/0x5d0 [ 411.354333][T14440] ? trace_hardirqs_on+0x67/0x240 [ 411.359398][T14440] ? pagefault_out_of_memory+0x11c/0x11c [ 411.365275][T14440] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 411.371092][T14440] ? ___ratelimit+0x60/0x595 [ 411.375900][T14440] ? do_raw_spin_unlock+0x57/0x270 [ 411.381032][T14440] oom_kill_process.cold+0x10/0x15 [ 411.386156][T14440] out_of_memory+0x334/0x1340 [ 411.390845][T14440] ? lock_downgrade+0x920/0x920 [ 411.396145][T14440] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 411.401983][T14440] ? oom_killer_disable+0x280/0x280 [ 411.407205][T14440] mem_cgroup_out_of_memory+0x1d8/0x240 [ 411.412758][T14440] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 411.418546][T14440] ? do_raw_spin_unlock+0x57/0x270 [ 411.424604][T14440] ? _raw_spin_unlock+0x2d/0x50 [ 411.429576][T14440] try_charge+0xf4b/0x1440 [ 411.434139][T14440] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 411.439989][T14440] ? percpu_ref_tryget_live+0x111/0x290 [ 411.445537][T14440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.451875][T14440] ? __kasan_check_read+0x11/0x20 [ 411.456903][T14440] ? get_mem_cgroup_from_mm+0x156/0x320 [ 411.462451][T14440] mem_cgroup_try_charge+0x136/0x590 [ 411.467797][T14440] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 411.473685][T14440] shmem_getpage_gfp+0x88e/0x2680 [ 411.478714][T14440] ? shmem_unuse_inode+0x1010/0x1010 [ 411.483993][T14440] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 411.490014][T14440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.496246][T14440] shmem_fault+0x22a/0x7b0 [ 411.500669][T14440] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 411.506703][T14440] ? lock_downgrade+0x920/0x920 [ 411.511844][T14440] __do_fault+0x111/0x540 [ 411.516178][T14440] ? do_raw_spin_unlock+0x57/0x270 [ 411.521529][T14440] __handle_mm_fault+0x2cb8/0x3f20 [ 411.527467][T14440] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 411.533059][T14440] ? __kasan_check_read+0x11/0x20 [ 411.538190][T14440] handle_mm_fault+0x1b5/0x6c0 [ 411.542987][T14440] __get_user_pages+0x7d4/0x1b30 [ 411.548190][T14440] ? mark_held_locks+0xf0/0xf0 [ 411.552953][T14440] ? follow_page_mask+0x1cf0/0x1cf0 [ 411.558926][T14440] ? __mm_populate+0x270/0x380 [ 411.563694][T14440] ? memset+0x32/0x40 [ 411.567681][T14440] populate_vma_page_range+0x20d/0x2a0 [ 411.573141][T14440] __mm_populate+0x204/0x380 [ 411.577880][T14440] ? populate_vma_page_range+0x2a0/0x2a0 [ 411.583499][T14440] ? __kasan_check_write+0x14/0x20 [ 411.588621][T14440] ? up_write+0x155/0x490 [ 411.592966][T14440] vm_mmap_pgoff+0x213/0x230 [ 411.597547][T14440] ? randomize_stack_top+0x110/0x110 [ 411.602831][T14440] ? __kasan_check_read+0x11/0x20 [ 411.607900][T14440] ? _copy_to_user+0x118/0x160 [ 411.612918][T14440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.619155][T14440] ksys_mmap_pgoff+0xf7/0x630 [ 411.624004][T14440] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 411.629679][T14440] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 411.635142][T14440] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 411.640604][T14440] ? do_syscall_64+0x26/0x760 [ 411.645279][T14440] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.651441][T14440] __x64_sys_mmap+0xe9/0x1b0 [ 411.656025][T14440] do_syscall_64+0xfa/0x760 [ 411.660522][T14440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.666414][T14440] RIP: 0033:0x4598e9 [ 411.670307][T14440] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.689995][T14440] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 411.698429][T14440] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 411.706521][T14440] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 411.714511][T14440] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 411.722502][T14440] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 411.731069][T14440] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 411.753899][T14440] memory: usage 307200kB, limit 307200kB, failcnt 420 [ 411.761487][T14440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 411.768826][T14440] Memory cgroup stats for /syz2: [ 411.768951][T14440] anon 10330112 [ 411.768951][T14440] file 288198656 [ 411.768951][T14440] kernel_stack 851968 [ 411.768951][T14440] slab 10653696 [ 411.768951][T14440] sock 0 [ 411.768951][T14440] shmem 288198656 [ 411.768951][T14440] file_mapped 252899328 [ 411.768951][T14440] file_dirty 0 [ 411.768951][T14440] file_writeback 0 [ 411.768951][T14440] anon_thp 6291456 [ 411.768951][T14440] inactive_anon 252899328 [ 411.768951][T14440] active_anon 45596672 [ 411.768951][T14440] inactive_file 0 [ 411.768951][T14440] active_file 0 [ 411.768951][T14440] unevictable 0 [ 411.768951][T14440] slab_reclaimable 1892352 [ 411.768951][T14440] slab_unreclaimable 8761344 [ 411.768951][T14440] pgfault 270468 [ 411.768951][T14440] pgmajfault 0 [ 411.768951][T14440] workingset_refault 0 [ 411.768951][T14440] workingset_activate 0 [ 411.768951][T14440] workingset_nodereclaim 0 [ 411.768951][T14440] pgrefill 33 [ 411.768951][T14440] pgscan 33 [ 411.768951][T14440] pgsteal 0 [ 411.773990][T14440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14368,uid=0 [ 411.774175][T14440] Memory cgroup out of memory: Killed process 14368 (syz-executor.2) total-vm:72840kB, anon-rss:5064kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:172032kB oom_score_adj:1000 [ 411.926250][T14468] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:39 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xe30000, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000280)='\xab\xa2\x1f\t\x02\x81\xaf\xf5\x00\x00\xef\xff\xff\xff\xc5;\x1e\xa0\xe2\x04\x00\x00\xd8\xff\xb2D\xcc\xed\xb8\xdd\x0f\x06\x18:~\xc7%tY8P\x88XL\x88\xc6\xc6\xfe\x1a\xe7\xf5Gx\x9d \xbb\x02#\xbc\x9e\x00>\xf6\xb1\xb8h\xa6\"\xec\x12\xde\xc7\xd1r\xcf\xa0\x80N,\x00\x00\x00\x00\x00\x00\x01\x01X\xb9t\aYW\x05\xaf\xb8*4\xeb\xf4\xd9\xca\xc8O\xe1\xb0\xb0bM\x01Lxu\x99ZM\x1b\x00\rI\xd0\x87\x16\xa7G\xb1\xeeY\xfa\x96\xb7\\w!\xf7\x00\xbb\xc4\xce\x1e', 0x711b2006937692e3) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000100)=""/71) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x72a, 0x12) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") times(&(0x7f0000000100)) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f00000000c0)={0x5, 0x80000001}) 11:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000580)="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", &(0x7f0000000000)=""/244}, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:39 executing program 5: 11:49:39 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:40 executing program 5: [ 412.452139][T14501] bridge_slave_1: FDB only supports static addresses [ 412.475474][T14495] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:40 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0b") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 412.577567][T14495] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x6000, &(0x7f0000000100), 0x5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001580)='/dev/cachefiles\x00', 0x10300, 0x0) inotify_add_watch(r2, &(0x7f00000015c0)='./file0\x00', 0x18000048) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x48e, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="d004882f0fe45d4391a0092d545b2a4b298bfd1219948ee4597bfa2083b23f16043e6ecc953c463238801adcee9bdaf60faa43d56a4d940fc74842687a113d34841bf1105fbde71409a7dc6430a6da0cf3b4c9ebc5692e782b0d3f00b2c0d1fc3a353eecc565229558542c8dd91585d69c7c4028a868c41c1d5b119c", 0x7c}, {&(0x7f0000000100), 0x0, 0x7}], 0x8, &(0x7f00000001c0)={[{@dax='dax'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) io_setup(0x4, &(0x7f0000000240)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x200, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x10000, 0x0) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) io_submit(r3, 0x3, &(0x7f0000000500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x10000, r1, &(0x7f0000000280)="0c249b149b14d5bb8d1014ad3db7b350ae7267729cf85f02a1570b247b74c88a0abcfb83cc12fb5854878583bb25a5ea2617b01f1a4cb5d8a41bdec724d567e4044575c1449ed3", 0x47, 0x1d, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000000580)="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", 0x1000, 0x4, 0x0, 0x7, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x10000, r6, &(0x7f0000000400)="12f2c4a94053de753dff1f216c18c221c7c0cdc613f3ca40eb32730eb24a34da0559e15c6ce0d9bf333c61df6bd466cb1afb5e6e66e7e614da425d26683a17cdbe461f9751df9435b98054d53c6cddc3c3d4632fa665a164e6538d1788fa4f89eb0d3a74af130fb31ea2ce422fe47323f79e5dcfdfbb7f199e302bd88724bf647c6f1892d499076cebb6531a", 0x8c, 0x10000000000000, 0x0, 0x0, r7}]) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001600)={0x2e, 0x4, 0x0, {0x4, 0x9, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100"/56]) 11:49:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x03', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:40 executing program 5: [ 412.723544][T14514] bridge_slave_1: FDB only supports static addresses 11:49:40 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0b") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 412.893746][T14521] XFS (loop3): unknown mount option [rootcontext=user_u]. [ 413.030099][T14531] bridge_slave_1: FDB only supports static addresses [ 413.098527][T14528] XFS (loop3): unknown mount option [rootcontext=user_u]. [ 413.277341][T14508] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 413.296389][T14508] CPU: 0 PID: 14508 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 413.305736][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.315797][T14508] Call Trace: [ 413.319100][T14508] dump_stack+0x172/0x1f0 [ 413.323467][T14508] dump_header+0x177/0x1152 [ 413.328019][T14508] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 413.333831][T14508] ? ___ratelimit+0x2c8/0x595 [ 413.338526][T14508] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 413.344347][T14508] ? lockdep_hardirqs_on+0x418/0x5d0 [ 413.349638][T14508] ? trace_hardirqs_on+0x67/0x240 [ 413.354699][T14508] ? pagefault_out_of_memory+0x11c/0x11c [ 413.360347][T14508] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 413.366295][T14508] ? ___ratelimit+0x60/0x595 [ 413.371064][T14508] ? do_raw_spin_unlock+0x57/0x270 [ 413.376190][T14508] oom_kill_process.cold+0x10/0x15 [ 413.381405][T14508] out_of_memory+0x334/0x1340 [ 413.386172][T14508] ? lock_downgrade+0x920/0x920 [ 413.391039][T14508] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 413.396860][T14508] ? oom_killer_disable+0x280/0x280 [ 413.402339][T14508] mem_cgroup_out_of_memory+0x1d8/0x240 [ 413.408045][T14508] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 413.414003][T14508] ? do_raw_spin_unlock+0x57/0x270 [ 413.419232][T14508] ? _raw_spin_unlock+0x2d/0x50 [ 413.424087][T14508] try_charge+0xf4b/0x1440 [ 413.428703][T14508] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 413.434414][T14508] ? percpu_ref_tryget_live+0x111/0x290 [ 413.440076][T14508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.446499][T14508] ? __kasan_check_read+0x11/0x20 [ 413.451610][T14508] ? get_mem_cgroup_from_mm+0x156/0x320 [ 413.457152][T14508] mem_cgroup_try_charge+0x136/0x590 [ 413.462438][T14508] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 413.468364][T14508] shmem_getpage_gfp+0x88e/0x2680 [ 413.473400][T14508] ? shmem_unuse_inode+0x1010/0x1010 [ 413.478682][T14508] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 413.484496][T14508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.490872][T14508] shmem_fault+0x22a/0x7b0 [ 413.495381][T14508] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 413.501353][T14508] ? lock_downgrade+0x920/0x920 [ 413.506355][T14508] __do_fault+0x111/0x540 [ 413.510780][T14508] ? do_raw_spin_unlock+0x57/0x270 [ 413.516765][T14508] __handle_mm_fault+0x2cb8/0x3f20 [ 413.521895][T14508] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 413.527476][T14508] ? __kasan_check_read+0x11/0x20 [ 413.532721][T14508] handle_mm_fault+0x1b5/0x6c0 [ 413.537640][T14508] __get_user_pages+0x7d4/0x1b30 [ 413.542580][T14508] ? mark_held_locks+0xf0/0xf0 [ 413.547495][T14508] ? follow_page_mask+0x1cf0/0x1cf0 [ 413.552800][T14508] ? __mm_populate+0x270/0x380 [ 413.557565][T14508] ? memset+0x32/0x40 [ 413.561623][T14508] populate_vma_page_range+0x20d/0x2a0 [ 413.567259][T14508] __mm_populate+0x204/0x380 [ 413.571855][T14508] ? populate_vma_page_range+0x2a0/0x2a0 [ 413.577803][T14508] ? __kasan_check_write+0x14/0x20 [ 413.583067][T14508] ? up_write+0x155/0x490 [ 413.587403][T14508] vm_mmap_pgoff+0x213/0x230 [ 413.592026][T14508] ? randomize_stack_top+0x110/0x110 [ 413.597313][T14508] ? __kasan_check_read+0x11/0x20 [ 413.602339][T14508] ? _copy_to_user+0x118/0x160 [ 413.607110][T14508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.613556][T14508] ksys_mmap_pgoff+0xf7/0x630 [ 413.618222][T14508] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 413.623841][T14508] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 413.629300][T14508] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 413.634779][T14508] ? do_syscall_64+0x26/0x760 [ 413.639470][T14508] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.645548][T14508] __x64_sys_mmap+0xe9/0x1b0 [ 413.650237][T14508] do_syscall_64+0xfa/0x760 [ 413.654753][T14508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.660823][T14508] RIP: 0033:0x4598e9 [ 413.664841][T14508] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.684727][T14508] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 413.693157][T14508] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 413.701141][T14508] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 413.709578][T14508] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 413.717549][T14508] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 413.725521][T14508] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 413.736716][T14508] memory: usage 307200kB, limit 307200kB, failcnt 477 [ 413.745908][T14508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 413.755327][T14508] Memory cgroup stats for /syz2: [ 413.755443][T14508] anon 5279744 [ 413.755443][T14508] file 293658624 [ 413.755443][T14508] kernel_stack 851968 [ 413.755443][T14508] slab 10076160 [ 413.755443][T14508] sock 0 [ 413.755443][T14508] shmem 293658624 [ 413.755443][T14508] file_mapped 258306048 [ 413.755443][T14508] file_dirty 0 [ 413.755443][T14508] file_writeback 0 [ 413.755443][T14508] anon_thp 2097152 [ 413.755443][T14508] inactive_anon 258306048 [ 413.755443][T14508] active_anon 40681472 [ 413.755443][T14508] inactive_file 0 [ 413.755443][T14508] active_file 0 [ 413.755443][T14508] unevictable 0 [ 413.755443][T14508] slab_reclaimable 1892352 [ 413.755443][T14508] slab_unreclaimable 8183808 [ 413.755443][T14508] pgfault 274758 [ 413.755443][T14508] pgmajfault 0 [ 413.755443][T14508] workingset_refault 0 [ 413.755443][T14508] workingset_activate 0 [ 413.755443][T14508] workingset_nodereclaim 0 [ 413.755443][T14508] pgrefill 33 [ 413.755443][T14508] pgscan 33 [ 413.755443][T14508] pgsteal 0 [ 413.863967][T14508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14423,uid=0 [ 413.885720][T14508] Memory cgroup out of memory: Killed process 14423 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35804kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 413.908097][T14508] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 413.910767][ T1065] oom_reaper: reaped process 14423 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:11480kB [ 413.919559][T14508] CPU: 1 PID: 14508 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 413.940338][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.950403][T14508] Call Trace: [ 413.953707][T14508] dump_stack+0x172/0x1f0 [ 413.958049][T14508] dump_header+0x177/0x1152 [ 413.962654][T14508] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 413.968567][T14508] ? ___ratelimit+0x2c8/0x595 [ 413.973258][T14508] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 413.979192][T14508] ? lockdep_hardirqs_on+0x418/0x5d0 [ 413.984485][T14508] ? trace_hardirqs_on+0x67/0x240 [ 413.989972][T14508] ? pagefault_out_of_memory+0x11c/0x11c [ 413.995700][T14508] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 414.001515][T14508] ? ___ratelimit+0x60/0x595 [ 414.006091][T14508] ? do_raw_spin_unlock+0x57/0x270 [ 414.011190][T14508] oom_kill_process.cold+0x10/0x15 [ 414.016409][T14508] out_of_memory+0x334/0x1340 [ 414.021076][T14508] ? lock_downgrade+0x920/0x920 [ 414.025989][T14508] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 414.032406][T14508] ? oom_killer_disable+0x280/0x280 [ 414.037639][T14508] mem_cgroup_out_of_memory+0x1d8/0x240 [ 414.043285][T14508] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 414.048924][T14508] ? do_raw_spin_unlock+0x57/0x270 [ 414.054046][T14508] ? _raw_spin_unlock+0x2d/0x50 [ 414.058896][T14508] try_charge+0xf4b/0x1440 [ 414.063318][T14508] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 414.068856][T14508] ? percpu_ref_tryget_live+0x111/0x290 [ 414.074406][T14508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.080639][T14508] ? __kasan_check_read+0x11/0x20 [ 414.085819][T14508] ? get_mem_cgroup_from_mm+0x156/0x320 [ 414.092311][T14508] mem_cgroup_try_charge+0x136/0x590 [ 414.097693][T14508] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 414.103416][T14508] shmem_getpage_gfp+0x88e/0x2680 [ 414.108455][T14508] ? shmem_unuse_inode+0x1010/0x1010 [ 414.113781][T14508] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 414.119624][T14508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.125858][T14508] shmem_fault+0x22a/0x7b0 [ 414.130279][T14508] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 414.137266][T14508] ? lock_downgrade+0x920/0x920 [ 414.142127][T14508] __do_fault+0x111/0x540 [ 414.146563][T14508] ? do_raw_spin_unlock+0x57/0x270 [ 414.151683][T14508] __handle_mm_fault+0x2cb8/0x3f20 [ 414.156876][T14508] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 414.162506][T14508] ? __kasan_check_read+0x11/0x20 [ 414.167597][T14508] handle_mm_fault+0x1b5/0x6c0 [ 414.172387][T14508] __get_user_pages+0x7d4/0x1b30 [ 414.177318][T14508] ? mark_held_locks+0xf0/0xf0 [ 414.182077][T14508] ? follow_page_mask+0x1cf0/0x1cf0 [ 414.187408][T14508] ? __mm_populate+0x270/0x380 [ 414.192466][T14508] ? memset+0x32/0x40 [ 414.196968][T14508] populate_vma_page_range+0x20d/0x2a0 [ 414.202432][T14508] __mm_populate+0x204/0x380 [ 414.207039][T14508] ? populate_vma_page_range+0x2a0/0x2a0 [ 414.212790][T14508] ? __kasan_check_write+0x14/0x20 [ 414.217886][T14508] ? up_write+0x155/0x490 [ 414.222211][T14508] vm_mmap_pgoff+0x213/0x230 [ 414.226837][T14508] ? randomize_stack_top+0x110/0x110 [ 414.232108][T14508] ? __kasan_check_read+0x11/0x20 [ 414.237200][T14508] ? _copy_to_user+0x118/0x160 [ 414.241954][T14508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.248207][T14508] ksys_mmap_pgoff+0xf7/0x630 [ 414.252886][T14508] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 414.258512][T14508] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 414.263960][T14508] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 414.269491][T14508] ? do_syscall_64+0x26/0x760 [ 414.274175][T14508] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.280228][T14508] __x64_sys_mmap+0xe9/0x1b0 [ 414.284819][T14508] do_syscall_64+0xfa/0x760 [ 414.289330][T14508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.295205][T14508] RIP: 0033:0x4598e9 [ 414.299083][T14508] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.319045][T14508] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 414.327535][T14508] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 414.335553][T14508] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 414.343520][T14508] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 414.351480][T14508] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 414.359463][T14508] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 414.368413][T14508] memory: usage 295400kB, limit 307200kB, failcnt 483 [ 414.375253][T14508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 414.382241][T14508] Memory cgroup stats for /syz2: [ 414.382356][T14508] anon 5279744 [ 414.382356][T14508] file 281948160 [ 414.382356][T14508] kernel_stack 851968 [ 414.382356][T14508] slab 10076160 [ 414.382356][T14508] sock 0 [ 414.382356][T14508] shmem 281948160 [ 414.382356][T14508] file_mapped 246681600 [ 414.382356][T14508] file_dirty 0 [ 414.382356][T14508] file_writeback 0 [ 414.382356][T14508] anon_thp 2097152 [ 414.382356][T14508] inactive_anon 246681600 [ 414.382356][T14508] active_anon 40546304 [ 414.382356][T14508] inactive_file 0 [ 414.382356][T14508] active_file 0 [ 414.382356][T14508] unevictable 0 [ 414.382356][T14508] slab_reclaimable 1892352 [ 414.382356][T14508] slab_unreclaimable 8183808 [ 414.382356][T14508] pgfault 274758 [ 414.382356][T14508] pgmajfault 0 [ 414.382356][T14508] workingset_refault 0 [ 414.382356][T14508] workingset_activate 0 [ 414.382356][T14508] workingset_nodereclaim 0 [ 414.382356][T14508] pgrefill 33 [ 414.382356][T14508] pgscan 33 [ 414.382356][T14508] pgsteal 0 [ 414.477049][T14508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14486,uid=0 [ 414.492832][T14508] Memory cgroup out of memory: Killed process 14486 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 414.511993][ T1065] oom_reaper: reaped process 14486 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB 11:49:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x2}) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:42 executing program 5: 11:49:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:42 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0b") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x101000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180901}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf6d3}, @IPVS_CMD_ATTR_DAEMON={0xffffffffffffff67, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9fe8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x29c, 0x7, 0xc109}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa55}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000580)=""/4096) 11:49:43 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f00000002c0)={"1cb559e3c52e03d0e4d8a335ef64cd9d5ca90578ea7e774c4ec7676749c609a7acc87e31e333a0d90b106052b62b5cc1a5845bb5e3a0feaf0317c9795af1d88e2f817bb6d3fa5a5466336a6a08e3ab995b3c9e6041678bc1a24cb40913c67ee20bc4159fdf646ed417b846d2e553f300281b4af61bbaf7929a493752f613afe53f63b435ee813a2517a4688cf9ff196a8de38d0be53cbbfc2ad9ab4d4dedd5df74a6aa89fb4d71bfb39fb74a40f584c33185f720c3b0f7a0e1b6d1263c60b115f1ff5c313608d3a288a6b5e1b21bf3589204a403aef3c761523033252994ff1cbe14da4dd2f356a3af0e601f1d1b59f2e530ac20bfb940f14c78c6b80923febb57bed729f2fb8de7ace42dc4e3caabb3a1f5d02a10a4bd1b9fe581cc722e8c31b9b9825c1c15f217815f00cb5df37eec16446f67b310471f1a8148af1d1cde16c8c9e8d6edc6d4856b2df17c81b1b0c0501b2792530fdbd274ae1e5d25203022a08951ecaeac48673399b906ee03426e427a774679209433d25d4c42dcf9dee802193b4bd174b9482a2b6ae9aa296c7b4948fa85bf2d5acf3a7a211f54615f51cdbcbb841c4fd3ca4cb86629a671a437a853c7116d84103a6e71bcb8c5fcd459613f589d14b4908d24229f4ff2a37c8f712d7728a19418723054237485e12ae3cc88d5a8015fd8546eb1bd51b31e0f349f286cd94bb47134288495fb543375756b203da5145a8454c938aa7fded099c1a601dfe61c0a62cbfe8a0754897185270d53d5238b8adf032dafbe944b69da295d420579cbf4588bf0c0c265bc541b635ba97ca3ce16590f5de40cfdf192a451fe3f7f57c2a2ed9d1da5f06920a750cd75a9feecc156e0bfaa18e40ec1f3be8dcba5013c6a25f9962e9a0103cdf8abee36c0ab5b7919f9a04432af036d38bb836d5ecf1feccf24bc60f4a4c5da82b89bfdc5fecd801981c102a5e52a02fffabb8e6c1dfceba711751701c279f02554b0fcbef3a775dc5927f3b543a10bb9fcfd74ac3673570b462ad65b749662a289bcf2266365a9dcba301699e01c739e4cb7c75993bae4bd5b022d1aff0b3e88fd83db4ab16727bd7425d4e0ced6f0d9f7a7fa634101550cfa650a9b5fe6e090e58bc0023316efefadeb71b46bba707dca182cb257831753eb323361d5e8294a85993e388fd86d2198079951e0df811547019407ca3c5d0f07a688239d1620f04dfb0fd56972534f8a99824b6ad334cb5af2c346d40e917e717fa42ce4563c4e2477474e021d515d3d7bf62f665ef64ce4c133a5285f6bc13813218ce1cd204c4f834d5634bce5c05590e9517026768b4308b6245852dc5becf67021030b4a33219b44df58cba9330f440fd107b07d3293972a74046cc70a102b853ff7209be9a2ff16aff707e81054715541451fbfcf1dd304edab229304abf4ab38b8357dd3f01a"}) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r4 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0x25}, 0xfffffffffffffffb}, 0x1c) r6 = dup(r4) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000180)={0x4, 0x6, 0x7, 0x10000, [], [], [], 0x1, 0x0, 0x101, 0x4, "3458932f5779796a19f2f07ad48d1d09"}) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:43 executing program 5: [ 415.456642][T14558] bridge_slave_1: FDB only supports static addresses [ 415.531820][T14556] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:43 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47b") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:43 executing program 5: 11:49:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000000000000040000000010000a5ba02f280888c6f000000000000000000000000000200b73ed224e409000000000000000096f81a58bc648c5f3454f543"]) [ 415.683242][T14556] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 415.710905][T14571] bridge_slave_1: FDB only supports static addresses 11:49:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:43 executing program 5: 11:49:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x52d0c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000080)) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:43 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47b") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:43 executing program 5: [ 416.007709][T14589] bridge_slave_1: FDB only supports static addresses [ 416.029855][T14590] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:43 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47b") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 416.129685][T14590] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x02', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 416.338918][T14605] bridge_slave_1: FDB only supports static addresses 11:49:44 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) msgget(0x0, 0x200) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x7, 0xfffffffffffffff9) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x55, 0xd1a, &(0x7f0000000080)=0x9b6}) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x20000000, 0x0, 0x31e2c79ced74501) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) 11:49:44 executing program 5: 11:49:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x10, 0x4, 0x4}}, 0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r16, 0xae60) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r16, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x2) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r18, 0xae60) r19 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0) ioctl$KVM_SET_REGS(r19, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r19, 0xae80, 0x0) ioctl$KVM_RUN(r19, 0xae80, 0x0) r20 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r21 = ioctl$KVM_CREATE_VM(r20, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r21, 0xae60) ioctl$KVM_CREATE_VCPU(r21, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r21, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r21, 0xae41, 0x2) r22 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r23 = ioctl$KVM_CREATE_VM(r22, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r23, 0xae60) r24 = ioctl$KVM_CREATE_VCPU(r23, 0xae41, 0x0) ioctl$KVM_SET_REGS(r24, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r24, 0xae80, 0x0) ioctl$KVM_RUN(r24, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYRESDEC=r8, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESHEX=r24, @ANYRESOCT=r14, @ANYRESDEC=r16, @ANYRESHEX=r19], @ANYBLOB="838fb620d4d3246e0a22b2db67406491e4af2aec899652aa9e8f4ab933726ce6725ed561ef2cfa19058068464cfde70857519d48ec01cf06ff0070c35960c814c91be95f2bcaa99915156335265bc2ebee8c29762c686d9349aff8a905f7de183aa19072ab535844006423dfe02bb2c48eb6fc811e7e7caf1893a7c11546c05988061508b36c5bdd06714d44da6e752b54fad5e2ddcedae6a53e58b9c5c798e7caa10cb55f5191", @ANYRESDEC=r21, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYPTR64, @ANYPTR]], @ANYPTR64, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES16=r18, @ANYBLOB="e401d83de547892dfdbe10fa1c852ee812ded950a7997d632eedaecf49e0800eb54148776b09caf6544970cc961b2544e110b9d7146c8e6e77979ba988502df9f3c5157b63564fe084e4c5f875e733d10c1504409e8993e2", @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR64], @ANYRES32], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESDEC=r13]]) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) 11:49:44 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf0") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 416.651642][T14626] bridge_slave_1: FDB only supports static addresses 11:49:44 executing program 5: 11:49:44 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf0") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:44 executing program 5: [ 416.856016][T14637] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 416.995948][T14637] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 417.008238][T14646] bridge_slave_1: FDB only supports static addresses 11:49:44 executing program 5: 11:49:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x01', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:44 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xd602, 0xd11e66bfe6b3ff45) r1 = geteuid() quotactl(0x0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)="554eb0bb823afa001b4e6c6d0159cbf9f84eedf463bcf387bf23df54216818b5f22ca825305e9a4b22e48cfbad677df130433a2514c2fac2e53eb2e54d78fe78e8a484882d3092b62f9dd7b39e1c42a680b3d085e30191adb60a60a74553082924a51af3044b7562b9") ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r3, &(0x7f0000000240)="7939cf3b622c28d953fc2935d48512b7d783ac50b0bd4958da079ef45d2dfa031e2b3605f3640a153ba47a9a8073adcc2a9a4f730cec083c009bfccc7238086782d370600a9196c2c36cd5ee53050a5edd3001d7c6698853fc75db30c078aa970f7664015c90754be648f6efc0e797a0abb89fc618fdf942b00ed90c0bf05ea9d9bac3f1a3a4c8645025d1c3d15cc2fb6c00"/161, 0xa1, 0x0, 0x0, 0x0) 11:49:45 executing program 5: 11:49:45 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf0") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socket(0x1, 0x1, 0x80000000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x47330aac72f47d42, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20260080) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x02', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 11:49:45 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup(r7) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r8, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000200)=0x30) [ 417.947075][T14683] bridge_slave_1: FDB only supports static addresses 11:49:45 executing program 0: socket$kcm(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:49:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x9, &(0x7f0000000080)) 11:49:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x201b, 0xa79883a2eb08845a}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:45 executing program 0: socket$kcm(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 418.376569][T14706] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000036) [ 418.536063][T14706] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/\x04,\x00\x00kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0xca81884279af8482}) 11:49:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:46 executing program 0: socket$kcm(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) [ 419.044561][T14741] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 419.137919][T14741] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:46 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0x4) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:46 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0xe4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:46 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) 11:49:46 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, 0x0, 0x0) 11:49:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 419.473919][T14761] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x105000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000080)) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0xffffffffffffff9d, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:47 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, 0x0, 0x0) 11:49:47 executing program 5: semop(0x0, &(0x7f00000000c0)=[{}, {}, {}], 0x2fa) 11:49:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$isdn(0x22, 0x3, 0x12) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="090000000000000003000000000000000200000000000000", @ANYRES32=r8, @ANYBLOB="00000000000100"/28, @ANYRES32=r12, @ANYBLOB="000000000600"/28, @ANYRES32=r9, @ANYBLOB="00000026610000000000000500"/28]) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r14, 0x400, 0x0) fcntl$setlease(r14, 0x400, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r14, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0x7fff, 0x1, 0x81}, 0x3ff, 0x5, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 419.674137][T14761] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:47 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, 0x0, 0x0) 11:49:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="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", 0x2d1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x1cc, 0x4000599, 0x0, 0x27) 11:49:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 420.114470][T14795] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 420.211450][T14795] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:48 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x1, @default, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x3, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:48 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 11:49:48 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x1000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) accept4(r4, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0xfffffffffffffee8, 0x80800) [ 420.879472][T14824] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:48 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 11:49:48 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 421.042221][T14824] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00000000c0)='pagemap\x00') ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000100000000000002000000020000000000000000000000000000000002000000000000000000000000007f00000096ff0000000927d108976950324af4bb4f68b641a68c01c5736ef7e09e9cad33b4"]) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x81) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x7) fcntl$setlease(r4, 0x400, 0x2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100)={0xffffffffffff0000}, 0x4) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) 11:49:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast1}, {0x306, @local}, 0x60, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) 11:49:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:48 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 421.510055][T14864] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 421.630573][T14864] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:49 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 11:49:49 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/192) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x4200, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000001c0)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r3, 0xb}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x87ef, 0x1, "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", 0x32, 0x6, 0x5, 0x8, 0x6, 0x3, 0x70ed, 0x1}, r3}}, 0x128) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r4, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000100)={0x400, 0xffff, 0xfffffffffffffffa, 0xfffffffffffffff8}, 0x10) accept(r6, &(0x7f0000000040)=@in={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x80) 11:49:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:49 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x20002) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x9, 0x491c, 0x10, 0x7ff]}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = dup(r9) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r10, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 422.070502][T14892] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:49 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 11:49:49 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000003}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 422.195443][T14892] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000200)=ANY=[@ANYBLOB="00f890f500000000e4dc3d0033755ebbb6757b74e0aede3c9e5fc770f5153d615e857031177e2d28586c8451c792bae070e653660f8aa7167f480d953b895b564d826267791af31e326730977054369043ed00df3248dc5e3a809dcb1c51a98f3ab1fd31a00abf5b37c531b1591b8ad96e2cae48c610a379fd05034dc8e93de5ba05972190555d86f6e9203e7bbd754ba69934ef553bcd9b"]) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) r7 = accept$alg(r4, 0x0, 0x0) sendmmsg(r7, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) sendto$inet(r8, &(0x7f0000000040)="f2550a1bc82492bacd900175511713271f21d2f3dc19fd283e78427711437ea8", 0x20, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 11:49:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$void(r0, 0x5451) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:49 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 11:49:49 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 422.584626][T14925] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:50 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 11:49:50 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 422.708474][T14925] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000020000000200000000000000006c7d5958000000000000000000000000000000f3799f8cfe00000000000000d17501005649632e6bb5a445f7cfbf883628c2"]) 11:49:50 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 423.219829][T14954] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=1000 [ 423.259445][T14954] CPU: 0 PID: 14954 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 423.268589][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.278651][T14954] Call Trace: [ 423.281954][T14954] dump_stack+0x172/0x1f0 [ 423.286299][T14954] dump_header+0x177/0x1152 [ 423.290810][T14954] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 423.296616][T14954] ? ___ratelimit+0x2c8/0x595 [ 423.301293][T14954] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 423.307106][T14954] ? lockdep_hardirqs_on+0x418/0x5d0 [ 423.312540][T14954] ? trace_hardirqs_on+0x67/0x240 [ 423.317658][T14954] ? pagefault_out_of_memory+0x11c/0x11c [ 423.323297][T14954] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.329108][T14954] ? ___ratelimit+0x60/0x595 [ 423.333731][T14954] ? do_raw_spin_unlock+0x57/0x270 [ 423.338940][T14954] oom_kill_process.cold+0x10/0x15 [ 423.344061][T14954] out_of_memory+0x334/0x1340 [ 423.348765][T14954] ? lock_downgrade+0x920/0x920 [ 423.353708][T14954] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 423.359541][T14954] ? oom_killer_disable+0x280/0x280 [ 423.364952][T14954] mem_cgroup_out_of_memory+0x1d8/0x240 [ 423.371546][T14954] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 423.377385][T14954] ? do_raw_spin_unlock+0x57/0x270 [ 423.382499][T14954] ? _raw_spin_unlock+0x2d/0x50 [ 423.387472][T14954] try_charge+0xf4b/0x1440 [ 423.391897][T14954] ? __lock_acquire+0x800/0x4a00 [ 423.396845][T14954] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 423.402393][T14954] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 423.408378][T14954] ? cache_grow_begin+0x122/0xd20 [ 423.413924][T14954] ? find_held_lock+0x35/0x130 [ 423.418694][T14954] ? cache_grow_begin+0x122/0xd20 [ 423.423732][T14954] __memcg_kmem_charge_memcg+0x71/0xf0 [ 423.429280][T14954] ? memcg_kmem_put_cache+0x50/0x50 [ 423.434486][T14954] ? __kasan_check_read+0x11/0x20 [ 423.440047][T14954] cache_grow_begin+0x629/0xd20 [ 423.444910][T14954] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 423.450660][T14954] ? mempolicy_slab_node+0x139/0x390 [ 423.456080][T14954] fallback_alloc+0x1fd/0x2d0 [ 423.461115][T14954] ____cache_alloc_node+0x1bc/0x1d0 [ 423.466319][T14954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.472565][T14954] kmem_cache_alloc_trace+0x21c/0x790 [ 423.477954][T14954] kvm_uevent_notify_change.part.0+0xa6/0x460 [ 423.484029][T14954] kvm_dev_ioctl+0x1088/0x1650 [ 423.488802][T14954] ? kvm_debugfs_release+0x90/0x90 [ 423.493988][T14954] ? kvm_debugfs_release+0x90/0x90 [ 423.499106][T14954] do_vfs_ioctl+0xdb6/0x13e0 [ 423.503708][T14954] ? ioctl_preallocate+0x210/0x210 [ 423.508819][T14954] ? __fget+0x384/0x560 [ 423.513167][T14954] ? ksys_dup3+0x3e0/0x3e0 [ 423.517602][T14954] ? nsecs_to_jiffies+0x30/0x30 [ 423.522466][T14954] ? tomoyo_file_ioctl+0x23/0x30 [ 423.527434][T14954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.533677][T14954] ? security_file_ioctl+0x8d/0xc0 [ 423.538796][T14954] ksys_ioctl+0xab/0xd0 [ 423.543048][T14954] __x64_sys_ioctl+0x73/0xb0 [ 423.547742][T14954] do_syscall_64+0xfa/0x760 [ 423.552265][T14954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.558602][T14954] RIP: 0033:0x4598e9 [ 423.562545][T14954] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.582414][T14954] RSP: 002b:00007f8cbea29c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.590832][T14954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 423.598892][T14954] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 423.606876][T14954] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 423.614850][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cbea2a6d4 [ 423.622842][T14954] R13: 00000000004c2841 R14: 00000000004d5ec8 R15: 00000000ffffffff [ 423.649286][T14954] memory: usage 307196kB, limit 307200kB, failcnt 534 [ 423.656248][T14954] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.663095][T14954] Memory cgroup stats for /syz2: [ 423.663223][T14954] anon 5402624 [ 423.663223][T14954] file 293900288 [ 423.663223][T14954] kernel_stack 983040 [ 423.663223][T14954] slab 9605120 [ 423.663223][T14954] sock 0 [ 423.663223][T14954] shmem 293900288 [ 423.663223][T14954] file_mapped 258576384 [ 423.663223][T14954] file_dirty 0 [ 423.663223][T14954] file_writeback 0 [ 423.663223][T14954] anon_thp 2097152 [ 423.663223][T14954] inactive_anon 258576384 [ 423.663223][T14954] active_anon 40669184 [ 423.663223][T14954] inactive_file 0 [ 423.663223][T14954] active_file 0 [ 423.663223][T14954] unevictable 0 [ 423.663223][T14954] slab_reclaimable 2162688 [ 423.663223][T14954] slab_unreclaimable 7442432 [ 423.663223][T14954] pgfault 295548 [ 423.663223][T14954] pgmajfault 0 [ 423.663223][T14954] workingset_refault 0 [ 423.663223][T14954] workingset_activate 0 [ 423.663223][T14954] workingset_nodereclaim 0 [ 423.663223][T14954] pgrefill 33 [ 423.663223][T14954] pgscan 33 [ 423.663223][T14954] pgsteal 0 [ 423.760878][T14954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14667,uid=0 [ 423.777028][T14954] Memory cgroup out of memory: Killed process 14667 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 423.796500][ T1065] oom_reaper: reaped process 14667 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB [ 423.808551][T14950] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=3, oom_score_adj=1000 [ 423.821071][T14950] CPU: 0 PID: 14950 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 423.831351][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.841505][T14950] Call Trace: [ 423.844908][T14950] dump_stack+0x172/0x1f0 [ 423.849431][T14950] dump_header+0x177/0x1152 [ 423.854031][T14950] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 423.859833][T14950] ? ___ratelimit+0x2c8/0x595 [ 423.864758][T14950] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 423.870572][T14950] ? lockdep_hardirqs_on+0x418/0x5d0 [ 423.875908][T14950] ? trace_hardirqs_on+0x67/0x240 [ 423.881075][T14950] ? pagefault_out_of_memory+0x11c/0x11c [ 423.886817][T14950] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.892631][T14950] ? ___ratelimit+0x60/0x595 [ 423.897225][T14950] ? do_raw_spin_unlock+0x57/0x270 [ 423.902373][T14950] oom_kill_process.cold+0x10/0x15 [ 423.907495][T14950] out_of_memory+0x334/0x1340 [ 423.912170][T14950] ? lock_downgrade+0x920/0x920 [ 423.917223][T14950] ? oom_killer_disable+0x280/0x280 [ 423.922614][T14950] mem_cgroup_out_of_memory+0x1d8/0x240 [ 423.928393][T14950] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 423.934246][T14950] ? do_raw_spin_unlock+0x57/0x270 [ 423.939363][T14950] ? _raw_spin_unlock+0x2d/0x50 [ 423.944388][T14950] try_charge+0xa2d/0x1440 [ 423.948803][T14950] ? __lock_acquire+0x800/0x4a00 [ 423.954070][T14950] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 423.960332][T14950] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 423.966301][T14950] ? cache_grow_begin+0x122/0xd20 [ 423.971494][T14950] ? find_held_lock+0x35/0x130 [ 423.976379][T14950] ? cache_grow_begin+0x122/0xd20 [ 423.981741][T14950] __memcg_kmem_charge_memcg+0x71/0xf0 [ 423.987311][T14950] ? memcg_kmem_put_cache+0x50/0x50 [ 423.992500][T14950] ? __kasan_check_read+0x11/0x20 [ 423.997552][T14950] cache_grow_begin+0x629/0xd20 [ 424.002424][T14950] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 424.008227][T14950] ? mempolicy_slab_node+0x139/0x390 [ 424.013680][T14950] fallback_alloc+0x1fd/0x2d0 [ 424.018360][T14950] ____cache_alloc_node+0x1bc/0x1d0 [ 424.023766][T14950] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.030124][T14950] kmem_cache_alloc+0x1ef/0x710 [ 424.035095][T14950] vmx_create_vcpu+0x9f/0x2f80 [ 424.039879][T14950] ? mutex_lock_io_nested+0x1260/0x1260 [ 424.046009][T14950] ? stack_trace_save+0xac/0xe0 [ 424.050853][T14950] ? __kasan_check_write+0x14/0x20 [ 424.056047][T14950] ? __kasan_check_read+0x11/0x20 [ 424.061087][T14950] ? vmx_exec_control+0x210/0x210 [ 424.066228][T14950] ? wait_for_completion+0x440/0x440 [ 424.071519][T14950] kvm_arch_vcpu_create+0x7a/0x120 [ 424.076634][T14950] kvm_vm_ioctl+0x59e/0x1860 [ 424.081222][T14950] ? debug_check_no_obj_freed+0x20a/0x43f [ 424.086948][T14950] ? kvm_unregister_device_ops+0x70/0x70 [ 424.092576][T14950] ? lock_downgrade+0x920/0x920 [ 424.097425][T14950] ? rwlock_bug.part.0+0x90/0x90 [ 424.103045][T14950] ? tomoyo_path_number_perm+0x214/0x520 [ 424.108994][T14950] ? find_held_lock+0x35/0x130 [ 424.113758][T14950] ? tomoyo_path_number_perm+0x214/0x520 [ 424.119417][T14950] ? lock_downgrade+0x920/0x920 [ 424.124357][T14950] ? lockdep_hardirqs_on+0x418/0x5d0 [ 424.129631][T14950] ? tomoyo_path_number_perm+0x459/0x520 [ 424.135268][T14950] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.141590][T14950] ? tomoyo_path_number_perm+0x263/0x520 [ 424.147205][T14950] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 424.153137][T14950] ? kvm_unregister_device_ops+0x70/0x70 [ 424.158773][T14950] do_vfs_ioctl+0xdb6/0x13e0 [ 424.163722][T14950] ? ioctl_preallocate+0x210/0x210 [ 424.168827][T14950] ? __fget+0x384/0x560 [ 424.172997][T14950] ? ksys_dup3+0x3e0/0x3e0 [ 424.177417][T14950] ? nsecs_to_jiffies+0x30/0x30 [ 424.182272][T14950] ? tomoyo_file_ioctl+0x23/0x30 [ 424.187200][T14950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.193637][T14950] ? security_file_ioctl+0x8d/0xc0 [ 424.198855][T14950] ksys_ioctl+0xab/0xd0 [ 424.203031][T14950] __x64_sys_ioctl+0x73/0xb0 [ 424.207634][T14950] do_syscall_64+0xfa/0x760 [ 424.212346][T14950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.218238][T14950] RIP: 0033:0x4598e9 [ 424.222159][T14950] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.241753][T14950] RSP: 002b:00007f8cbea6bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.250157][T14950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 424.258214][T14950] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 424.266202][T14950] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 424.274176][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cbea6c6d4 [ 424.282148][T14950] R13: 00000000004c282b R14: 00000000004d5eb0 R15: 00000000ffffffff [ 424.291583][T14950] memory: usage 295412kB, limit 307200kB, failcnt 535 [ 424.298634][T14950] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.305727][T14950] Memory cgroup stats for /syz2: [ 424.305958][T14950] anon 5402624 [ 424.305958][T14950] file 282103808 [ 424.305958][T14950] kernel_stack 983040 [ 424.305958][T14950] slab 9605120 [ 424.305958][T14950] sock 0 [ 424.305958][T14950] shmem 282103808 [ 424.305958][T14950] file_mapped 246816768 [ 424.305958][T14950] file_dirty 0 [ 424.305958][T14950] file_writeback 0 [ 424.305958][T14950] anon_thp 2097152 [ 424.305958][T14950] inactive_anon 246816768 [ 424.305958][T14950] active_anon 40804352 [ 424.305958][T14950] inactive_file 0 [ 424.305958][T14950] active_file 0 [ 424.305958][T14950] unevictable 0 [ 424.305958][T14950] slab_reclaimable 2162688 [ 424.305958][T14950] slab_unreclaimable 7442432 [ 424.305958][T14950] pgfault 295548 [ 424.305958][T14950] pgmajfault 0 [ 424.305958][T14950] workingset_refault 0 [ 424.305958][T14950] workingset_activate 0 [ 424.305958][T14950] workingset_nodereclaim 0 [ 424.305958][T14950] pgrefill 33 [ 424.305958][T14950] pgscan 33 [ 424.305958][T14950] pgsteal 0 [ 424.402099][T14950] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12609,uid=0 [ 424.419649][T14950] Memory cgroup out of memory: Killed process 12609 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 424.439668][ T1065] oom_reaper: reaped process 12609 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB 11:49:52 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000b2b000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffffffffffffffe) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) tkill(0x0, 0x39) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x19) rt_sigsuspend(&(0x7f0000000040), 0x8) socket$unix(0x1, 0x1, 0x0) 11:49:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000040)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:52 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 11:49:52 executing program 5: ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x2980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000000000200000002000000000000000000000000000000000000000000000000000000000000000000000000000000972b39aa5cce41ce60034f13ef9ec6"]) [ 424.634253][T14969] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:52 executing program 5: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:52 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 11:49:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x80000000, 0x80400) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="090000000000000001000000000000000200000000000000", @ANYRES32, @ANYBLOB="00000000001000"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00'/24]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000000000d60e1990d0102000000020000007f0000000000000000000000100000000000000000000000002273a1c2a7aad1024c6b078bc8929d7bdc48"]) 11:49:52 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x0) 11:49:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0xd81, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 425.027437][T14992] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:52 executing program 5: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000580)={0x9, @output={0x1000, 0x1, {0xd77, 0x3}, 0x200, 0x3}}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x3305, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f0000000980)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1c, 0x968, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10040) r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) rmdir(&(0x7f0000000440)='./file0\x00') recvfrom$rxrpc(r5, &(0x7f0000000380)=""/176, 0xb0, 0x1, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) fstat(r5, &(0x7f00000004c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000100000000060000000000000000000000000000030000000000000000000000000000000000000000000000002adb6863d8eb354cc5b5cdd02d9a6eebaacfb2615fd33359a61789a2ba2b5866905de5b056298a47940df20206e2c9f064e52dbca48cd5ac387cf3eb6e12ac6a10bf5317292894e081e3b54367fdaae001f8ffff5edfe2acc1838c2a8a67905eb2de87c326c350cebca9df851b4f6cb81603b8b48fed94953676039aa7dbc11a22eec69ad4d0d96a6c00f14a24bd97802426ad13716bca5a"]) 11:49:52 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x0) 11:49:52 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xf, 0x62dd8abf1831ad0a) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = geteuid() quotactl(0x4, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000140)="554eb0bb823afa001b4e6c6d0159cbf9f84eedf463bcf387bf23df54216818b5f22ca825305e9a4b22e48cfbad677df130433a2514c2fac2e53eb2e54d78fe78e8a484882d3092b62f9dd7b39e1c42a680b3d085e30191adb60a60a74553082924a51af3044b7562b9") setsockopt$inet_opts(r1, 0x0, 0x1f, &(0x7f00000004c0)="ceb4ba553ee01a36d17ab0ff5dd9152c952f772536bda7106be5214b96c50d04b8962634d54d0224e1a35382199f8ee676d6c91106343f5ba3a8ead4b6bf1e0f9eac60afb560df6b4cf88f4e7402f811b81d3902b3ddf08252f8336a96f8b03c0f71640b4bd8c56635833676175021a39f7ccbf984b6096fa30fd0ad7f4e02638324aa42233a6edbdf74abaf897aa86227a7bf0317b091813d04cc9d6ba220c57ef01f02f933897600bb3ff464fc14bcae313071c2f97d2fa692e708e285891874a43924f4904f29b9abfd7dc0e0751ae48eadcc38dc8c9047bf5a1c8bc8719c55422d5ccafa81a3562ec5e0f3c3fdb7baee240793", 0xf5) quotactl(0x800, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000380)="8716eb57bc8577c65ea74cabb9c3984297e6af62d10cf2845ad55c74adc4329cc6df056a3c87d005ee5704026574647786a31cfb1e32027080431431b3e8dcb65da4a15bb2e45dddf18af088ae9aed4dbd8263c134f1a3640243f695d71c6ad49e875e8622e51cb73f7ee8b84203b0465613233479076e6ca71fc791226473d25a75609992c858232e03e33839e5d9ab708b45766cce0346eb1b0eda0e9482466cdae4fc1d5e9f5a5ae0") r4 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000680)=[&(0x7f0000000200)='*cpusetem0wlan1cpuseteth1loproc\x00', &(0x7f0000000240)=']mime_typeposix_acl_accesseth1\x00', &(0x7f0000000640)='$\x00'], 0x0, 0x400) tkill(r0, 0x18) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000005c0)={0x43, 0x0, 0x1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000600)=r8, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000440)=0x20000401, &(0x7f0000000480)=0x1ac) rt_sigsuspend(&(0x7f0000000040), 0x8) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x2) epoll_pwait(r9, &(0x7f00000000c0)=[{}], 0x1, 0x101, &(0x7f0000000100)={0x1}, 0x8) [ 425.262538][T14992] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:52 executing program 5: r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 425.376926][T15011] Restarting kernel threads ... done. 11:49:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='statm\x00') r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x4b, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0xb4f, 0x0}, @rand_addr=0xffffffffffffff00}, 0x8) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000bc0)=[{&(0x7f0000000600)="d081033098bd97ac30a566998ad3a01e430d55b758eeade88c77b19c8a258b058bba49c957d54c349f55e5c03ac87a7e616b8a115542e75e4ff977b2e48739dcfaae80e67584ce9c1a9a0567989c03c440b7f6599e2a9e18c7394a7dcb2d2165647ae49a452d4a44efb788cef7511b5a28cd8a90a1ca9eeb70747aaced1f542100b7136ec2014cc3c22f5d2d4b1ef982e7144cafae3b2452d0926210", 0x9c}, {&(0x7f00000006c0)="469adcaa333b7b360467128b61d9dd08e117d8fb92d8e7396716b049a015822b36a8cf25f80d6b46e787dbb47d49d550456859ba46c709d9f19e348552da8bb437aff029114fc980e36caa145f95fa39dad58d115f7481c5a2ae38b342", 0x5d}, {&(0x7f0000000740)="afd71b492f37f8b8420e1073e2aa8f134617a8043de31c0c925e89aeef8f383f0b59065b9abd32319fa34efdca8e55f99fee2358c3e361e9d8d16b204e3e3eb3e38fd7699659d876545aaa603d7c807fd5af795a051c8cd97811921f42843c48db6dfbd128", 0x65}, {&(0x7f00000007c0)="2ae298215a3da232343f6f47684177d0aec8b1556886663d38f3b244345ea62a682eb4a155a8ee", 0x27}, {&(0x7f0000000800)="11f256e77dc8884d4e6df7587bf142ec950140d28f52088c47f1063e6e463a050c0bd17691cc50cb85ead77322b7bffeb614f1c5d11e4affa7a5cbea72712fa97bd2d8ec3491b6b6c8a6daec2f9737febb1f50dd895ec9ccdc112a48c8a9ca48fb973a53fe23375feae003", 0x6b}, {&(0x7f0000000880)="486feb72d7769c8817bd32a6b29981f5527de5db6b157005421b9584c4394e6559440b543a45bbc21cb4362ffce44b1621ca7628565bd32865831467715ee10c47664b7f7f3dac155b00da024c6e9c0396f67510e29875fb39d57fd95b779c1c4f57b2aaf3c3b4390a1e772ba916255b8ce9c2b22a16659bb3a19435ac7fc9a7beee88399e3e8eab6f04ad71903001e59ea37dc49a7645057961a66786dde2cb81", 0xa1}, {&(0x7f0000000940)="68dab519e22253b505945c3f32f9e2ee9f6a70a71a42d6c4bc345fd4abb4eaa751ffc1d5bb075353e2288f7cdf8d8946b5bc64bd8ebe795493eb3f9472e7bcea94da39f853e513f5f1f8e5b17f4b4b6acd8c01dc2e5b2fed6645a60e43a7f22fd3b58a038b49eb4cbae09553b9206a7d4abfaf049ec707d2bc34c5b89d22a2dee9d75b578d1ed013ce998993cdb3ff511b441fad605139890a879883c611f3877820dbb7940f9773fd6c97bbe1d478aaf400024ec394b41cec61d44bdab140a547db50b80a49486184eb8be333f75cef8d0fcf469793cc67bbe15531b492445d6f5c48043f029f5ec301796996e1464b1c0027667ddb24", 0xf7}, {&(0x7f0000000a40)="e3e574760d131e72ed995f23c2e4e3065cb87afa5df113f5b42e2b7441963a42dd38ac2dcb0aa652929b8ab26330025e6794141bfb52e8c8d06f9d6c5dbcda4865c86f92d1bda55ce6cdec4360cffd8271930084da13d112a2c246a2530b4e6dea289e144c8b3d5ddf0a68764d362bd58ce01450b2c4a56481dacf1034c2c0dc98545170355c431cddfa03466dd2bd2fa6f46119f47bcb1e68120e55c4aafffd31c09289d2502fa4a2e9793c6364d2d23163cbc1a92ddb774413167ff09bff6e0de02acc474f2091881a0bf63a66", 0xce}, {&(0x7f0000000b40)="26c9c08dacbab8e093d4a0ce0d9ad250e5273f4b963548d1ecfbcdc3c94b06f876fb2bbb9bb94284ad88536a11bda40dc0cfe161c689c915836657dd716a4cd179dcea87efac946e266edefd1d5b7f22ab102ca451b4", 0x56}], 0x9, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x8200, 0x28) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) setsockopt(r7, 0x70e, 0x9, &(0x7f0000000180)="8cca9f677fe873d0f8b42f5d753fadc1f057e4d256ed0521a0b1ab4b40beed56d5da050c781653b40a05b8", 0x2b) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000140)={0x400, 0x0, 0x1a, &(0x7f0000000100)="5efcf87d85ac31a1c03b81b65aa321ba05f4ec4033bfc36271dc"}) r8 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x41000) ioctl$DRM_IOCTL_AUTH_MAGIC(r8, 0x40046411, &(0x7f0000000080)=0x6) ioctl(r5, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:53 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x0) [ 425.485945][T15021] Restarting kernel threads ... done. 11:49:53 executing program 5: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) [ 425.649780][T15028] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = syz_open_procfs(r2, &(0x7f0000000040)='pagemap\x00') ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000400)="75b8febd605b6524eef9d95fa94676cd505db188390a33fb75cf525d4f382b4f7deb641a7ab00a0c8540ebaa36a676565809c676542beef47ac0605e32dbe8dd2a42fd9ee86501aa7d797ca190e2b8f571e5e30ef07a8bbc95859cdcb7e1463f6d0b52918ae0d368e0262038436c25439443de29f5eec892d28580d9a0a14c31998e8fe28866b828efd6e09c709af13c493e1c2d3039d0d575ce350d4828df49e3c5124265b064e50d75910881db2f4828629a57b30fdf379e3cc7e74acb0db245ac5740f42d314178a235474a4a87b230b3d979af737bef5e0e59d1ec76", 0xde}, {&(0x7f0000000180)="eccaeadcc65d1027133f9d5334a6a0a3a2c3148882e19a4a2983682e3b23f0234306d721fa10c305e221d7bf52054afe06fb868d4293b67b16be4ae5ab00995af42351c6b394f0f9b4d1396fc9a41709c448d42b1ae6e2d5d9e91cc938c5071f4f417ff8ca184114bb44", 0x6a}], 0x2, 0x15) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000500), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x1f, 0xfeffffff, &(0x7f00000006c0)="b9ff0343050d698cb89e40f088a8d501430500de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) fsetxattr$security_selinux(r12, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x6) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000140)) fcntl$setpipe(r4, 0x407, 0xffffffffffff4c75) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000100)=0x6) [ 425.791129][T15028] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:53 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000", 0x17}], 0x1}, 0x0) 11:49:53 executing program 5: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x464240, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0xd) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0xfffffffffffffe90) epoll_create(0x5b9) socket$inet_sctp(0x2, 0x5, 0x84) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r10, 0x2, 0x20}, &(0x7f0000000240)=0xc) r11 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r11, 0x400, 0x0) fcntl$setlease(r11, 0x400, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x400, 0x101) bind$alg(r11, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) ioctl$KVM_RUN(r7, 0xae80, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='ppp0!\x00', 0x0, r7) 11:49:53 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000", 0x17}], 0x1}, 0x0) [ 426.188080][T15056] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 426.305572][T15056] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:54 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000", 0x17}], 0x1}, 0x0) 11:49:54 executing program 5: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001}) 11:49:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:54 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2280) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000180)={0x0, 0x3, [0x80, 0x2b, 0xe07c, 0x46, 0x80000001, 0x0, 0x2, 0x3f]}) r3 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r4 = dup(r3) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/userio\x00', 0x400201, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r8 = gettid() write$cgroup_pid(r7, &(0x7f0000000040)=r8, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r11 = gettid() write$cgroup_pid(r10, &(0x7f0000000040)=r11, 0x12) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) fstat(r13, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() sendmsg$netlink(r4, &(0x7f0000000780)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x102a00}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000240)={0x120, 0x25, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@generic="997da3dda3f498906c", @nested={0x104, 0x79, [@typed={0xf8, 0x66, @binary="7a7ef08461eedabb24c1377c85dbbfbc242345c09470fea308ef82511e3fccb28bd526591630ff61cafd14e89806bd8ecf55b72d635f6093877d6437b6bbb19fa900689b97e9ad59593db37b9173d3679d8c874619c084d6a317b148b8f489bde834890f09668045e84f9cd7970f74879479b4afe389a349e5cb317fa4ccf5c6be66aa9169ed0fe716e8d66602d8f4654ac11d977a3f8dad8188d5891d71488bdf58590b509cb446933c943bf66afaa12580637aab32c7d1b42b76291fffe14fd77b21080e721ed74bccc38bb4832025cf89f098370a51236a895763efa0866a6c53f4c402fa1b88e64445e7c4bd88157f01"}, @typed={0x8, 0x35, @fd=r5}]}]}, 0x120}, {&(0x7f0000000380)={0xf0, 0x3b, 0x1, 0x70bd28, 0x25dfdbfe, "", [@nested={0xe0, 0x20, [@generic="edcb968676712dc5396831ba42097d323d", @generic="d5071a5fee8b9dae65763015f2ffdf1eae138a4048e99810cec7f3c4e9b8776f830b2591ba6a042dfab643b0cd41a276c682e3d842d50a742a104ab44db439d1c6a1bcdacd73e0a80fa2c5063674f52076bded17b3916954238ca6cfbd500c9aac0f86cf8cf3d782f4e8f01360e994ca4f2abf7d5bbbc4646bd317a65a", @generic="46222fe37c89648ac3287181650a35489a32b635bc6b8b91628963dc1913384dbd2fd84a38db01111ffac13556dd18573225a3423a86f3b73358e0dc5e89eab867a12bab1bb2", @typed={0x8, 0x4b, @ipv4=@multicast1}]}]}, 0xf0}, {&(0x7f0000000480)={0x1d8, 0x2e, 0x10, 0x70bd26, 0x25dfdbfb, "", [@generic="bac342b894e39509e1a4a1590e2269432d272cef8ce1aaf835394d3d67ad12c781995073ed8b89219bf14d6f85bbdd6b37ae85087e090f72d0e2473ad6b73b3596fbb81481352d5c8041c5b6d9a834545138906f3869d4be97c719856af583654bbd42690bca5569", @nested={0xac, 0x4b, [@generic="faaa29d8f930bd810609002469f7bb599cfc3d023ad140af3881a43ed6be39320b9e4d07b5b8e2d7dafdd03c0ce0968e0df25199aa3f5957cc0d0e3d007d785354e6ca1f100aecb1a230aa96480f30a4442b9dc5658efec991d38251d34a23a5b432257e040c0b5287a8e999b679a6cc24c03ab73167cf5de050bfc5a3696b0219a4385cd1dd8aec8227c75919002e7f137357826436384f8c352710eae8bc", @typed={0x8, 0x63, @pid=r8}]}, @typed={0xac, 0x7d, @binary="3974440811aabe08d046e5857781c4898ae8d3bb3f6111d53034dc1470893b5b6c7eb4a4f442c0be0e63f4c29f782c0d9648504692791962f8c5d4361b0d3fd0f4b54e0e5750bd1cfb4e8542dd7b8e5f5524b4543affdd3cf357d5d4ef0233ff4e4ccd426ca04a447f9ab3dd2137121b7dca0a0115b9927be7a268c5096eac2ea3674e29f9dd290091ea7c8e2c231bba7aa7488edff9e8e77bb85175b650a7c1cc154afe8bc003"}, @typed={0x8, 0x67, @ipv4=@empty}]}, 0x1d8}], 0x3, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r15}}}], 0x38, 0x20004480}, 0x20000000) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:54 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada", 0x23}], 0x1}, 0x0) [ 426.649754][T15081] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:54 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) [ 426.771659][T15081] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x800, 0x2, 0x3]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffffffffffff700b, 0x46]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x5]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1840}, 0x2001010) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:49:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:54 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada", 0x23}], 0x1}, 0x0) 11:49:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, 0x8) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:54 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 11:49:54 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 11:49:54 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada", 0x23}], 0x1}, 0x0) [ 427.198532][T15111] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000002ecff000200000000000000004000"/55]) [ 427.336219][T15111] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:55 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x980001}) 11:49:55 executing program 2: r0 = gettid() ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x1, 0x2, 0x3, 0x1}, 0xcbe, 0x869, 0x400}) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x23) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:55 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d8050005", 0x29}], 0x1}, 0x0) 11:49:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x8, 0x7, @value=0x5}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x3ff, 0x400) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r5 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x40100) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={r8, 0x8, "153039d4ea16e062"}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000240)={r9, 0xa2, 0x2, [0x100, 0x80000001]}, &(0x7f0000000280)=0xc) modify_ldt$write2(0x11, &(0x7f0000000380)={0xee, 0x1000, 0x0, 0x6991, 0x100000000, 0x87, 0x4, 0x0, 0xfffffffffffff402, 0xe}, 0x10) sendto$inet(r3, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:55 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x980001}) 11:49:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev+\x8d\x13M\xc9', 0x241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x14040) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000040)=[0x5, 0x3ff, 0x1f, 0xffffffffffffffc1, 0x7, 0x9, 0x7, 0x0, 0xddf1, 0xffffffffffffff7f], &(0x7f0000000080)=[0x23, 0x2, 0x4, 0x8, 0xfe, 0x3, 0x9, 0xfff], 0x2, 0x7, 0x10001, &(0x7f0000000180)=[0xc2d, 0x3, 0x6, 0x101, 0x80000000, 0xde, 0x80000000], &(0x7f0000000200)=[0xe65b, 0x9, 0x8, 0x2, 0xfdff, 0xff]}) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x1006) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000ff000000000000020000000200002facc61db2474e8575e0ebdabeff00000000000000000000018000000000000000000000000000000000882bce81b5c11a6a361a62d70443914605fc01d8a9843972535cc5cd4831ff84cc4def94126335867cd540b20149bcc329b47ec76f7460e24f461008179e6c347aae52df0aaf9b75249a328da06e7b4b568742a4c25ecaf034ff393ab6200039026f85d51bb3"]) [ 428.066881][T15160] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:55 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x0, 0x980001}) 11:49:55 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d8050005", 0x29}], 0x1}, 0x0) [ 428.186943][T15160] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="3a0b2358238a4c6ee26fad73fa71eafd6501853f0e9a38b9437d903e2840bdc48879cd1e2eaf4f1af6d2a41f9b451555e12c1d7ac9d1842a60bdd5b4c60f396c9373f6fa1fe1b0b50b5454bade36bcd8907d4408893b515a9508baffcdd480f50b699f44e673c814c420a3dd26dacff3962c6843e8ad89911d194e36690f0b9954672f0a2cf4cdbab6ad972c1109747e", 0x90}], 0x2, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffeffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}, 0x40) 11:49:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:55 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3}) 11:49:56 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d8050005", 0x29}], 0x1}, 0x0) [ 428.478472][T15181] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 428.630043][T15181] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:56 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/69, 0x2100000, 0x800, 0x7f}, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:56 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3}) 11:49:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='.d\te\xec\x05\x05\x00', 0x82040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) clone(0x100, &(0x7f0000000040)="2b3c08b3fcca5d632a", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000580)="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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="6455555500000000000000000200000002000000000000000000000000000000000000000000000000f8ffffffffffffff00f50000000000ed7dbc194f053704b667fd018da47a9d9060219efcfe0bf9f539c2a86bc2768d0fa314dcc0b5402fdcb6d02d69cb705ff8eeb67e00"/125]) 11:49:56 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c500", 0x2c}], 0x1}, 0x0) 11:49:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x4, 0x4, 0xffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xd5b76d8d5daf6093}, 0x10) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") recvfrom$unix(r3, &(0x7f0000000240)=""/152, 0x98, 0x2000, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:56 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3}) [ 429.087175][T15210] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:56 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c500", 0x2c}], 0x1}, 0x0) 11:49:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @adapter={0x8, 0x6, 0x1, 0x1, 0x8000}}]}) [ 429.244899][T15210] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0xa89}}) 11:49:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) recvfrom$rose(r2, &(0x7f0000000040)=""/116, 0x74, 0x2000, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8fbce0af5fc50318}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xdcc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x80800) 11:49:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 429.605553][T15246] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x3}}]}) 11:49:58 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c500", 0x2c}], 0x1}, 0x0) 11:49:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 11:49:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:58 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kcmp(r4, r0, 0x1, r7, r1) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(ccm-aes-ce)\x00'}, 0xffffffffffffff20) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0xd858127b3aeb3f6c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000810000000000000000f00000000000000000000000000400000000000000000000000000000000005e42ee66c3249c000000000000000010000000000000000000000000000000010000000000000300"/111], 0x68) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:58 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083", 0x2d}], 0x1}, 0x0) [ 430.571688][T15269] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa5064492916d98251883c182f2ec07ed91d53e745a1b28530915018508b8d9d2e61860cf64cf10f6aeee77bfa0a8b59b471db757c2688031c4c9aed23aa465965f1b7ea71edcd4e5535300574d16539766ddfaf61160d7c0a9b82b0dc6fc2483bd3859df044603d030c6c7e5756a8fc1b170258a4be18a53214c892b4f884d208a9ff3df9e9d08a12e953e001e7f2abecdb8a9cbdb5a8ced098", 0x11e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:49:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0xffffffffffffff1d) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x6}, &(0x7f0000000100)=0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:58 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8de6508b1c2df001, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40008400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x505c4958}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa5e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x8a002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='M\b\x80v/kvm\x00', 0x10000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)=0x6033f92a64209b63) [ 430.680152][T15269] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:58 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083", 0x2d}], 0x1}, 0x0) 11:49:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2000c00c, 0x0, 0x6) 11:49:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0xb7d1c98448f25690) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl(r0, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 431.033858][T15298] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:58 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083", 0x2d}], 0x1}, 0x0) [ 431.210662][T15298] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x400000, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:49:59 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0xcc2}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000100)=0x5, 0x4) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:49:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0xc00) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000300)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r8, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000080)={&(0x7f0000001480)={0xf8, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff6ecf}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2041004}, 0x20000800) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40200003de7b20d3a3329d4599aee444f455be421ae738808b2f1fd8fd256bb345b020fc8d46a2519ce82499cefdb8dc7707f95ceb4f565679d329622c34b0e7b1e022ef5333755fcbc71ecdb363237642f2800601639d1fe7a0f9e9e0a6ef48a22e6efe11f85c99d267c58129f58c36622aa43824a9888cbef68871a32b7f4022b7a90aa9a43d0deb61012bcf880dde1d46e0e2266731258a83e6596152ce7e59dec494c58b3d21cce2b686348587fff4d1f444ac54af0b0ba38434e46e7f199a7d161311e07a260c9406534662ab1c87a97a60a016c5c75d657631db7af1f3d136242ca34fe369dc70f", @ANYRES16=r8, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0xc810}, 0x40) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe8, r5, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff53}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10200000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000840) 11:49:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:49:59 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f000000dff8)=@abs={0x1}, 0x6e) 11:49:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x4, 0x0, [{0x8, 0x4, 0x0, 0x0, @adapter={0x7f, 0x4, 0x50, 0xfffffffffffffc00, 0x1}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x1, 0x5}}, {0x20000000, 0x1, 0x0, 0x0, @adapter={0x1, 0x7fff, 0xdd, 0x8, 0x3}}, {0x7fffffff, 0x3, 0x0, 0x0, @irqchip={0x1, 0x8000}}]}) 11:49:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2000c00c, 0x0, 0x6) [ 431.924874][T15342] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:49:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 432.021347][T15344] Enabling of bearer rejected, failed to enable media 11:49:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sendmsg$netlink(r0, &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000080c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20}, 0x0) 11:49:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(r3) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000240)=""/204, &(0x7f0000000100)=0xcc) fcntl$setlease(r2, 0x400, 0x2) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40008400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0000000006000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 11:49:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x1d) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20800, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x6) [ 432.234222][T15356] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 432.391390][T15356] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) [ 432.705950][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.773974][T15379] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 432.791872][T15377] device bridge_slave_0 left promiscuous mode [ 432.819363][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.893268][T15379] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:00 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 11:50:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x800) sendto$inet(r1, &(0x7f00000000c0)="76145991efc45a142532321f3182c462a95f18d653ff5929e0c1a96e3c401f22190d1d902b281ddafec85028c11751e5c262a96fe3d8a1f5476843", 0x0, 0x0, 0x0, 0xfffffffffffffe1a) 11:50:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)) 11:50:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2000c00c, 0x0, 0x6) 11:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) 11:50:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) [ 433.297776][T15398] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") dup(r2) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:50:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 433.432189][T15398] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:01 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x200000000000007) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) 11:50:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/198, 0xc6}], 0x3, &(0x7f00000013c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) [ 433.791891][T15422] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 433.903847][T15422] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 11:50:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xa) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2000c00c, 0x0, 0x6) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x40}], 0x2, &(0x7f0000000040), &(0x7f0000000080)={0xf5ba}, 0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000580)=""/229) 11:50:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) sendto$inet(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffff33) 11:50:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2000c00c, 0x0, 0x6) 11:50:02 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x40, 0x3) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) uselib(&(0x7f00000000c0)='./file0\x00') r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000001c0)={r6, 0x9}, &(0x7f0000000200)=0x8) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:50:02 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x0]}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000080)={0x5c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'ovf\x00', 0x20, 0x9, 0x7b}, 0x2c) 11:50:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @sint={0x40000, 0xffffffff}}]}) 11:50:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 434.803221][T15476] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20002 11:50:02 executing program 0: socket$caif_seqpacket(0x25, 0x5, 0x2) syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0x200, 0x0) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xfb}, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast}, [@null, @rose, @default, @bcast, @remote, @null, @default, @rose]}, &(0x7f0000000240)=0x48) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x7b453da) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 435.024774][T15552] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='/dev/kvm\x00', 0x9, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x8) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="1107d59f2f4651ad10462b") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) [ 435.069759][T15476] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20002 [ 435.158157][T15552] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:02 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7fffffff) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x66f) acct(&(0x7f0000000300)='./file0\x00') ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6900000000, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[]}, 0x0) r2 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x53d2000000000000}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xe803}], 0x1}, 0x0) 11:50:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 435.278983][T15595] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:50:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.ov\x02\x00\x00\x00y.u\x81per\x00', &(0x7f0000000180)={0x0, 0xfb, 0x6, 0x1, 0x8001, "8e337eed1f000000005d7300", "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"}, 0xfffffffffffffdb2, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000080)={0xaf, 0x4, 0x4, 0x0, 0x7f, 0x401, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) 11:50:03 executing program 0: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000200)="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", 0xfc) [ 435.505208][T15704] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 435.575896][T15704] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 435.671866][T15714] netlink: 'syz-executor.0': attribute type 12 has an invalid length. 11:50:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:03 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)="7c7f9ab528b5db8ce9d46110fdfa863ba959e9bfeff167bb00118feacb5f29469d34e3af5ff050bb0dc0d8e50f694f3ee77f3698c984266d39ca2b6910e2a48b7cd477265895542f0b7740e5bff84da5d64f17d3e4202656cb189fc41c010d2c85956f", 0x63}], 0x1, 0x2) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:50:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:50:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x40000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r3, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:50:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)={[{0x1, 0x47, 0xcd0, 0x9, 0x2, 0xea24, 0x8, 0xe50d, 0x8, 0xfffffffffffffbff, 0x10001, 0x4, 0x3}, {0x1, 0x10000, 0x1, 0x0, 0xfd, 0x8, 0x4, 0x400, 0x7, 0x100, 0x15c5, 0xffffffff, 0x3}, {0x0, 0x5, 0x8, 0x8, 0x800, 0x6938, 0x2, 0x5, 0x4, 0x8, 0x1, 0x48000000000, 0x299}], 0x8b42}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) 11:50:03 executing program 0: keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000640)={0x0, 0x0}) semop(0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x0, @remote}}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, 0x0, r2) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) seccomp(0x1, 0x3, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3e1, 0x0, 0x0, 0x0) [ 436.153263][T15736] gfs2: not a GFS2 filesystem 11:50:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) [ 436.341780][T15736] gfs2: not a GFS2 filesystem 11:50:04 executing program 5: lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='user.u'], &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xd, 0x0) 11:50:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffff5e4, 0x40800) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x10000, 0x1000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000080c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20}, 0x0) 11:50:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/198, 0xc6}], 0x3, &(0x7f00000013c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) 11:50:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x2, r4}) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:50:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) personality(0x4000009) fcntl$setlease(r1, 0x400, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setrlimit(0xb, &(0x7f0000000000)={0xfffffffffffffffe, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253eff735143f05718cdc522dfc3a857dc7edfc49a7b0fadafa5318fc72030738f674dc2e1007c2537a", 0x61, 0x400}], 0x0, 0x0) 11:50:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010008080800418e00000004fcff", 0x58}], 0x1) ppoll(&(0x7f0000000000)=[{r2}, {r1}, {r0}], 0x3, &(0x7f0000000300), 0x0, 0x0) 11:50:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:05 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f00002a4000/0x2000)=nil, 0x2000, 0x3, 0x810, r3, 0x0) getrandom(&(0x7f0000000000)=""/44, 0x600090140129736, 0x7) r4 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r5 = dup(r4) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r5, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='\x00'], 0x0, 0x1080) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x6, 0x1}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f0000000400)={0x6, 0x2, @stop_pts=0x100000001}) tkill(r0, 0x18) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r8}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000280)=@req3={0x400, 0x7ff, 0x5d8, 0x6, 0x6964, 0x200, 0xffffffffffff0a78}, 0x1c) fcntl$setlease(r7, 0x400, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 437.531751][T15912] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 437.621321][T15922] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities 11:50:05 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = timerfd_create(0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) 11:50:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0x3f, 0x6e20, 0x2, 0x1, 0x30}) 11:50:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 437.820398][T15922] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities 11:50:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253eff735143f05718cdc522dfc3a857dc7edfc49a7b0fadafa5318fc72030738f674dc2e1007c2537a", 0x61, 0x400}], 0x0, 0x0) 11:50:05 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, 0xffffffffffffffff, 0x2) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) socket(0x10, 0x2, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file0\x00') mkdirat(r6, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20000008) renameat2(r6, &(0x7f0000000140)='./file0/file0\x00', r6, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000000c0)) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f00009fa000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r7, 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r8, 0x400, 0x0) 11:50:05 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000000000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540), 0x53}, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001e9, 0x0) 11:50:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x280041, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) r3 = socket$caif_stream(0x25, 0x1, 0x1) accept4(r3, 0x0, 0x0, 0x80400) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) sendto$inet(r5, &(0x7f0000000040), 0x0, 0x10, 0x0, 0x0) 11:50:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 438.345041][T15960] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities 11:50:06 executing program 5: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000300)="2400000018002551075c0165ff0ffc021c14000000100f0504e1003e0800160000000000", 0x24) 11:50:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = dup2(0xffffffffffffffff, r2) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000080)={0x1, "0cbafc6bf17df31291a55c752edd9d63d1022c253bd214312ee745774724a7d2", 0x1}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x1) 11:50:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000000020000008200000000000000000848789804b55fe2dee09c620000000000000000000000000000000000000000e900"/68]) [ 438.545713][T15982] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253eff735143f05718cdc522dfc3a857dc7edfc49a7b0fadafa5318fc72030738f674dc2e1007c2537a", 0x61, 0x400}], 0x0, 0x0) [ 438.691202][T15982] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:06 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c) socket$inet(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x7b) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 11:50:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 438.977422][T15999] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities 11:50:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x8b56f5b054bc2819) ioctl(r2, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$addseals(r3, 0x409, 0x1) [ 439.229628][T16016] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 439.356446][T16016] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 11:50:07 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040)={0x1}, 0x8) 11:50:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000000000200000000040000000000000000000000000000000000000000000000000000000000000000050000000000"]) 11:50:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f5fffbf7000000000000000085000000170000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 11:50:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008112, &(0x7f0000000040)="11cea505540bcfe47bf070f57bf09a22065593b90e66c7b9da481a3697a7115ea0d34724df623d73433d89a7953830e07aa66eaf1ab0926fd7cc030cb71a7750946cc289bd36e5b43c4ef55d1f697ded3c37d49ea72a80dd36e263ae038aa94de07a4e1e3d80a4a106bf5ae98d13a6d7c45b01276fa3b12873e75957989ccfe3f23525fb3d98b9") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/133) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000240)) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, 0xfffffffffffffffd) sendto$inet(r1, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:50:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getown(r0, 0x9) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38f37fdba006c4fd49871b0f016700283d3842"], 0x0, 0x13}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:50:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sendmsg$netlink(r0, &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000080c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20}, 0x0) 11:50:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") sendto$inet(r2, &(0x7f0000000040), 0x74f12, 0x0, 0x0, 0x31e2c79ced742c8) 11:50:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) r2 = dup3(0xffffffffffffffff, r1, 0xa9df6de46490ebeb) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x102, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000300)) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x15, 0x71, &(0x7f0000000000)="f6e44b5d560f34b0dd16a7aba444e68f337106e01690698ceced3818ab9b622f005adfb22953e9825e4a9a8fc828f4908e781cb6109d33652c77c15e400ddf8ded095c709327ce27facf933e5fda1e5f0d0876bebca79b5580d96f10d4e5714442ada92bff2e89299cb33bc33ad8827f87"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40008400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc4, r5, 0x621, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x1e336bd62a8cf257}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() r6 = geteuid() quotactl(0x0, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000140)="554eb0bb823afa001b4e6c6d0159cbf9f84eedf463bcf387bf23df54216818b5f22ca825305e9a4b22e48cfbad677df130433a2514c2fac2e53eb2e54d78fe78e8a484882d3092b62f9dd7b39e1c42a680b3d085e30191adb60a60a74553082924a51af3044b7562b9") r7 = geteuid() quotactl(0x0, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000140)="554eb0bb823afa001b4e6c6d0159cbf9f84eedf463bcf387bf23df54216818b5f22ca825305e9a4b22e48cfbad677df130433a2514c2fac2e53eb2e54d78fe78e8a484882d3092b62f9dd7b39e1c42a680b3d085e30191adb60a60a74553082924a51af3044b7562b9") r8 = geteuid() quotactl(0x0, &(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000140)="554eb0bb823afa001b4e6c6d0159cbf9f84eedf463bcf387bf23df54216818b5f22ca825305e9a4b22e48cfbad677df130433a2514c2fac2e53eb2e54d78fe78e8a484882d3092b62f9dd7b39e1c42a680b3d085e30191adb60a60a74553082924a51af3044b7562b9") getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [{0x2, 0x3, r2}, {0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x3, r5}, {0x2, 0x2, r6}, {0x2, 0x5772c27b2ec83943, r7}, {0x2, 0x1, r8}, {0x2, 0x1, r9}], {0x4, 0x4}, [{0x8, 0x7, r10}], {}, {0x20, 0x4}}, 0x6c, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r11 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400400) getsockopt$netrom_NETROM_T2(r11, 0x103, 0x2, &(0x7f0000000100)=0x7fffffff, &(0x7f0000000180)=0x4) 11:50:08 executing program 5: r0 = fanotify_init(0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/45, 0x2d}], 0x1) 11:50:08 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000000)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000100)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000180)=',eth0$\x00', &(0x7f00000001c0)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000200)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000240)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000280)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f00000002c0)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', &(0x7f0000000300)=')^wlan0\'\x00'], 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:50:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/24) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:08 executing program 0: set_mempolicy(0x1, 0x0, 0x0) io_setup(0x8, &(0x7f0000000240)) 11:50:08 executing program 4: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000003c0)=0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0xfffd) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x8200}]) 11:50:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x7f', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 441.103607][T16211] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 441.212621][T16211] CPU: 0 PID: 16211 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 441.221760][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.232089][T16211] Call Trace: [ 441.235583][T16211] dump_stack+0x172/0x1f0 [ 441.239968][T16211] dump_header+0x177/0x1152 [ 441.244490][T16211] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 441.250420][T16211] ? ___ratelimit+0x2c8/0x595 [ 441.255215][T16211] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 441.261077][T16211] ? lockdep_hardirqs_on+0x418/0x5d0 [ 441.266395][T16211] ? trace_hardirqs_on+0x67/0x240 [ 441.271447][T16211] ? pagefault_out_of_memory+0x11c/0x11c [ 441.277876][T16211] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 441.283704][T16211] ? ___ratelimit+0x60/0x595 [ 441.283719][T16211] ? do_raw_spin_unlock+0x57/0x270 [ 441.283740][T16211] oom_kill_process.cold+0x10/0x15 [ 441.283758][T16211] out_of_memory+0x334/0x1340 [ 441.293527][T16211] ? lock_downgrade+0x920/0x920 [ 441.293548][T16211] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 441.293566][T16211] ? oom_killer_disable+0x280/0x280 [ 441.293591][T16211] mem_cgroup_out_of_memory+0x1d8/0x240 [ 441.325037][T16211] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 441.325060][T16211] ? do_raw_spin_unlock+0x57/0x270 [ 441.325077][T16211] ? _raw_spin_unlock+0x2d/0x50 [ 441.325095][T16211] try_charge+0xf4b/0x1440 [ 441.325117][T16211] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 441.325131][T16211] ? percpu_ref_tryget_live+0x111/0x290 [ 441.325151][T16211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.325169][T16211] ? __kasan_check_read+0x11/0x20 [ 441.335980][T16211] ? get_mem_cgroup_from_mm+0x156/0x320 [ 441.335999][T16211] mem_cgroup_try_charge+0x136/0x590 [ 441.336013][T16211] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 441.336031][T16211] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 441.336049][T16211] __handle_mm_fault+0x1e34/0x3f20 [ 441.336069][T16211] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 441.336098][T16211] ? __kasan_check_read+0x11/0x20 [ 441.336119][T16211] handle_mm_fault+0x1b5/0x6c0 [ 441.336137][T16211] __do_page_fault+0x536/0xdd0 [ 441.336159][T16211] do_page_fault+0x38/0x590 [ 441.420745][T16211] page_fault+0x39/0x40 [ 441.424906][T16211] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 441.431682][T16211] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 441.451454][T16211] RSP: 0018:ffff888058407d90 EFLAGS: 00010246 [ 441.457610][T16211] RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000040 [ 441.465686][T16211] RDX: 0000000000000040 RSI: ffff888058407e30 RDI: 0000000020053000 [ 441.473683][T16211] RBP: ffff888058407dc8 R08: 1ffff1100b080fc6 R09: ffffed100b080fce [ 441.481645][T16211] R10: ffffed100b080fcd R11: ffff888058407e6f R12: 0000000020053000 [ 441.489611][T16211] R13: ffff888058407e30 R14: 0000000020053040 R15: 00007ffffffff000 [ 441.497614][T16211] ? _copy_to_user+0x146/0x160 [ 441.502407][T16211] urandom_read+0x138/0x6f0 [ 441.507056][T16211] ? get_random_bytes_arch+0x420/0x420 [ 441.512546][T16211] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 441.518018][T16211] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 441.523740][T16211] ? do_syscall_64+0x26/0x760 [ 441.528543][T16211] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.534846][T16211] ? do_syscall_64+0x26/0x760 [ 441.539922][T16211] __x64_sys_getrandom+0xf7/0x1c0 [ 441.544981][T16211] do_syscall_64+0xfa/0x760 [ 441.549577][T16211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.555551][T16211] RIP: 0033:0x4598e9 [ 441.559445][T16211] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.579075][T16211] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 441.587495][T16211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 441.595464][T16211] RDX: 0000000000000000 RSI: ffffffffffffffea RDI: 0000000020000080 [ 441.603436][T16211] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.611572][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 441.619535][T16211] R13: 00000000004c0468 R14: 00000000004d2880 R15: 00000000ffffffff [ 441.638324][T16211] memory: usage 306572kB, limit 307200kB, failcnt 548 [ 441.656142][T16211] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.667513][T16211] Memory cgroup stats for /syz2: [ 441.667658][T16211] anon 5681152 [ 441.667658][T16211] file 293773312 [ 441.667658][T16211] kernel_stack 983040 [ 441.667658][T16211] slab 8880128 [ 441.667658][T16211] sock 0 [ 441.667658][T16211] shmem 293646336 [ 441.667658][T16211] file_mapped 258441216 [ 441.667658][T16211] file_dirty 0 [ 441.667658][T16211] file_writeback 0 [ 441.667658][T16211] anon_thp 2097152 [ 441.667658][T16211] inactive_anon 258441216 [ 441.667658][T16211] active_anon 41009152 11:50:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000000), 0x82000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) [ 441.667658][T16211] inactive_file 0 [ 441.667658][T16211] active_file 0 [ 441.667658][T16211] unevictable 0 [ 441.667658][T16211] slab_reclaimable 2162688 [ 441.667658][T16211] slab_unreclaimable 6717440 [ 441.667658][T16211] pgfault 325545 [ 441.667658][T16211] pgmajfault 0 [ 441.667658][T16211] workingset_refault 0 [ 441.667658][T16211] workingset_activate 0 [ 441.667658][T16211] workingset_nodereclaim 0 [ 441.667658][T16211] pgrefill 33 [ 441.667658][T16211] pgscan 33 [ 441.667658][T16211] pgsteal 0 11:50:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs(0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 11:50:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 11:50:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x8c', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:09 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = gettid() r3 = getpgid(0x0) kcmp(r2, r3, 0x0, r1, r0) 11:50:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x802000, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) [ 441.917465][T16211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15898,uid=0 [ 442.076913][T16211] Memory cgroup out of memory: Killed process 15898 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 11:50:09 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000), 0x35c) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRES16, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC, @ANYBLOB="2c131cf357ff2468af10c3c53160d88a01d1ed08824a0b0a5bb4cca36b424f7eedb062f316f2b73a552c31bd24ba0976cb511c"]], @ANYRESDEC, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="8e5b8e6fc492960c570a86348e1ad160842dfdbba14ea46c2a9fc8b0754115c4cd227fbb0c5698dfca01c18aacfd024233a4bd4dc37fa289d49f9258ed831e1f39404a63be44d1fbf2772de6fb36f0c9cf991badc41e61b0e4c6d918aaf263b32cf1"], @ANYPTR, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES16, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES32], @ANYRES64, @ANYRESOCT], @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT], @ANYRES32, @ANYRESDEC, @ANYRES16=0x0], 0xddd2) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 442.204902][T15898] [ 442.207277][T15898] ============================================ [ 442.213422][T15898] WARNING: possible recursive locking detected [ 442.219568][T16258] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 442.219602][T16258] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 442.226583][T15898] 5.3.0-rc6-next-20190830 #75 Not tainted [ 442.226586][T15898] -------------------------------------------- [ 442.226592][T15898] syz-executor.2/15898 is trying to acquire lock: [ 442.226598][T15898] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __mmu_notifier_invalidate_range_end+0x0/0x360 [ 442.226626][T15898] [ 442.226626][T15898] but task is already holding lock: [ 442.226630][T15898] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 442.226654][T15898] [ 442.226654][T15898] other info that might help us debug this: [ 442.237007][ T1065] oom_reaper: reaped process 15898 (syz-executor.2), now anon-rss:0kB, file-rss:34836kB, shmem-rss:11480kB [ 442.242333][T15898] Possible unsafe locking scenario: [ 442.242333][T15898] [ 442.242338][T15898] CPU0 [ 442.242341][T15898] ---- [ 442.242343][T15898] lock(mmu_notifier_invalidate_range_start); [ 442.242351][T15898] lock(mmu_notifier_invalidate_range_start); [ 442.242358][T15898] [ 442.242358][T15898] *** DEADLOCK *** [ 442.242358][T15898] [ 442.242361][T15898] May be due to missing lock nesting notation [ 442.242361][T15898] [ 442.242375][T15898] 1 lock held by syz-executor.2/15898: [ 442.253340][T16194] cgroup: fork rejected by pids controller in /syz2 [ 442.255010][T15898] #0: ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 442.255042][T15898] [ 442.255042][T15898] stack backtrace: [ 442.255054][T15898] CPU: 1 PID: 15898 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 442.255066][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.330119][T16194] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 442.331435][T15898] Call Trace: [ 442.331458][T15898] dump_stack+0x172/0x1f0 [ 442.331478][T15898] __lock_acquire.cold+0x15d/0x385 [ 442.421744][T15898] ? mark_held_locks+0xf0/0xf0 [ 442.426530][T15898] ? unmap_page_range+0x1df4/0x2380 [ 442.431804][T15898] lock_acquire+0x190/0x410 [ 442.436451][T15898] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 442.443389][T15898] __mmu_notifier_invalidate_range_end+0x3c/0x360 [ 442.449803][T15898] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 442.456736][T15898] ? __mmu_notifier_invalidate_range_start+0x1a5/0x210 [ 442.463580][T15898] __oom_reap_task_mm+0x3fa/0x490 [ 442.468603][T15898] ? process_shares_mm+0x130/0x130 [ 442.473714][T15898] ? rcu_gp_is_expedited+0x70/0x70 [ 442.478990][T15898] ? __mmu_notifier_release+0x217/0x3c0 [ 442.484617][T15898] exit_mmap+0x42c/0x530 [ 442.488853][T15898] ? __ia32_sys_munmap+0x80/0x80 [ 442.493787][T15898] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 442.499337][T15898] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 442.505392][T15898] ? trace_hardirqs_on+0x67/0x240 [ 442.510413][T15898] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.516639][T15898] ? __khugepaged_exit+0xcf/0x410 [ 442.521655][T15898] mmput+0x179/0x4d0 [ 442.525542][T15898] do_exit+0x823/0x2e60 [ 442.529689][T15898] ? mm_update_next_owner+0x640/0x640 [ 442.535259][T15898] ? lock_downgrade+0x920/0x920 [ 442.540204][T15898] ? _raw_spin_unlock_irq+0x28/0x90 [ 442.545391][T15898] ? get_signal+0x392/0x2500 [ 442.549973][T15898] ? _raw_spin_unlock_irq+0x28/0x90 [ 442.555492][T15898] do_group_exit+0x135/0x360 [ 442.560267][T15898] get_signal+0x47c/0x2500 [ 442.564692][T15898] ? _raw_spin_unlock_irq+0x5e/0x90 [ 442.569894][T15898] ? finish_task_switch+0x147/0x720 [ 442.575108][T15898] do_signal+0x87/0x1700 [ 442.579341][T15898] ? __sched_text_start+0x8/0x8 [ 442.584187][T15898] ? setup_sigcontext+0x7d0/0x7d0 [ 442.589306][T15898] ? __kasan_check_read+0x11/0x20 [ 442.594408][T15898] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.600713][T15898] ? exit_to_usermode_loop+0x43/0x380 [ 442.606074][T15898] ? do_syscall_64+0x65f/0x760 [ 442.610846][T15898] ? exit_to_usermode_loop+0x43/0x380 [ 442.616206][T15898] ? lockdep_hardirqs_on+0x418/0x5d0 [ 442.621487][T15898] ? trace_hardirqs_on+0x67/0x240 [ 442.626503][T15898] exit_to_usermode_loop+0x286/0x380 [ 442.631786][T15898] do_syscall_64+0x65f/0x760 [ 442.636453][T15898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.642331][T15898] RIP: 0033:0x4598e9 [ 442.646221][T15898] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.666472][T15898] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 442.675745][T15898] RAX: fffffffffffffdfe RBX: 0000000000000002 RCX: 00000000004598e9 [ 442.683826][T15898] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000040 [ 442.691789][T15898] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.699751][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 442.707741][T15898] R13: 00000000004c6ecf R14: 00000000004dc450 R15: 00000000ffffffff [ 442.715897][T16194] CPU: 0 PID: 16194 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 442.725101][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.735157][T16194] Call Trace: [ 442.738676][T16194] dump_stack+0x172/0x1f0 [ 442.743008][T16194] dump_header+0x177/0x1152 [ 442.747539][T16194] ? ___ratelimit+0xf8/0x595 [ 442.752835][T16194] ? trace_hardirqs_on+0x67/0x240 [ 442.758039][T16194] ? pagefault_out_of_memory+0x11c/0x11c [ 442.759587][T15898] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 442.763676][T16194] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 442.763687][T16194] ? ___ratelimit+0x60/0x595 [ 442.763703][T16194] ? do_raw_spin_unlock+0x57/0x270 [ 442.770814][T15898] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 442.777059][T16194] oom_kill_process.cold+0x10/0x15 [ 442.777073][T16194] out_of_memory+0x334/0x1340 [ 442.777086][T16194] ? lock_downgrade+0x920/0x920 [ 442.777099][T16194] ? oom_killer_disable+0x280/0x280 [ 442.777119][T16194] mem_cgroup_out_of_memory+0x1d8/0x240 [ 442.822558][T16194] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 442.828200][T16194] ? do_raw_spin_unlock+0x57/0x270 [ 442.833366][T16194] ? _raw_spin_unlock+0x2d/0x50 [ 442.838321][T16194] try_charge+0xf4b/0x1440 [ 442.842748][T16194] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 442.848298][T16194] ? get_mem_cgroup_from_mm+0x139/0x320 [ 442.853845][T16194] ? __kasan_check_read+0x11/0x20 [ 442.859022][T16194] ? lock_downgrade+0x920/0x920 [ 442.863960][T16194] ? percpu_ref_tryget_live+0x111/0x290 [ 442.869514][T16194] __memcg_kmem_charge_memcg+0x71/0xf0 [ 442.874984][T16194] ? memcg_kmem_put_cache+0x50/0x50 [ 442.880538][T16194] ? get_mem_cgroup_from_mm+0x156/0x320 [ 442.886091][T16194] __memcg_kmem_charge+0x13a/0x3a0 [ 442.891215][T16194] __alloc_pages_nodemask+0x4f7/0x900 [ 442.896781][T16194] ? __alloc_pages_slowpath+0x2540/0x2540 [ 442.902608][T16194] ? percpu_ref_put_many+0xb6/0x190 [ 442.908017][T16194] ? trace_hardirqs_on+0x67/0x240 [ 442.914377][T16194] copy_process+0x3f8/0x6830 [ 442.918980][T16194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 442.925573][T16194] ? hrtimer_try_to_cancel+0x8a/0x5e0 [ 442.931133][T16194] ? __cleanup_sighand+0x60/0x60 [ 442.936083][T16194] ? __kasan_check_write+0x14/0x20 [ 442.941325][T16194] ? rwlock_bug.part.0+0x90/0x90 [ 442.946367][T16194] ? debug_object_free+0x59/0x390 [ 442.951586][T16194] _do_fork+0x146/0xfa0 [ 442.955771][T16194] ? copy_init_mm+0x20/0x20 [ 442.960306][T16194] ? hrtimer_nanosleep+0x2c9/0x550 [ 442.965522][T16194] ? nanosleep_copyout+0x110/0x110 [ 442.971421][T16194] __x64_sys_clone+0x1ab/0x270 [ 442.976357][T16194] ? __ia32_sys_vfork+0xd0/0xd0 [ 442.981194][T16194] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 442.987242][T16194] ? trace_hardirqs_off_caller+0x65/0x230 [ 442.992957][T16194] ? trace_hardirqs_on+0x67/0x240 [ 442.998065][T16194] do_syscall_64+0xfa/0x760 [ 443.002728][T16194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.008780][T16194] RIP: 0033:0x45c2b9 [ 443.012742][T16194] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 443.032335][T16194] RSP: 002b:00007ffd15b950c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 443.041949][T16194] RAX: ffffffffffffffda RBX: 00007f8cbea2a700 RCX: 000000000045c2b9 [ 443.049992][T16194] RDX: 00007f8cbea2a9d0 RSI: 00007f8cbea29db0 RDI: 00000000003d0f00 [ 443.057955][T16194] RBP: 00007ffd15b952e0 R08: 00007f8cbea2a700 R09: 00007f8cbea2a700 [ 443.066449][T16194] R10: 00007f8cbea2a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 443.074490][T16194] R13: 00007ffd15b9517f R14: 0000000000020000 R15: 000055555648aed0 [ 443.087258][T16194] memory: usage 295484kB, limit 307200kB, failcnt 600 [ 443.096519][T16194] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.097377][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 443.103544][T16194] Memory cgroup stats for /syz2: [ 443.103641][T16194] anon 6221824 [ 443.103641][T16194] file 282152960 [ 443.103641][T16194] kernel_stack 1048576 [ 443.103641][T16194] slab 8880128 [ 443.103641][T16194] sock 0 [ 443.103641][T16194] shmem 282042368 [ 443.103641][T16194] file_mapped 246816768 [ 443.103641][T16194] file_dirty 0 [ 443.103641][T16194] file_writeback 0 [ 443.103641][T16194] anon_thp 2097152 [ 443.103641][T16194] inactive_anon 246816768 [ 443.103641][T16194] active_anon 41549824 [ 443.103641][T16194] inactive_file 0 [ 443.103641][T16194] active_file 0 [ 443.103641][T16194] unevictable 0 [ 443.103641][T16194] slab_reclaimable 2162688 [ 443.103641][T16194] slab_unreclaimable 6717440 [ 443.103641][T16194] pgfault 325677 [ 443.103641][T16194] pgmajfault 0 [ 443.103641][T16194] workingset_refault 0 [ 443.103641][T16194] workingset_activate 0 [ 443.103641][T16194] workingset_nodereclaim 0 [ 443.103641][T16194] pgrefill 33 [ 443.103641][T16194] pgscan 33 [ 443.103641][T16194] pgsteal 0 [ 443.119854][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 443.209053][T16194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9535,uid=0 [ 443.242411][T16194] Memory cgroup out of memory: Killed process 9535 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35796kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 443.261509][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 443.271636][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 443.288379][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env 11:50:10 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000180)) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:50:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sco\x00') r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x88) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffa, 0x12) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x581000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:10 executing program 4: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r0+30000000}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 11:50:10 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008106e00f80ecdb4cb9f207c804a01c0000004a0006000a0002000a0ada1b40d805000500c50083b8", 0xec}], 0x1}, 0x0) 11:50:10 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) 11:50:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xf5', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 443.317793][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 443.338258][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 443.345839][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 443.378001][T16322] bridge_slave_1: FDB only supports static addresses [ 443.386438][T16328] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 443.396863][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 443.399109][T16328] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 443.407908][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' 11:50:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000000)="11cea505540bcfe47bf070") r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, r3) [ 443.437727][T16329] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 443.459124][ T3891] kobject: 'loop2' (00000000eb1629c6): kobject_uevent_env [ 443.465412][T16327] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 443.474492][T16327] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 443.480757][ T3891] kobject: 'loop2' (00000000eb1629c6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 443.499965][T16329] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 443.542354][T16328] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env 11:50:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 443.582669][T16328] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:11 executing program 4: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r0+30000000}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 443.634818][T16329] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 443.642094][T16329] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 443.711049][T16327] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 443.719787][T16329] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 443.746424][T16329] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 443.747975][T16327] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xf6', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 443.826316][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 443.833568][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:50:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:50:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r0) openat$dlm_monitor(0xffffffffffffff9c, 0xffffffffffffffff, 0x34000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) bind$unix(r5, &(0x7f0000000040)=@file={0x4772625af0f9091d, './file0\x00'}, 0x6e) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r6 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$UHID_INPUT2(r6, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1006) [ 443.964272][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 443.975997][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 444.021400][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 444.049571][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 444.053859][T16465] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 444.090290][T16467] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 444.102281][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 444.119695][T16467] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:50:11 executing program 2: r0 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) wait4(r0, &(0x7f00000000c0), 0x4, &(0x7f0000000180)) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000100)=0x9) r3 = dup(r1) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace(0x8, r0) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11:50:11 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) [ 444.139990][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 444.140816][T16465] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 444.199990][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 444.236287][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:50:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xfb', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 444.257715][T16470] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 444.270552][T16470] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 444.299539][T16469] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 444.311855][ T3891] kobject: 'loop2' (00000000eb1629c6): kobject_uevent_env [ 444.334385][T16469] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 444.360657][ T3891] kobject: 'loop2' (00000000eb1629c6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 444.402632][T16465] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 444.427670][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 444.437437][T16485] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env 11:50:12 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) 11:50:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) [ 444.469627][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 444.485207][T16485] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 444.495928][T16465] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 444.577427][T16464] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 444.593984][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 444.622723][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 444.647547][T16464] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 444.706964][T16485] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 444.739939][T16485] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 444.740884][T16464] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env 11:50:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) [ 444.793118][T16464] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 444.818228][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 444.844176][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 444.844267][T16485] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 444.864283][T16485] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 444.873160][T16464] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env 11:50:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 444.898134][T16464] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xfe', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 444.973989][T16465] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.002620][T16465] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.014579][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env 11:50:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 445.034190][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.050830][T16469] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.076039][T16469] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.095510][T16511] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.102657][T16511] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.137181][T16513] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 445.161632][T16513] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.185520][T16464] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.198561][T16464] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.216203][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 445.223653][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 445.252515][T16464] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.270804][T16464] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.288004][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 445.311969][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 445.320966][T16464] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.339567][T16513] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 445.350984][T16513] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.353135][T16464] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100, 0x280) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r5, @ANYBLOB="eac60a06521fb9361aca", @ANYRES32=r6], @ANYBLOB="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", @ANYRES32=r8]) 11:50:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 11:50:12 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) 11:50:12 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) 11:50:12 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000340)=""/39) r1 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r1, 0x18) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x454ab3b4a5e396f9) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_NAME={0x1, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @empty, 0xe2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x362}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) rt_sigsuspend(&(0x7f0000000040), 0x8) [ 445.405481][ T3891] kobject: 'loop2' (00000000eb1629c6): kobject_uevent_env [ 445.412792][ T3891] kobject: 'loop2' (00000000eb1629c6): fill_kobj_path: path = '/devices/virtual/block/loop2' 11:50:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 445.458071][T16513] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 445.465400][T16513] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.477962][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 445.486666][T16534] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.493923][T16534] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 445.505528][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 445.523975][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 445.536751][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 445.562268][T16534] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.583262][ T3891] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 445.589678][T16528] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 445.591689][T16534] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 445.622888][ T3891] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.633419][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 445.643034][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.663655][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 445.672324][T16528] CPU: 1 PID: 16528 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 445.681448][T16528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.681526][T16535] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.691774][T16528] Call Trace: [ 445.691798][T16528] dump_stack+0x172/0x1f0 [ 445.691814][T16528] dump_header+0x177/0x1152 [ 445.691824][T16528] ? ___ratelimit+0xf8/0x595 [ 445.691837][T16528] ? trace_hardirqs_on+0x67/0x240 [ 445.691856][T16528] ? pagefault_out_of_memory+0x11c/0x11c [ 445.699180][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 445.702513][T16528] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 445.702525][T16528] ? ___ratelimit+0x60/0x595 [ 445.702538][T16528] ? do_raw_spin_unlock+0x57/0x270 [ 445.702559][T16528] oom_kill_process.cold+0x10/0x15 [ 445.710317][T16541] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 445.711468][T16528] out_of_memory+0x334/0x1340 [ 445.711482][T16528] ? lock_downgrade+0x920/0x920 [ 445.711500][T16528] ? oom_killer_disable+0x280/0x280 [ 445.731070][T16541] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 445.736954][T16528] ? __kasan_check_read+0x11/0x20 [ 445.736973][T16528] mem_cgroup_out_of_memory+0x1d8/0x240 [ 445.736986][T16528] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 445.736999][T16528] ? do_raw_spin_unlock+0x57/0x270 [ 445.737020][T16528] ? _raw_spin_unlock+0x2d/0x50 [ 445.786272][T16541] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 445.790053][T16528] try_charge+0xf4b/0x1440 [ 445.790076][T16528] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 445.827135][T16534] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.829978][T16528] ? percpu_ref_tryget_live+0x111/0x290 [ 445.829999][T16528] ? get_mem_cgroup_from_mm+0x16/0x320 [ 445.845887][T16534] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.848086][T16528] ? get_mem_cgroup_from_mm+0x156/0x320 [ 445.848099][T16528] mem_cgroup_try_charge+0x136/0x590 [ 445.848117][T16528] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 445.865647][T16535] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.869059][T16528] shmem_getpage_gfp+0x88e/0x2680 [ 445.869080][T16528] ? do_syscall_64+0xfa/0x760 [ 445.875805][T16534] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.879983][T16528] ? shmem_unuse_inode+0x1010/0x1010 [ 445.879998][T16528] ? alloc_set_pte+0xb7a/0x1780 [ 445.880020][T16528] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.898965][T16534] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 445.899670][T16528] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 445.938853][T16528] ? xas_find+0x317/0x8c0 [ 445.943190][T16528] shmem_fault+0x22a/0x7b0 [ 445.947623][T16528] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 445.951168][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 445.953614][T16528] ? lock_downgrade+0x920/0x920 [ 445.953645][T16528] ? pmd_val+0x85/0x100 [ 445.969883][T16528] __do_fault+0x111/0x540 [ 445.974219][T16528] ? do_raw_spin_unlock+0x57/0x270 [ 445.979336][T16528] __handle_mm_fault+0x2cb8/0x3f20 [ 445.984451][T16528] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 445.989994][T16528] ? __kasan_check_read+0x11/0x20 [ 445.995018][T16528] ? do_raw_spin_unlock+0x57/0x270 [ 445.996996][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 446.000127][T16528] ? trace_hardirqs_on+0x67/0x240 [ 446.000147][T16528] handle_mm_fault+0x1b5/0x6c0 [ 446.019737][T16528] __get_user_pages+0x7d4/0x1b30 [ 446.024695][T16528] ? mark_held_locks+0xf0/0xf0 [ 446.029466][T16528] ? follow_page_mask+0x1cf0/0x1cf0 [ 446.034853][T16528] ? __mm_populate+0x270/0x380 [ 446.039621][T16528] ? memset+0x32/0x40 [ 446.043704][T16528] populate_vma_page_range+0x20d/0x2a0 [ 446.049193][T16528] __mm_populate+0x204/0x380 [ 446.053793][T16528] ? populate_vma_page_range+0x2a0/0x2a0 [ 446.059420][T16528] ? __kasan_check_write+0x14/0x20 [ 446.064523][T16528] ? up_write+0x155/0x490 [ 446.067700][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 446.068952][T16528] vm_mmap_pgoff+0x213/0x230 [ 446.068969][T16528] ? randomize_stack_top+0x110/0x110 [ 446.068986][T16528] ? __kasan_check_read+0x11/0x20 [ 446.081498][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 446.086072][T16528] ? _copy_to_user+0x118/0x160 [ 446.086092][T16528] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.086108][T16528] ksys_mmap_pgoff+0xf7/0x630 [ 446.086123][T16528] ? find_mergeable_anon_vma+0x2e0/0x2e0 [ 446.086141][T16528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.118809][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 446.122149][T16528] ? __x64_sys_clock_gettime+0x16d/0x240 [ 446.122172][T16528] __x64_sys_mmap+0xe9/0x1b0 [ 446.129670][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 446.135313][T16528] do_syscall_64+0xfa/0x760 [ 446.135332][T16528] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.135342][T16528] RIP: 0033:0x4598e9 [ 446.135361][T16528] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.164729][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 446.165971][T16528] RSP: 002b:00007f8cbeaadc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 446.165984][T16528] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 446.165992][T16528] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 446.166000][T16528] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 446.166006][T16528] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f8cbeaae6d4 [ 446.166017][T16528] R13: 00000000004c5db4 R14: 00000000004da890 R15: 00000000ffffffff [ 446.170054][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 446.226028][T16528] memory: usage 307200kB, limit 307200kB, failcnt 649 [ 446.284191][T16528] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.296950][T16528] Memory cgroup stats for /syz2: [ 446.297059][T16528] anon 5386240 [ 446.297059][T16528] file 295133184 [ 446.297059][T16528] kernel_stack 917504 [ 446.297059][T16528] slab 8400896 [ 446.297059][T16528] sock 0 [ 446.297059][T16528] shmem 295157760 [ 446.297059][T16528] file_mapped 259928064 [ 446.297059][T16528] file_dirty 0 [ 446.297059][T16528] file_writeback 0 11:50:13 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) 11:50:13 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) openat(0xffffffffffffffff, 0x0, 0x40081, 0x8) [ 446.297059][T16528] anon_thp 2097152 [ 446.297059][T16528] inactive_anon 259928064 [ 446.297059][T16528] active_anon 40603648 [ 446.297059][T16528] inactive_file 0 [ 446.297059][T16528] active_file 0 [ 446.297059][T16528] unevictable 0 [ 446.297059][T16528] slab_reclaimable 2162688 [ 446.297059][T16528] slab_unreclaimable 6238208 [ 446.297059][T16528] pgfault 332079 [ 446.297059][T16528] pgmajfault 0 [ 446.297059][T16528] workingset_refault 0 [ 446.297059][T16528] workingset_activate 0 [ 446.297059][T16528] workingset_nodereclaim 0 [ 446.297059][T16528] pgrefill 33 [ 446.297059][T16528] pgscan 33 [ 446.297059][T16528] pgsteal 0 [ 446.392483][T16528] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16504,uid=0 [ 446.396183][T16541] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 446.408593][T16528] Memory cgroup out of memory: Killed process 16504 (syz-executor.2) total-vm:72840kB, anon-rss:164kB, file-rss:35804kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 446.417831][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 446.443267][T16541] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 446.453599][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 446.488151][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 446.518113][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 446.529419][T16541] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 446.548361][T16534] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 446.577723][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 446.584159][T16541] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 446.586790][T16535] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 446.597422][T16536] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 446.612161][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 446.634113][T16534] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 446.656866][T16535] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 446.659382][T16536] CPU: 1 PID: 16536 Comm: syz-executor.2 Not tainted 5.3.0-rc6-next-20190830 #75 [ 446.675698][T16536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.685780][T16536] Call Trace: [ 446.689243][T16536] dump_stack+0x172/0x1f0 [ 446.693588][T16536] dump_header+0x177/0x1152 [ 446.698105][T16536] ? ___ratelimit+0xf8/0x595 [ 446.702711][T16536] ? trace_hardirqs_on+0x67/0x240 [ 446.707725][T16536] ? pagefault_out_of_memory+0x11c/0x11c [ 446.713342][T16536] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 446.719229][T16536] ? ___ratelimit+0x60/0x595 [ 446.723802][T16536] ? do_raw_spin_unlock+0x57/0x270 [ 446.729625][T16536] oom_kill_process.cold+0x10/0x15 [ 446.734814][T16536] out_of_memory+0x334/0x1340 [ 446.739479][T16536] ? lock_downgrade+0x920/0x920 [ 446.744322][T16536] ? oom_killer_disable+0x280/0x280 [ 446.749516][T16536] mem_cgroup_out_of_memory+0x1d8/0x240 [ 446.755055][T16536] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 446.760669][T16536] ? do_raw_spin_unlock+0x57/0x270 [ 446.765766][T16536] ? _raw_spin_unlock+0x2d/0x50 [ 446.770602][T16536] try_charge+0xa2d/0x1440 [ 446.775098][T16536] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 446.780743][T16536] ? percpu_ref_tryget_live+0x111/0x290 [ 446.786270][T16536] ? get_mem_cgroup_from_mm+0x16/0x320 [ 446.791722][T16536] ? get_mem_cgroup_from_mm+0x156/0x320 [ 446.797248][T16536] mem_cgroup_try_charge+0x136/0x590 [ 446.802647][T16536] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 446.808261][T16536] shmem_getpage_gfp+0x88e/0x2680 [ 446.813269][T16536] ? shmem_unuse_inode+0x1010/0x1010 [ 446.818537][T16536] ? cpuacct_charge+0x1db/0x360 [ 446.823455][T16536] ? __kasan_check_read+0x11/0x20 [ 446.828527][T16536] shmem_fault+0x22a/0x7b0 [ 446.832929][T16536] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 446.838889][T16536] ? cpuacct_charge+0x1db/0x360 [ 446.843732][T16536] ? __kasan_check_read+0x11/0x20 [ 446.848738][T16536] ? pmd_val+0x85/0x100 [ 446.852874][T16536] ? add_mm_counter_fast.part.0+0x40/0x40 [ 446.858660][T16536] __do_fault+0x111/0x540 [ 446.862968][T16536] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.869194][T16536] __handle_mm_fault+0x2adf/0x3f20 [ 446.874290][T16536] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 446.879964][T16536] ? __kasan_check_read+0x11/0x20 [ 446.884980][T16536] ? trace_hardirqs_on+0x67/0x240 [ 446.889991][T16536] handle_mm_fault+0x1b5/0x6c0 [ 446.894748][T16536] __do_page_fault+0x536/0xdd0 [ 446.899595][T16536] do_page_fault+0x38/0x590 [ 446.904077][T16536] page_fault+0x39/0x40 [ 446.908302][T16536] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 446.914868][T16536] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 446.934458][T16536] RSP: 0018:ffff88808f8d7d90 EFLAGS: 00010246 [ 446.940504][T16536] RAX: 0000000000000001 RBX: 0000000000000040 RCX: 0000000000000040 [ 446.948456][T16536] RDX: 0000000000000040 RSI: ffff88808f8d7e30 RDI: 000000002014d000 [ 446.956405][T16536] RBP: ffff88808f8d7dc8 R08: 1ffff11011f1afc6 R09: ffffed1011f1afce [ 446.964369][T16536] R10: ffffed1011f1afcd R11: ffff88808f8d7e6f R12: 000000002014d000 [ 446.972320][T16536] R13: ffff88808f8d7e30 R14: 000000002014d040 R15: 00007ffffffff000 [ 446.980301][T16536] ? _copy_to_user+0x146/0x160 [ 446.985049][T16536] urandom_read+0x138/0x6f0 [ 446.989535][T16536] ? get_random_bytes_arch+0x420/0x420 [ 446.994985][T16536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.001214][T16536] ? __x64_sys_clock_gettime+0x16d/0x240 [ 447.006830][T16536] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 447.012882][T16536] __x64_sys_getrandom+0xf7/0x1c0 [ 447.017898][T16536] do_syscall_64+0xfa/0x760 [ 447.022402][T16536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.028283][T16536] RIP: 0033:0x4598e9 [ 447.032160][T16536] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.051745][T16536] RSP: 002b:00007f8cbea8cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 447.060140][T16536] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 447.068094][T16536] RDX: 0000000000000000 RSI: ffffffffffffffea RDI: 0000000020000080 [ 447.076053][T16536] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 447.084012][T16536] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cbea8d6d4 [ 447.092138][T16536] R13: 00000000004c0468 R14: 00000000004d2880 R15: 00000000ffffffff [ 447.125892][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 447.133094][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 447.155568][T16536] memory: usage 298348kB, limit 307200kB, failcnt 649 [ 447.162357][T16536] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.174402][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.184967][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.237633][ T3891] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.258867][T16571] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.268685][T16571] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.279271][ T3891] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.292755][T16571] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 447.300918][T16536] Memory cgroup stats for /syz2: [ 447.301026][T16536] anon 5386240 [ 447.301026][T16536] file 289275904 [ 447.301026][T16536] kernel_stack 917504 [ 447.301026][T16536] slab 8400896 [ 447.301026][T16536] sock 0 [ 447.301026][T16536] shmem 289230848 [ 447.301026][T16536] file_mapped 253980672 [ 447.301026][T16536] file_dirty 0 [ 447.301026][T16536] file_writeback 0 [ 447.301026][T16536] anon_thp 2097152 [ 447.301026][T16536] inactive_anon 253980672 [ 447.301026][T16536] active_anon 40603648 [ 447.301026][T16536] inactive_file 0 [ 447.301026][T16536] active_file 0 [ 447.301026][T16536] unevictable 0 [ 447.301026][T16536] slab_reclaimable 2162688 [ 447.301026][T16536] slab_unreclaimable 6238208 [ 447.301026][T16536] pgfault 333498 [ 447.301026][T16536] pgmajfault 0 [ 447.301026][T16536] workingset_refault 0 [ 447.301026][T16536] workingset_activate 0 [ 447.301026][T16536] workingset_nodereclaim 0 [ 447.301026][T16536] pgrefill 33 [ 447.301026][T16536] pgscan 33 [ 447.301026][T16536] pgsteal 0 [ 447.415342][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 447.423354][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 447.445459][T16571] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.452865][T16571] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.503333][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 447.513502][T16571] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.520199][T16536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15333,uid=0 [ 447.523441][T16571] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.536873][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 447.558281][ T3891] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.565972][T16536] Memory cgroup out of memory: Killed process 15333 (syz-executor.2) total-vm:72840kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:11480kB, UID:0 pgtables:163840kB oom_score_adj:1000 [ 447.566939][T16535] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.584391][ T3891] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.593287][T16535] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.614761][ T1065] oom_reaper: reaped process 15333 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:11480kB [ 447.623883][T16547] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.638665][T16547] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.641681][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 447.670507][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 447.683334][T16579] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.696898][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 447.703047][T15333] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.704158][T16579] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.721297][T15333] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.723130][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.784930][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.832040][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.902480][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.917103][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.944344][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.951336][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 447.977995][ T3891] kobject: 'loop2' (00000000eb1629c6): kobject_uevent_env [ 447.985980][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 447.987495][ T3891] kobject: 'loop2' (00000000eb1629c6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 447.993013][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000100)={@dev, @loopback}, &(0x7f0000000140)=0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000000000200000002000000000000000000000000000000000000000000000000000000000000000000000000000000a93b7b5a4de8e781a710584963f89d1752393351997951534ea16ed5e424325a775359a21a72aea1a47759922e48fac36f4b1f30b57542ba193979802a5d9ffc45b509f47552975ab5b86530e7956b54b3a59edc6690c64cf9029bdf5fe9a5fb4ae4ba3ba0de84307dbfc46b046b52fab726aae199f905196434d4ab7269d60701460b990ee89174898d8f73c6c89b4ad456f98d7fcfd0e6d4"]) [ 448.040028][T16532] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 448.050403][T16532] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:15 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) 11:50:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 11:50:15 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) 11:50:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:15 executing program 2: r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xfffffffffffffde7, 0x0) r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r3 = dup(r2) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000) tkill(r0, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) fcntl$addseals(r2, 0x409, 0xb) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/180, 0xb4}], 0x4, &(0x7f00000003c0)=""/178, 0xb2}, 0x100}, {{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/169, 0xa9}, {&(0x7f0000001680)=""/173, 0xad}, {&(0x7f0000001740)=""/127, 0x7f}], 0x6, &(0x7f0000001840)=""/218, 0xda}, 0xff}, {{&(0x7f0000001940)=@sco, 0x80, &(0x7f0000001a40)=[{&(0x7f00000019c0)=""/60, 0x3c}, {&(0x7f0000001a00)=""/30, 0x1e}], 0x2, &(0x7f0000001a80)=""/76, 0x4c}, 0x2}, {{&(0x7f0000001b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/245, 0xf5}, {&(0x7f0000001c80)=""/82, 0x52}, {&(0x7f0000001d00)=""/76, 0x4c}, {&(0x7f0000001d80)=""/72, 0x48}], 0x4, &(0x7f0000001e40)=""/68, 0x44}, 0xfff}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001ec0)=""/223, 0xdf}, {&(0x7f0000001fc0)=""/122, 0x7a}, {&(0x7f0000002040)=""/90, 0x5a}], 0x3}, 0x21}, {{&(0x7f0000002100)=@sco, 0x80, &(0x7f0000002240)=[{&(0x7f0000002180)=""/131, 0x83}], 0x1, &(0x7f0000002280)=""/4096, 0x1000}, 0x9}], 0x6, 0x100, 0x0) [ 448.116100][T16595] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 448.134713][T16595] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 448.170669][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 448.199955][T16595] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 448.213401][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 448.238704][T16603] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 448.254472][T16603] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 448.266943][T16595] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 448.284697][T16602] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 448.298582][T16595] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 448.304005][T16602] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 448.328556][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 448.357597][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 448.370602][T16595] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env 11:50:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 448.384830][T16595] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:16 executing program 3: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x7530}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x400000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) 11:50:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 448.525232][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 448.532486][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' 11:50:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000440)=""/235) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000100)={0x1f, 0x4, 0xfffffffffffffff9}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x1, 0x34}, 0x98) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000340)={'bond0\x00', 0xfffffffffffffeff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r8, 0xff, 0x4, 0x5, 0x5}, 0x14) [ 448.594703][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 448.602488][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:16 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) 11:50:16 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) 11:50:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 448.671850][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 448.691184][T16627] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 448.698670][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 448.709823][T16627] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 448.727794][T16629] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 448.741710][T16629] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 448.762498][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env 11:50:16 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 448.771663][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 448.791150][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 448.796750][T16627] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 448.806097][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 448.817880][T16627] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 448.821035][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 448.837148][T16629] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 448.844226][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 448.854840][T16629] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 448.866419][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env 11:50:16 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 448.898376][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 448.908729][T16627] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 448.927043][T16627] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 448.970044][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 448.990891][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:50:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:16 executing program 5: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 449.020818][ T3891] kobject: 'loop2' (00000000eb1629c6): kobject_uevent_env [ 449.033801][ T3891] kobject: 'loop2' (00000000eb1629c6): fill_kobj_path: path = '/devices/virtual/block/loop2' 11:50:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 449.087321][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 449.101551][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 449.112180][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 449.120807][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:16 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 449.177285][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 449.189895][T16660] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 449.206758][T16660] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 449.221544][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 449.244486][T16660] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 449.268292][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 449.281078][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 449.294317][T16660] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 449.310454][T16660] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 449.317983][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 449.366554][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 449.372689][T16660] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 449.386741][T16660] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 449.388146][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 449.434081][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 449.457917][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 449.474985][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 449.502077][T16625] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 449.530089][T16625] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 449.574428][T16625] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 449.584172][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 449.591325][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 449.611585][T16625] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 449.648097][T16629] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 449.679288][T16629] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 449.732737][T16681] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 449.767057][T16681] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 449.813044][T16625] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 449.848740][T16625] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 449.897696][T16625] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 449.910220][T16625] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:50:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x92d, 0x2, 0x7ff, 0x3, 0x2, 0x7088, 0x3, 0x408, 0x9, 0x0, 0x13e8000, 0x6f5, 0x2, 0xeadb, 0xefd, 0x8000], 0x1000, 0x5000}) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x40000) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000100)={&(0x7f0000002000/0x4000)=nil, 0xfff, 0xeb0d8a1fefb673a6, 0x0, &(0x7f0000000000/0x3000)=nil, 0x80000000}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000000000002000000020000000000e200"/56]) 11:50:17 executing program 4: clone(0x3103101ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:50:17 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 11:50:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:17 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 449.978630][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 449.999442][T16699] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 450.008810][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' 11:50:17 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 450.030867][T16699] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:17 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 450.085052][T16699] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 450.097372][T16710] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 450.121929][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 450.135757][T16710] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.139929][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:50:17 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 450.185292][T16699] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 450.192581][T16699] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 450.199184][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env 11:50:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 450.233815][T16710] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 450.238609][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 450.251065][T16710] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.306733][T16708] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 450.314885][T16699] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 450.322381][T16699] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 450.354306][T16708] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.395855][T16708] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env 11:50:18 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:50:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 450.426699][T16708] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.463266][T16710] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env 11:50:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 450.470171][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 450.480308][T16710] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.499944][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 450.524195][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 450.527045][T16717] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 450.531895][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 450.577273][T16710] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 450.581219][T16717] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.584575][T16710] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.630976][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 450.661481][T16739] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 450.679606][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 450.681689][T16739] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 450.695052][T16717] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 450.719686][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 450.738309][T16717] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 450.745640][T16739] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 450.751470][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:50:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 450.814262][T16739] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 450.832034][T16739] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 450.869682][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 450.899398][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 450.912626][T16739] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env 11:50:18 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:50:18 executing program 3: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) fstatfs(r1, &(0x7f0000000040)=""/24) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RCREATE(r2, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x4, 0x1, 0x5}, 0x3}}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x10080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000000000002000000020000000000000000000000000000000000000000f4ff00"/54]) 11:50:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 450.920535][T16739] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 450.968196][T16739] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 450.989915][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env 11:50:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 451.021722][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:50:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 451.086393][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 451.120988][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' 11:50:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) 11:50:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:50:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 11:50:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/227, 0xe3) fcntl$setlease(r1, 0x400, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0xbd777baf855cc854, 0x0) fcntl$setlease(r1, 0x400, 0x2) accept4$tipc(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi}]}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) fremovexattr(r2, &(0x7f0000000180)=@known='user.syz\x00') [ 451.183098][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 451.208523][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 451.221075][T16771] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 451.256810][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 451.273988][T16771] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 451.286626][ T8775] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 451.293797][ T8775] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:50:18 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 451.296380][T16770] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 451.306606][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 451.321318][T16770] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 451.363543][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 451.370946][T16771] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 451.403341][T16782] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 451.414144][T16771] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 451.426897][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 451.449460][T16782] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' 11:50:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 11:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 451.474810][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 451.487315][T16771] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 451.508972][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:50:19 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, 0xffffffffffffffff, 0x0) munmap(&(0x7f00008f1000/0x1000)=nil, 0x1000) [ 451.519363][T16771] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 451.526025][T16782] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 451.587144][ T3891] kobject: 'loop0' (000000005ecb448d): kobject_uevent_env [ 451.602437][ T3891] kobject: 'loop0' (000000005ecb448d): fill_kobj_path: path = '/devices/virtual/block/loop0' 11:50:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @msi={0x0, 0x0, 0xfffffffffffffffe}}]}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40a080, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 11:50:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 451.640607][ T3891] kobject: 'loop4' (00000000bf59c74b): kobject_uevent_env [ 451.650487][T16782] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 451.663511][T16782] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 451.684401][ T3891] kobject: 'loop4' (00000000bf59c74b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 451.711140][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 451.727934][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 451.748651][T16799] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env [ 451.756012][T16782] kobject: 'loop1' (000000000f3f4066): kobject_uevent_env [ 451.763460][T16782] kobject: 'loop1' (000000000f3f4066): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 451.794491][ T3891] kobject: 'loop3' (0000000059af002a): kobject_uevent_env [ 451.797844][T16799] kobject: 'kvm' (00000000bd1919e7): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 451.811116][ T3891] kobject: 'loop3' (0000000059af002a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 451.821875][T16782] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 451.823178][ T3891] kobject: 'loop5' (000000002e098023): kobject_uevent_env [ 451.838086][ T3891] kobject: 'loop5' (000000002e098023): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 451.850981][T16798] kobject: 'kvm' (00000000bd1919e7): kobject_uevent_env 11:50:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 11:50:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 11:50:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a0cccb0844ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0245720, &(0x7f0000000180)={0x0, {}, 0x0, 0xa07}) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 11:50:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec